Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fGBLUzMpoNFzFuPIrrQzsawqK90.roa
File: fGBLUzMpoNFzFuPIrrQzsawqK90.roa (raw, json)
Hash identifier: rlyqgIO677YL8s6G8fpx4yfaVH0yQjvtRLwkdRSsqe8=
Subject key identifier: 7C:60:4B:53:33:29:A0:D1:73:16:E3:C8:AE:B4:33:B1:AC:2A:2B:DD
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB3ECB8F60DFB3010478052E8CBC08
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fGBLUzMpoNFzFuPIrrQzsawqK90.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 265753
IP address blocks: 91.242.81.0/24 maxlen: 24
95.214.152.0/22 maxlen: 24
193.37.200.0/22 maxlen: 22
91.242.107.0/24 maxlen: 24
91.242.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3e:cb:8f:60:df:b3:01:04:78:05:2e:8c:bc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c604b533329a0d17316e3c8aeb433b1ac2a2bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:b0:64:73:4f:27:7e:45:77:8e:a0:42:ae:
0a:be:ed:7b:7f:56:d5:7f:64:cd:5b:b5:18:05:cd:
a1:86:7a:32:c2:df:35:c9:59:76:62:42:5d:4f:7f:
47:7c:80:c9:0c:0c:23:74:49:a9:d4:fc:f9:a8:d4:
a8:3d:ad:e1:a6:68:81:c5:a7:ad:59:b4:8c:fa:65:
bc:ff:88:0a:86:f5:bd:da:82:85:92:4b:6d:85:50:
a7:2f:48:c7:b1:ca:d5:2d:e3:4f:a0:70:06:47:be:
1e:f1:a3:40:09:2f:14:1c:59:fd:2b:f7:b9:c2:8a:
bc:6d:44:cf:a8:92:97:cf:66:0c:42:69:ab:14:a9:
88:b5:9f:17:a8:9f:55:a0:0c:7b:52:6d:4e:ba:ef:
35:73:76:e3:00:5e:db:dd:c6:d1:dc:35:03:95:21:
14:62:10:88:4a:99:ed:d4:6f:79:25:f5:d3:16:54:
95:39:a5:ec:7d:5a:12:a5:87:23:86:85:2a:8f:c7:
44:68:46:39:0a:66:cf:01:ba:68:a6:8f:37:5d:ce:
7a:ea:22:f5:0c:85:91:75:b8:ac:72:69:69:3f:27:
ec:75:0e:eb:7c:87:05:54:b4:84:96:75:f4:e7:28:
a9:77:fe:ab:29:08:aa:45:2d:db:d9:92:cd:5b:1c:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:60:4B:53:33:29:A0:D1:73:16:E3:C8:AE:B4:33:B1:AC:2A:2B:DD
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fGBLUzMpoNFzFuPIrrQzsawqK90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.71.0/24
91.242.81.0/24
91.242.107.0/24
95.214.152.0/22
193.37.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:66:b2:97:98:24:6e:72:e2:be:61:9c:d6:21:67:68:e8:94:
3f:a2:4f:64:22:4b:4d:c3:9c:52:70:64:e2:2a:a5:eb:93:bf:
ba:c0:15:37:75:6e:0e:3d:e0:39:94:4f:ff:c2:9e:ff:7a:d6:
ec:ee:77:c8:ef:80:c3:c1:51:a2:bd:cb:48:9d:b0:40:ce:70:
a7:aa:5d:1b:af:3a:dd:c9:0d:62:cd:2b:be:98:3a:28:59:6e:
24:ef:fb:67:b3:d3:7b:07:70:66:ad:92:e0:1d:c6:4f:c3:63:
67:d9:cc:07:a9:40:bf:c8:21:ff:f0:0a:48:a2:06:e0:06:dd:
d3:7e:8b:3c:fb:e2:fb:39:04:fe:bd:72:c6:c3:c9:19:88:c5:
6c:1c:9b:85:5f:6b:69:26:55:af:8e:f0:20:1f:6a:53:0f:e9:
3a:07:ee:d9:59:2d:5f:03:f9:48:2c:07:e9:f9:04:09:26:d0:
17:bc:55:a3:2f:36:29:97:a0:93:11:86:e9:80:21:3b:36:ba:
c2:b0:bc:c8:39:73:5a:be:49:5b:c7:8d:16:02:9f:f4:86:a5:
8a:5d:56:ab:fa:4b:dd:aa:28:9e:7e:5c:c2:c5:56:12:d1:04:
e1:72:c1:0e:8b:2a:85:b1:82:48:dc:9a:ed:33:0a:31:20:ab:
91:02:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:52:36 2024 by rpki-client on console-ams.rpki-client.org