Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/vTO89jdr3FMJtd-WppYGevGiKaA.roa
File: vTO89jdr3FMJtd-WppYGevGiKaA.roa (raw, json)
Hash identifier: jQkanH6LbOdfJET67DY46PXbq8uhKaL+Ga0QPL4O6AM=
Subject key identifier: BD:33:BC:F6:37:6B:DC:53:09:B5:DF:96:A6:96:06:7A:F1:A2:29:A0
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB3A4AB7F4AA38E049DFD3A5A3D38E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/vTO89jdr3FMJtd-WppYGevGiKaA.roa
Signing time: Mon 01 Jan 2024 02:29:56 +0000
ROA not before: Mon 01 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207246
IP address blocks: 91.242.98.0/24 maxlen: 24
91.242.104.0/24 maxlen: 24
91.242.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3a:4a:b7:f4:aa:38:e0:49:df:d3:a5:a3:d3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd33bcf6376bdc5309b5df96a696067af1a229a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:13:89:88:36:db:c1:fb:36:1e:b3:96:76:18:
9d:ba:0b:52:c3:6a:f3:72:cb:66:ff:f2:f1:50:84:
6e:a4:d7:6b:89:61:ef:6e:60:7f:2d:2f:6f:4d:a4:
50:ae:df:58:08:e4:27:a9:c9:d6:cf:2b:3e:52:20:
d2:58:0c:d2:77:1f:e9:b3:fa:9b:4f:aa:41:ed:b4:
54:5a:54:01:69:18:c1:50:90:b4:c9:f7:0d:43:f5:
a1:ce:88:8a:7d:81:a2:f5:d7:54:be:85:bb:63:58:
57:05:5c:09:44:44:e3:c2:09:2c:57:c7:92:e3:c2:
ea:83:d7:b2:8a:44:9b:71:fc:aa:39:0a:7e:f2:c5:
74:47:f4:b3:7d:26:fd:10:fe:22:59:ff:c8:57:d5:
7b:bc:9c:23:87:ed:56:ee:df:ea:51:57:d3:c0:27:
21:7b:e7:61:f4:c6:4a:21:d0:2a:35:7a:05:c9:61:
d0:99:45:ec:60:e3:b5:af:4d:98:f5:b2:6c:e1:35:
97:5a:4d:ed:c5:fe:62:2d:65:7f:71:17:24:29:51:
ed:40:5a:4d:54:ba:d3:67:cd:fc:38:c8:79:93:26:
27:50:37:05:15:6b:f5:8a:0c:c9:b2:cb:c0:d9:fb:
07:c3:91:dd:6d:00:e8:fd:bd:0e:5a:00:5a:4f:ee:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:33:BC:F6:37:6B:DC:53:09:B5:DF:96:A6:96:06:7A:F1:A2:29:A0
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/vTO89jdr3FMJtd-WppYGevGiKaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.76.0/23
91.242.98.0/24
91.242.104.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d6:12:b3:60:b9:7b:c7:8f:09:a4:ea:fa:38:08:19:56:cd:
99:ef:47:ab:19:4e:9a:7e:5a:ae:04:02:7e:02:5a:0d:ea:0d:
b0:d7:c1:c3:0a:12:2c:f3:f0:2f:d2:88:9c:9b:0a:04:b4:5b:
ca:25:dc:69:9f:e1:07:39:d0:8f:f9:ee:57:3d:00:22:94:9a:
55:23:fd:62:6e:21:23:c3:0d:a2:9e:54:ba:3c:b2:cf:eb:c2:
73:bd:42:49:c0:ca:1e:9a:67:16:46:2f:84:cb:58:e2:35:d2:
c7:17:94:7a:4e:e7:e0:d0:90:73:69:49:d7:59:8e:58:99:96:
bc:ac:db:57:05:31:c6:9b:a8:a2:6a:90:34:9b:e8:9a:c7:b9:
38:b1:89:02:09:c6:80:98:65:1c:e3:00:db:fa:df:39:79:94:
8a:94:e7:21:f2:c1:e2:85:37:c5:5a:1c:6d:2b:e4:3a:f6:48:
76:ab:77:f3:7d:ee:c0:10:c6:b9:b5:2f:f6:15:31:12:ce:14:
6c:0f:0b:70:3a:be:66:7f:16:50:90:86:23:a2:13:0d:ef:24:
9f:75:8f:e2:6b:4c:b8:d9:9f:67:1d:28:4c:ea:9f:ba:4f:3c:
3c:49:34:e8:77:fd:e5:94:c0:7c:6f:e5:22:9b:0c:4f:ff:8f:
58:0d:ad:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:15:01 2024 by rpki-client on console-fra.rpki-client.org