Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GrRSvGN140M867kpY8OeKob6XLM.roa
File: GrRSvGN140M867kpY8OeKob6XLM.roa (raw, json)
Hash identifier: p4JqB5C3Jc1VkxCg5q/pJ3nuldQccT9DkfPgk3QtmpA=
Subject key identifier: 1A:B4:52:BC:63:75:E3:43:3C:EB:B9:29:63:C3:9E:2A:86:FA:5C:B3
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB2CD7BC1E15A6CD1339986CDDACA0
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GrRSvGN140M867kpY8OeKob6XLM.roa
Signing time: Mon 01 Jan 2024 02:29:52 +0000
ROA not before: Mon 01 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54903
IP address blocks: 91.242.83.0/24 maxlen: 24
91.242.81.0/24 maxlen: 24
91.242.100.0/23 maxlen: 23
91.242.107.0/24 maxlen: 24
91.242.108.0/22 maxlen: 22
91.242.64.0/22 maxlen: 22
91.242.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2c:d7:bc:1e:15:a6:cd:13:39:98:6c:dd:ac:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ab452bc6375e3433cebb92963c39e2a86fa5cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:17:2f:fc:8a:2b:62:63:ad:05:9c:47:46:ec:
35:c7:7d:0c:60:d5:97:16:ac:d1:2e:19:a5:a3:b4:
71:74:5a:fa:a9:3a:c6:ed:e6:f9:6f:f6:4b:b1:32:
20:bf:38:ea:74:6c:1e:43:8b:50:d7:d3:88:bc:eb:
f3:8e:f8:41:ef:a7:df:8f:b1:f9:a0:a0:04:45:15:
a2:07:17:69:dd:8b:25:8c:6c:73:bb:ba:a6:44:11:
06:9a:d2:7a:c1:39:e9:18:52:c9:1d:2f:33:e7:80:
cc:73:24:43:8a:df:fc:1d:95:32:fb:a5:99:bd:c8:
6b:74:65:81:26:60:a6:9a:89:a2:16:88:1d:4e:da:
35:1d:68:eb:8d:2f:62:c1:72:44:1b:03:53:47:e7:
93:ab:39:f8:a3:e4:f7:a2:2a:41:18:38:66:82:ee:
0f:44:7f:11:ea:6a:94:5e:e8:65:fe:e7:ba:2f:0a:
3c:ca:bd:56:b4:3f:4c:16:5c:d7:60:d8:f4:1d:8e:
d0:22:0d:ce:1f:dd:d6:c1:a0:d7:49:7e:74:e2:11:
13:e8:b9:ec:1f:16:7d:24:3a:dc:f4:36:1d:40:af:
a0:75:77:c5:d3:cc:8a:1a:ec:a7:9c:0b:7f:95:10:
5e:e0:c2:98:f4:a4:33:06:e5:db:50:d9:2e:63:02:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B4:52:BC:63:75:E3:43:3C:EB:B9:29:63:C3:9E:2A:86:FA:5C:B3
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GrRSvGN140M867kpY8OeKob6XLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.64.0/22
91.242.71.0/24
91.242.81.0/24
91.242.83.0/24
91.242.100.0/23
91.242.107.0-91.242.111.255
Signature Algorithm: sha256WithRSAEncryption
70:ec:0d:ce:de:17:2e:79:22:1e:c2:35:a8:d0:34:0a:97:c7:
f0:e7:dc:25:93:eb:e2:e8:fb:cf:25:ba:86:2a:15:af:8a:83:
38:5f:05:68:03:bb:62:26:51:de:d6:6d:15:4a:86:f7:fc:13:
83:d9:42:fb:13:d1:12:d9:16:51:e2:48:e7:b0:11:87:34:8b:
02:73:05:f4:1e:cb:f8:d2:13:8b:a1:fb:f5:25:65:f7:55:c5:
a6:10:48:57:c3:5b:e1:63:a6:6b:65:79:71:6a:e6:41:03:5d:
06:ae:50:ac:84:6c:07:06:21:22:e6:80:78:c3:3a:ab:2a:34:
df:2e:8e:ac:af:5e:81:0f:c2:61:20:2a:c4:84:35:34:34:1e:
d0:13:a1:75:d0:ca:1a:07:4d:4e:52:32:d9:8d:a9:64:73:81:
09:c7:96:99:44:11:6d:fd:4b:48:1b:1d:d1:17:80:e3:6d:d3:
f7:31:13:a5:61:47:3b:d4:f4:88:c3:b4:6e:16:22:09:71:f3:
1f:47:0d:47:c3:da:06:49:33:0d:d9:20:35:87:67:df:b7:32:
c3:53:3c:ec:b3:54:22:b5:e7:d0:a9:c1:0e:54:16:21:c9:53:
7e:44:3e:da:e3:31:73:e6:bf:3f:2a:6a:b6:d6:0c:25:b7:e4:
8e:17:8c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:57:30 2024 by rpki-client on console-fra.rpki-client.org