Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/myAkV5n5ve2wBxFyg9V-utOCse0.roa
File: myAkV5n5ve2wBxFyg9V-utOCse0.roa (raw, json)
Hash identifier: D8litqhAA4856pcMmJHjFWilzxV4mOMXtQTr/YwJ54k=
Subject key identifier: 9B:20:24:57:99:F9:BD:ED:B0:07:11:72:83:D5:7E:BA:D3:82:B1:ED
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB24F8E9DC46C930462FFDF81A5A54
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/myAkV5n5ve2wBxFyg9V-utOCse0.roa
Signing time: Mon 01 Jan 2024 02:29:50 +0000
ROA not before: Mon 01 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6461
IP address blocks: 91.242.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:24:f8:e9:dc:46:c9:30:46:2f:fd:f8:1a:5a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b20245799f9bdedb007117283d57ebad382b1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:37:57:26:d0:7e:91:42:b1:82:56:ac:f4:
04:20:69:1d:b1:de:84:75:45:a1:b5:7b:18:2e:b8:
03:23:c3:8d:b3:ad:ee:cf:7d:63:7b:5f:6b:89:5c:
2c:9a:a9:74:17:35:03:32:af:f7:db:65:58:39:8b:
26:7e:c8:82:05:7f:f1:e1:55:01:90:e3:48:98:d8:
e4:ea:f7:d9:12:92:c3:da:b6:69:9d:18:3a:d7:87:
87:90:a9:a4:52:1a:5e:ec:b8:d5:ee:45:0e:fc:0c:
4c:83:52:50:f2:31:7e:69:0d:98:26:dc:2b:57:90:
78:8c:a7:98:14:3a:47:4e:3e:1a:6f:40:8f:8a:70:
e0:ed:7a:b1:8f:c2:5a:25:d7:2b:fb:2e:67:e3:00:
de:60:ff:c5:b2:a4:16:75:af:22:e8:3c:d1:f6:06:
b1:fc:6e:2e:27:ab:4e:3f:6c:15:bf:16:4b:5e:74:
ce:3e:08:1b:18:1c:82:91:d2:ee:91:2b:6e:5d:ce:
22:04:a7:c4:6a:ff:ab:85:2a:f8:24:aa:77:0e:19:
51:5e:76:9b:50:3c:8c:a6:2a:55:d3:70:9c:21:ba:
6c:95:a1:d9:68:64:64:f9:7b:0d:e8:1b:30:30:3e:
b8:3a:e2:f7:17:d9:31:bc:11:5a:58:93:a9:6f:b3:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:20:24:57:99:F9:BD:ED:B0:07:11:72:83:D5:7E:BA:D3:82:B1:ED
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/myAkV5n5ve2wBxFyg9V-utOCse0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.108.0/22
Signature Algorithm: sha256WithRSAEncryption
72:e3:30:1d:db:1d:e2:08:01:3e:71:c2:f4:a0:11:7b:2f:b5:
6a:c2:e8:01:bc:e5:d0:b3:ca:67:41:6d:cc:2a:ff:5f:76:2b:
88:29:71:31:e9:4c:91:33:ff:c2:68:2d:f5:e4:3d:84:ab:54:
7b:a1:13:c1:9b:ee:59:d3:ed:0b:af:d8:5e:2d:ea:32:97:24:
41:a6:7c:64:70:f1:75:cc:a8:ec:22:ed:78:87:bb:9a:b4:53:
c5:38:1f:37:0b:f0:58:d8:95:9c:c8:59:06:31:9a:3f:d5:d7:
4c:ea:94:e0:3c:4f:87:66:34:7f:30:ac:ee:d6:70:84:b4:9f:
ea:e0:8f:84:31:ba:0f:c5:82:ba:69:8d:b9:5e:98:70:5e:30:
fa:18:0f:a4:e8:1d:f4:b4:ca:26:9e:7d:33:f8:aa:18:6e:f1:
cb:bf:cc:cf:f8:a0:86:ac:9c:dd:84:04:1e:d3:1d:09:f5:1c:
fd:d4:c0:0e:9d:7a:5b:9d:56:c1:2e:9e:fe:1d:3f:f1:ff:ff:
41:c8:43:c6:15:d4:e1:43:6d:45:02:6a:88:89:a2:cc:8b:d5:
34:46:00:fc:a0:f1:ba:62:35:b1:c5:7a:7f:ee:bc:08:3f:1d:
99:d3:a7:41:25:af:eb:96:41:9a:a7:ef:8a:3c:9e:b8:5e:be:
70:b7:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:46:23 2024 by rpki-client on console-fra.rpki-client.org