Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/56131f-ff9b-49e1-a72b-16faa92ca53d/1/kyDOPGSE7TJvLr9LhUwzCrcpZuw.roa
File: kyDOPGSE7TJvLr9LhUwzCrcpZuw.roa (raw, json)
Hash identifier: cxtJmHfAF0/BiH3tq3BhJXlnP1v8gRtmYwTMVpyy4J0=
Subject key identifier: 93:20:CE:3C:64:84:ED:32:6F:2E:BF:4B:85:4C:33:0A:B7:29:66:EC
Certificate issuer: /CN=beced78ac454f7c459bc13bdb4795a76703c8b98
Certificate serial: 018CC26D151A3DDE913EC17103B71B3CB45C
Authority key identifier: BE:CE:D7:8A:C4:54:F7:C4:59:BC:13:BD:B4:79:5A:76:70:3C:8B:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7XisRU98RZvBO9tHladnA8i5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/56131f-ff9b-49e1-a72b-16faa92ca53d/1/kyDOPGSE7TJvLr9LhUwzCrcpZuw.roa
Signing time: Mon 01 Jan 2024 00:29:37 +0000
ROA not before: Mon 01 Jan 2024 00:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206381
IP address blocks: 185.186.40.0/22 maxlen: 22
91.237.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/56131f-ff9b-49e1-a72b-16faa92ca53d/1/vs7XisRU98RZvBO9tHladnA8i5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/56131f-ff9b-49e1-a72b-16faa92ca53d/1/vs7XisRU98RZvBO9tHladnA8i5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vs7XisRU98RZvBO9tHladnA8i5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:15:1a:3d:de:91:3e:c1:71:03:b7:1b:3c:b4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beced78ac454f7c459bc13bdb4795a76703c8b98
Validity
Not Before: Jan 1 00:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9320ce3c6484ed326f2ebf4b854c330ab72966ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:88:9b:bd:fd:70:ca:39:44:dc:7b:65:c1:53:
bf:77:c2:73:73:25:09:f7:41:4a:b4:b6:9a:79:1a:
68:9f:dc:f1:4b:18:3f:e9:e7:aa:68:c9:0f:7e:ed:
41:cd:a5:0a:b0:a8:cc:76:7d:4c:f2:34:c4:85:71:
76:c3:32:6d:be:84:4b:6a:42:9c:05:a3:f8:6e:9a:
33:54:c6:eb:b6:55:66:27:24:44:d9:3e:46:6c:f1:
39:d8:07:1c:29:95:ef:a0:68:22:11:de:5c:e7:b1:
b3:fd:f7:a9:13:ee:9d:ad:bf:1f:3b:35:86:52:93:
e3:e3:0e:d8:04:a2:4d:d1:4a:d7:1e:6e:7d:f6:5e:
09:d5:38:98:bc:83:a7:50:f2:3c:da:e6:5c:43:77:
67:dc:67:7c:e5:3b:58:dd:38:f5:8c:a7:db:96:7a:
0f:b1:86:b0:90:9f:b0:1e:6e:58:55:f6:66:0b:1b:
3f:79:81:fa:8c:9f:c0:df:4a:69:a0:75:bd:25:2a:
79:2b:d4:5c:a4:9c:c2:f6:40:86:2c:94:a9:5e:6b:
bc:68:99:a0:99:68:80:00:ff:d2:9d:5d:14:a8:fc:
56:25:a4:4e:1e:c4:26:46:db:59:96:f5:6a:04:e4:
bb:f5:7c:51:97:75:d1:1c:d0:08:b1:52:b2:57:af:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:20:CE:3C:64:84:ED:32:6F:2E:BF:4B:85:4C:33:0A:B7:29:66:EC
X509v3 Authority Key Identifier:
keyid:BE:CE:D7:8A:C4:54:F7:C4:59:BC:13:BD:B4:79:5A:76:70:3C:8B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7XisRU98RZvBO9tHladnA8i5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/56131f-ff9b-49e1-a72b-16faa92ca53d/1/kyDOPGSE7TJvLr9LhUwzCrcpZuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/56131f-ff9b-49e1-a72b-16faa92ca53d/1/vs7XisRU98RZvBO9tHladnA8i5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.151.0/24
185.186.40.0/22
Signature Algorithm: sha256WithRSAEncryption
99:b1:a9:c5:94:02:1b:a8:44:a2:7d:e6:4b:98:57:11:8a:a0:
2b:09:f4:56:09:b4:6e:ea:13:f7:6d:fe:9e:7a:ec:90:81:82:
d9:d6:b9:9e:ab:c5:2e:71:20:fd:8a:29:86:58:74:cc:e7:63:
88:d3:09:9c:26:0d:2d:84:8a:db:c8:d3:00:4d:1b:43:ed:c1:
86:ce:c6:0d:48:c9:0a:2b:56:6a:0a:0b:ac:5f:3f:49:af:af:
e3:47:8b:6c:22:50:07:97:01:96:0e:7b:f1:b0:a0:a8:4f:a5:
a1:86:23:d9:09:2f:0a:f6:24:51:e8:39:ca:1b:a1:0c:71:16:
8f:2b:9a:f3:40:60:3b:d6:ad:9f:04:2f:fe:92:08:0a:a6:67:
af:d6:db:cc:11:7a:6f:9f:a0:d2:c3:37:fb:07:da:9d:0d:7c:
15:73:0f:26:48:b3:42:87:7e:aa:4d:17:29:41:3e:42:f5:39:
f7:75:02:0e:01:d6:a9:8d:b8:eb:ff:db:5b:d1:03:5e:66:53:
db:71:f4:c5:7d:83:fd:4b:fd:fd:bd:82:82:d6:82:55:36:c8:
9e:07:0c:4a:29:5e:8f:92:a4:75:bc:9f:66:95:92:20:aa:8b:
14:d9:c6:3d:20:5c:26:4b:56:a2:d1:a9:7b:ee:e9:3e:7d:b9:
d8:5b:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:16:02 2024 by rpki-client on console-ams.rpki-client.org