Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/ubRVwzdGReTzgXA9IHD-hKxUlhU.roa
File: ubRVwzdGReTzgXA9IHD-hKxUlhU.roa (raw, json)
Hash identifier: ZAX/VuNxnc29LHeqAdWwCVvQAzn2EfOmR0eloWLDonA=
Subject key identifier: B9:B4:55:C3:37:46:45:E4:F3:81:70:3D:20:70:FE:84:AC:54:96:15
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 018CCA2A86F65C957514C57B14DC9E03851A
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/ubRVwzdGReTzgXA9IHD-hKxUlhU.roa
Signing time: Tue 02 Jan 2024 12:33:53 +0000
ROA not before: Tue 02 Jan 2024 12:33:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206150
IP address blocks: 91.200.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:86:f6:5c:95:75:14:c5:7b:14:dc:9e:03:85:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Jan 2 12:33:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9b455c3374645e4f381703d2070fe84ac549615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:d6:94:79:2c:fa:6c:22:01:cf:9c:e2:e0:
b1:90:1c:75:c4:36:d7:30:10:c5:2f:b2:e3:69:2d:
d8:06:46:41:f5:44:f8:06:03:da:fb:b1:72:d3:2b:
91:24:e2:eb:78:92:fb:40:86:86:b2:2a:dc:01:ca:
d8:40:8d:26:12:ff:c4:ae:a1:50:30:f1:5a:c2:5a:
e8:95:63:36:ec:c9:17:97:e0:62:29:be:09:7c:2b:
01:75:31:8d:e1:e9:49:b7:31:31:c0:a9:d8:5e:6c:
dc:e7:de:db:de:0d:d7:6b:eb:37:19:73:44:51:04:
23:28:c4:fc:f6:68:d1:3d:39:c8:d3:17:7f:5e:e3:
99:a4:e5:a3:b1:aa:ba:60:73:31:71:3e:af:b0:c9:
4d:4c:81:1b:da:be:87:6f:03:fe:7f:4f:f4:0f:bc:
90:5e:27:75:e1:73:28:13:0a:c8:e8:53:21:03:19:
24:00:00:a6:55:e1:12:8a:a8:dc:33:00:13:34:77:
05:37:fe:44:54:46:7a:1d:b7:2e:57:88:e4:d0:03:
7b:9e:9e:b1:48:8c:64:7f:eb:66:88:95:f7:34:b7:
19:da:86:9b:62:d1:15:1f:e2:90:04:1f:c4:67:8e:
b8:d4:c3:7f:d3:f2:c9:d2:e7:d7:f5:40:54:69:9c:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B4:55:C3:37:46:45:E4:F3:81:70:3D:20:70:FE:84:AC:54:96:15
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/ubRVwzdGReTzgXA9IHD-hKxUlhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.56.0/24
Signature Algorithm: sha256WithRSAEncryption
57:36:7a:6b:37:29:03:e6:c5:e2:3e:be:95:c7:17:54:29:16:
5b:12:c4:c8:98:6c:6b:b8:cd:2c:1c:4e:06:c7:60:40:ee:9b:
62:8d:fa:1c:14:9c:a1:c2:8f:a9:02:4a:86:1d:d8:22:4f:8a:
eb:97:b4:de:1f:f5:18:d3:b5:f8:0f:d2:42:04:f6:fe:78:d2:
6f:43:96:b7:38:27:df:3e:b4:91:01:43:df:c8:10:29:04:76:
6b:41:4b:03:e9:04:5c:41:04:ea:21:2d:34:00:11:30:bd:a0:
dd:d4:e2:a7:39:cd:55:42:0d:31:5e:eb:de:e5:c3:9c:06:96:
26:b7:e9:55:00:0c:20:34:34:13:d1:02:55:8e:f4:d4:94:b6:
54:5c:ef:28:03:63:68:a1:ee:95:52:d9:1c:b6:96:c8:d6:01:
36:77:23:b7:f6:5e:0d:ac:7d:02:46:ec:de:fa:35:43:45:64:
f3:d9:dc:31:0b:cc:90:75:73:af:78:4d:45:b4:d7:99:28:63:
01:c8:79:9c:02:37:6d:c2:91:6f:d2:51:fc:50:1f:04:a6:f3:
f3:6b:4f:b5:23:a9:8c:33:49:46:4d:35:e5:01:19:eb:cc:d9:
ff:04:3a:d1:5e:db:55:b4:4b:b4:1e:a6:33:b3:a3:a2:bd:c8:
0d:0c:47:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:46:07 2024 by rpki-client on console-fra.rpki-client.org