Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/8sOMRq3xsoRBp7TdpIKMCQ6MJuE.roa
File: 8sOMRq3xsoRBp7TdpIKMCQ6MJuE.roa (raw, json)
Hash identifier: 49i1/QcMCTIJEzlwd6DLNRsi3SVVb9KD9ZCLatWf+sM=
Subject key identifier: F2:C3:8C:46:AD:F1:B2:84:41:A7:B4:DD:A4:82:8C:09:0E:8C:26:E1
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 018CC795407444E5E27000A03EBA1EFCB851
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/8sOMRq3xsoRBp7TdpIKMCQ6MJuE.roa
Signing time: Tue 02 Jan 2024 00:31:36 +0000
ROA not before: Tue 02 Jan 2024 00:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31742
IP address blocks: 91.208.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:40:74:44:e5:e2:70:00:a0:3e:ba:1e:fc:b8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jan 2 00:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2c38c46adf1b28441a7b4dda4828c090e8c26e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:0d:cc:fb:69:26:e3:77:d9:ab:3c:8e:fc:
0f:93:fe:5d:4f:7d:cd:cf:bf:82:0a:e5:a4:51:61:
b9:ce:f5:ff:c2:17:4a:c3:7f:0c:55:5d:ab:44:13:
db:1b:d4:6d:32:23:0d:bd:9f:1a:47:c2:b1:07:74:
55:e4:0b:47:1d:eb:25:21:87:db:45:10:5a:69:db:
72:d3:1d:ba:a6:91:4a:08:24:0d:c8:7a:b7:73:3b:
8d:4a:a2:55:30:07:1b:db:e8:a7:07:dc:46:be:ba:
ca:73:3c:3a:3d:b5:08:2c:40:e0:ac:03:31:d0:c6:
7e:d7:53:f1:b5:d4:43:a9:a2:c0:88:d3:ab:e8:12:
46:e4:e7:bb:18:27:17:08:5d:eb:6a:63:64:8d:77:
34:d3:20:ef:01:e8:04:32:23:ee:7c:da:61:c8:8c:
99:54:bf:f2:a4:9a:ae:b5:62:67:6d:a7:5b:1d:a1:
90:5a:4a:21:cf:bc:96:35:f5:f1:2b:87:9f:52:4f:
76:97:89:c6:ed:c1:0c:fb:4c:63:72:e1:08:80:8e:
dd:c8:68:2f:e7:ab:a5:53:c7:f0:6e:43:38:ea:b6:
af:43:49:80:c7:5e:bd:18:48:4f:99:29:3d:9a:f6:
a3:24:a2:d2:46:12:cc:e1:e2:eb:5a:18:d1:2f:5d:
ad:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C3:8C:46:AD:F1:B2:84:41:A7:B4:DD:A4:82:8C:09:0E:8C:26:E1
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/8sOMRq3xsoRBp7TdpIKMCQ6MJuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.114.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e4:94:15:1d:54:e1:18:37:10:8d:8a:ee:5f:aa:21:aa:82:
72:74:21:36:3c:6b:aa:dc:21:0e:c9:03:c8:8a:02:65:e7:63:
0f:03:c4:95:77:ff:93:30:6a:0c:16:a8:a8:b8:9b:f3:15:bc:
8c:8a:9f:3f:a5:98:f4:6e:d5:65:93:a5:af:91:c1:27:a9:a8:
24:9d:85:40:6d:5f:c7:62:d0:14:c8:7d:4d:37:1c:07:ac:a0:
d7:6a:15:e2:d2:89:ee:73:2e:dd:7b:bc:a8:d1:1a:81:4b:d9:
aa:c6:dc:5e:c1:2c:5a:8a:1a:07:ed:4a:35:67:00:47:a0:8a:
fd:7b:fd:cc:e0:7c:f4:7b:61:ab:41:ec:b8:a2:7e:5a:f1:89:
1d:f1:56:31:58:e0:85:00:90:ab:2b:50:95:de:db:e8:16:1e:
ba:ed:7c:c8:c9:78:4e:28:53:8b:86:70:ba:be:4a:05:4f:ee:
84:ec:48:8a:37:7c:39:00:b4:44:04:7a:c6:d0:b8:64:13:94:
67:7b:05:9e:cc:06:27:e4:1b:27:d1:96:21:11:51:e5:b1:49:
62:d2:4d:6e:5d:69:e1:28:cd:d5:b6:47:6b:87:50:a4:cb:e8:
7a:c5:b6:fc:e9:7d:40:48:46:25:0d:19:41:15:20:80:6f:db:
7c:de:2a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:43:14 2024 by rpki-client on console-fra.rpki-client.org