Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/b5w2EvVoItlslwJd6SbD-x5hohM.roa
File: b5w2EvVoItlslwJd6SbD-x5hohM.roa (raw, json)
Hash identifier: 8UrJ+2x3AO8EAmLF+r+zlvTK2Dr9wCsUxT/JTUnh9n8=
Subject key identifier: 6F:9C:36:12:F5:68:22:D9:6C:97:02:5D:E9:26:C3:FB:1E:61:A2:13
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 018CC56EDCA85F32F844BF0C657DD884A943
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/b5w2EvVoItlslwJd6SbD-x5hohM.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 91.209.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:dc:a8:5f:32:f8:44:bf:0c:65:7d:d8:84:a9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f9c3612f56822d96c97025de926c3fb1e61a213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:59:1a:67:dd:bb:bb:33:96:d4:64:19:f6:
09:6f:4d:e5:02:b9:a8:cd:ab:50:7b:f6:d3:de:94:
5e:76:a1:9e:94:26:85:b0:b4:4b:d3:cb:60:64:49:
3b:8d:5d:94:9b:d2:05:42:14:84:0d:05:cf:7f:3c:
ee:42:2e:33:6e:38:f4:5a:e5:c8:f1:13:f5:8d:9c:
8b:a8:26:a3:04:43:e6:6b:bf:b6:e2:c2:6e:e0:11:
48:70:2f:7c:9f:ff:8a:e5:77:82:fc:de:0e:1d:77:
f5:a7:46:68:29:bf:5d:67:62:9a:10:f4:8e:c9:c4:
53:24:f5:9c:5f:d2:21:a8:3c:dd:bc:91:1a:b1:09:
92:7b:d8:11:5b:27:1a:c7:75:1f:86:b3:61:11:33:
43:0d:b6:99:37:ee:7d:e4:e6:d1:e4:84:ff:b3:09:
7e:5a:56:3b:5e:d3:99:af:56:ec:28:2e:cc:40:70:
6c:f6:85:88:f5:b7:68:e8:b7:80:36:bb:6d:88:58:
ff:b0:e3:b3:51:f1:e7:33:cc:be:a8:47:1f:f4:47:
b4:a6:7f:74:61:97:3e:e0:c3:56:9d:5f:5b:45:55:
4c:6a:15:92:70:a1:dc:59:a1:f0:c0:2c:c7:f9:ea:
75:ff:9f:8c:48:87:b0:d2:2d:20:d5:30:a2:90:eb:
00:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9C:36:12:F5:68:22:D9:6C:97:02:5D:E9:26:C3:FB:1E:61:A2:13
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/b5w2EvVoItlslwJd6SbD-x5hohM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.228.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c6:f2:82:b5:43:9a:08:4c:b2:54:85:5f:de:bc:40:e3:6e:
08:64:bf:df:fd:b0:86:60:68:5b:e9:c6:23:9d:8b:79:92:f3:
52:0d:88:92:61:bc:1d:66:db:b4:d5:70:d5:62:18:af:24:0e:
8d:5c:ff:f0:ed:05:01:cf:35:e7:eb:85:a3:2d:6d:d6:d0:fc:
9a:ae:74:ea:75:3f:48:94:d4:51:f9:cd:92:61:e6:c3:bc:6d:
2a:ef:3b:d2:1f:65:66:d1:28:60:1d:ef:af:19:e5:c3:5b:2f:
b9:7a:2b:4a:c1:d8:76:5d:e1:5f:76:0c:db:fd:81:d6:df:89:
f7:13:4b:bf:92:a1:09:63:f4:c4:25:fe:14:73:8b:22:ab:22:
6d:2c:7d:34:21:b5:cb:5a:bb:e6:58:5a:3a:a3:e9:6a:8e:3a:
af:9b:52:b3:90:fb:63:ad:bb:02:3d:64:08:4f:2c:99:41:63:
ea:22:04:9f:c1:4b:f5:d9:de:bf:3d:89:85:c1:9a:d4:ab:26:
fc:f8:bf:78:35:cd:ca:0b:6b:fa:cf:37:a6:9c:87:7c:6f:a3:
33:3e:bc:0e:77:67:0e:96:cc:7a:19:0f:0c:67:4e:82:53:6f:
e5:52:13:2c:c2:35:cd:06:01:79:2d:dd:4c:61:fc:50:8d:02:
cf:88:14:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:21:27 2024 by rpki-client on console-ams.rpki-client.org