Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/gou2ttCbV52FuDOcNff0-7b9UEM.roa
File: gou2ttCbV52FuDOcNff0-7b9UEM.roa (raw, json)
Hash identifier: wdln6pYRungnMe3/2qgPP75Iezrya91QfmG7QFPjB0U=
Subject key identifier: 82:8B:B6:B6:D0:9B:57:9D:85:B8:33:9C:35:F7:F4:FB:B6:FD:50:43
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 018CC801873A4252FB744855E1A2D9FC8338
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/gou2ttCbV52FuDOcNff0-7b9UEM.roa
Signing time: Tue 02 Jan 2024 02:29:52 +0000
ROA not before: Tue 02 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198437
IP address blocks: 91.234.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:87:3a:42:52:fb:74:48:55:e1:a2:d9:fc:83:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Jan 2 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=828bb6b6d09b579d85b8339c35f7f4fbb6fd5043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:40:68:19:00:46:93:f3:c8:f8:16:d0:a8:d5:
d2:b7:a2:5d:32:c1:1e:40:95:b1:b7:07:70:0c:1c:
ef:5c:5b:6e:a5:ae:a9:56:a2:2d:71:19:ce:6d:8d:
7f:0c:bc:67:e9:69:9f:0f:67:fd:c2:a7:5e:9a:b0:
d0:f9:de:0a:e1:98:2a:c2:32:67:89:b1:f3:a4:b9:
78:d5:39:a7:40:87:5f:0e:02:6b:fa:a3:55:94:33:
51:79:2c:1d:87:e3:5b:fc:f4:e1:a4:da:73:21:22:
cd:2b:4b:ea:ec:fa:9f:05:02:5b:4e:de:b3:3d:a8:
cc:9c:35:ea:68:e6:56:5a:18:72:9b:3b:da:66:5d:
38:26:19:ec:ca:c8:4e:b4:eb:56:79:79:59:3c:e0:
bb:4c:c2:22:7e:29:2c:fc:0f:69:9f:77:d2:2e:67:
95:f3:d0:e8:1d:8b:b4:d2:b0:88:be:3a:13:49:b5:
2d:e2:2d:92:2b:ad:5f:b4:28:f1:75:e7:f3:32:d0:
eb:5a:9d:b8:9c:9f:67:49:0c:9b:c5:dc:17:e5:cb:
1b:31:b7:be:34:5b:a7:cd:d4:3a:e9:fb:44:5d:ce:
d4:d0:03:44:63:48:d1:b6:37:33:44:de:8c:32:e6:
74:19:87:3e:2d:7d:04:9e:0e:41:0e:a2:1a:82:9c:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8B:B6:B6:D0:9B:57:9D:85:B8:33:9C:35:F7:F4:FB:B6:FD:50:43
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/gou2ttCbV52FuDOcNff0-7b9UEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.188.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:09:84:15:94:7a:90:09:4b:6f:ee:b2:b0:9b:1d:34:46:de:
7d:b1:75:5a:41:e4:c9:6f:e7:61:a9:2d:1f:d0:52:ad:8a:e7:
e8:75:fd:a3:e3:c2:66:39:60:79:4e:19:63:05:68:85:75:e8:
88:9f:d5:6d:42:7e:82:80:4b:1e:11:da:4d:9f:51:b6:99:cc:
3e:4f:fd:d7:82:84:ca:81:fe:d2:6c:5c:ca:d0:36:54:d9:56:
dd:c6:2a:dd:0f:22:26:c7:f6:1c:41:42:39:95:40:dc:05:ba:
a4:30:00:38:73:c4:89:69:d6:a4:d5:49:ad:72:4f:ce:da:34:
e8:56:05:59:3a:37:64:a3:52:2e:96:55:01:24:8b:1b:19:c2:
fb:41:8f:46:06:31:66:a6:ac:ca:e1:e4:f8:98:0d:ad:25:26:
0a:29:f6:8a:29:fe:fb:96:55:aa:ee:5f:ed:be:f2:c7:a6:aa:
9b:18:2a:e9:d5:78:8f:41:0c:04:d2:50:93:db:03:f7:b4:ad:
5b:a8:37:c3:00:7f:8f:73:69:5e:37:91:90:21:91:e7:a0:e6:
81:2d:cd:48:60:cd:3f:e0:ca:37:a4:be:5e:ae:3b:10:11:41:
2c:08:63:81:30:bc:cb:7c:ae:d5:6b:77:a2:17:a2:d6:ca:96:
61:6a:44:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 12:11:24 2024 by rpki-client on console-ams.rpki-client.org