Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/J_lEuHqfdAtrIoGBXssOg6KGTNc.roa
File: J_lEuHqfdAtrIoGBXssOg6KGTNc.roa (raw, json)
Hash identifier: R5jQvLFZuTeTO1XXDxIm0/t1UZUBwninyKsuWimB098=
Subject key identifier: 27:F9:44:B8:7A:9F:74:0B:6B:22:81:81:5E:CB:0E:83:A2:86:4C:D7
Certificate issuer: /CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Certificate serial: 018CC56DDEEE06F2F5FFE660E2BB54C8A1F4
Authority key identifier: D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/J_lEuHqfdAtrIoGBXssOg6KGTNc.roa
Signing time: Mon 01 Jan 2024 14:29:21 +0000
ROA not before: Mon 01 Jan 2024 14:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57535
IP address blocks: 91.232.210.0/24 maxlen: 24
91.232.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:de:ee:06:f2:f5:ff:e6:60:e2:bb:54:c8:a1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Validity
Not Before: Jan 1 14:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27f944b87a9f740b6b2281815ecb0e83a2864cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:fb:20:85:38:8e:c0:9e:50:6d:04:ad:e2:
73:89:99:e6:64:f2:8b:63:5e:94:b9:4d:96:84:fb:
1c:e5:c7:c2:93:51:0e:f3:69:13:02:97:7b:2e:8f:
3c:2e:2b:41:a9:9c:8f:27:01:fd:ef:c0:85:6a:a2:
4f:d8:16:c1:e1:94:70:5d:84:6a:a0:c0:28:82:37:
77:a3:24:d3:6d:69:ac:84:36:04:d2:ce:66:ff:bf:
0c:26:13:af:bc:fb:b7:81:d5:65:a8:bf:a7:a9:c4:
17:53:bc:5d:bf:1f:33:af:ab:3b:c0:37:42:f8:95:
0a:87:42:0d:41:36:e2:f5:21:73:24:73:b8:ee:ae:
7f:0d:b6:4b:1b:c5:35:95:97:31:82:dc:d7:ff:1e:
69:4a:27:f1:7d:39:e7:63:89:47:0f:ff:15:ce:17:
32:10:4e:b4:bd:5f:4f:ee:23:a8:43:76:7a:18:a6:
97:6f:dd:94:1e:92:0e:10:b8:cc:0d:8a:24:69:72:
d1:c7:e6:3c:97:b9:c0:52:5d:2c:bb:f9:e5:0c:ac:
ff:dd:c6:b6:5a:3e:ac:83:5d:bb:2d:0b:f8:b7:fb:
35:a2:e8:b1:5f:b5:7a:21:0b:33:67:16:ce:d4:ae:
75:46:9e:eb:be:fa:db:9c:f1:90:3a:64:01:21:0e:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F9:44:B8:7A:9F:74:0B:6B:22:81:81:5E:CB:0E:83:A2:86:4C:D7
X509v3 Authority Key Identifier:
keyid:D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/J_lEuHqfdAtrIoGBXssOg6KGTNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.210.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:b5:c7:50:c2:3e:1e:1b:47:47:58:08:5a:5e:d1:d6:f1:d0:
48:53:04:67:01:7b:b0:01:40:30:f5:c4:dd:4f:ab:46:11:cd:
eb:fc:db:cf:46:5f:8a:61:79:ea:24:ef:ba:14:c6:a6:51:80:
ce:8c:21:f9:f8:ca:2d:11:3f:ef:d5:0f:96:c2:22:ec:41:44:
27:31:33:dc:4a:20:42:6f:24:84:03:90:f1:84:6e:56:78:51:
38:d2:90:85:96:fc:f1:99:77:7e:b2:bf:e5:85:fc:fe:0e:35:
9c:0d:19:30:78:b2:c4:86:ce:da:13:0d:27:ae:c7:b1:72:1a:
da:4c:72:26:16:d3:1d:dc:62:e7:64:69:6b:50:33:f3:57:1c:
eb:48:f9:96:1b:7b:58:d4:eb:90:1f:9d:74:e0:b6:f0:ec:bd:
80:f6:47:a1:90:d3:91:84:e0:58:0c:f6:b5:fa:c0:32:e5:f9:
18:38:d3:d7:3d:c4:1b:8d:49:77:18:83:1a:6e:15:75:29:cf:
b5:22:9d:df:92:d9:d0:99:f9:1c:84:9f:42:87:a6:fd:fe:16:
46:0f:5a:dc:73:93:6f:91:ae:dd:c2:8f:f8:5d:a4:3e:04:e8:
6f:4d:7b:ea:c9:8f:44:a6:bb:b9:26:7b:05:77:6c:dc:43:a5:
9a:2b:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:21:15 2024 by rpki-client on console-fra.rpki-client.org