Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/GUslZKooxOpY-G-6Kn7cJWhgyI0.roa
File: GUslZKooxOpY-G-6Kn7cJWhgyI0.roa (raw, json)
Hash identifier: jcrG0VWq6D6SkYH7OfD9zHE7Z3jdKHzZoL5Q+ML04Sg=
Subject key identifier: 19:4B:25:64:AA:28:C4:EA:58:F8:6F:BA:2A:7E:DC:25:68:60:C8:8D
Certificate issuer: /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial: 018CC86F4785074E882E3D368BB59F9B744A
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/GUslZKooxOpY-G-6Kn7cJWhgyI0.roa
Signing time: Tue 02 Jan 2024 04:29:45 +0000
ROA not before: Tue 02 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51914
IP address blocks: 91.221.129.0/24 maxlen: 24
91.221.128.0/24 maxlen: 24
91.221.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:47:85:07:4e:88:2e:3d:36:8b:b5:9f:9b:74:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Validity
Not Before: Jan 2 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=194b2564aa28c4ea58f86fba2a7edc256860c88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ec:61:e0:2f:04:7d:d6:96:12:f8:95:3d:b8:
c6:e2:85:3d:fd:95:74:3a:6b:0c:65:7f:df:0d:a3:
d9:46:0e:65:c5:26:0b:b6:b9:a5:0d:4b:78:b1:f6:
6a:85:2f:65:d1:2d:99:7f:82:6c:b4:d0:d3:16:77:
61:39:91:e2:15:cb:28:7e:21:0f:80:7f:b8:45:65:
ef:ff:4f:f0:dc:0a:07:9b:ff:80:2e:e6:5d:71:eb:
cb:64:99:bb:76:1a:d3:bc:f5:ad:32:41:13:be:48:
9a:d4:d6:20:d7:26:8a:e4:90:89:f1:7c:6f:18:9b:
ea:13:69:a7:97:3a:fa:d9:09:2c:25:40:3c:3e:a6:
65:d6:c0:7a:5c:7e:67:dd:8d:82:7b:83:be:1f:5a:
d2:e6:0d:91:4c:db:a2:f8:16:38:f7:9e:8b:de:8e:
d8:57:ae:cb:3a:fd:64:3d:69:91:37:40:ad:ee:7a:
28:6d:92:8a:b1:8e:07:88:7f:67:e8:fa:6a:0b:d3:
c7:26:e1:04:ad:dd:b8:c0:17:3e:b1:82:7d:b9:58:
db:29:60:e4:41:02:b3:b4:8f:ac:b2:3b:f2:65:5c:
5d:47:74:90:98:ff:27:92:d3:b8:81:60:e7:84:1d:
c3:7d:6d:4e:9b:cc:25:a7:c4:a5:00:31:c0:ca:d1:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4B:25:64:AA:28:C4:EA:58:F8:6F:BA:2A:7E:DC:25:68:60:C8:8D
X509v3 Authority Key Identifier:
keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/GUslZKooxOpY-G-6Kn7cJWhgyI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.128.0/23
Signature Algorithm: sha256WithRSAEncryption
62:10:3f:45:ed:65:20:e6:6a:7b:98:22:4f:1c:e4:e6:b4:04:
d0:52:e4:3b:a5:aa:98:c8:3c:aa:d8:c7:8a:3d:cf:0c:99:ab:
ec:96:c4:10:e6:f6:da:03:c3:e3:36:57:ae:b7:f0:a2:5c:df:
38:24:d4:58:e7:fc:fa:8b:ff:a3:ab:f6:37:d8:da:74:5c:41:
a0:69:d4:9d:c4:86:e3:27:de:74:67:3d:07:97:72:dc:48:aa:
1c:15:62:01:76:16:fd:3e:72:4f:83:65:46:cf:68:03:f1:c6:
1e:4a:87:84:36:9a:d7:ba:23:2e:df:b3:86:83:c5:89:27:f1:
99:17:5e:23:86:44:2a:92:0e:d9:07:6d:be:a3:ed:e8:64:bb:
ca:3e:76:23:c8:15:34:3e:fe:f0:58:cc:2a:c5:0a:69:ff:79:
2b:dd:e2:78:24:20:5c:26:bf:03:ca:71:ec:70:11:be:74:86:
65:e2:81:71:18:50:41:18:a4:0c:85:56:2b:26:01:9f:32:69:
34:1f:4e:3f:08:53:18:16:26:d5:d1:ef:4c:e4:69:70:df:48:
ba:21:a3:31:72:8a:ff:d3:80:48:77:0c:0e:8e:00:23:d1:e2:
f4:81:a5:f1:c0:6a:12:0a:e4:58:46:d6:d7:03:9a:e9:07:5c:
d3:4a:a6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 10:34:22 2024 by rpki-client on console-fra.rpki-client.org