Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/b44suaJ8-uqdIRYYeejhGSCuhVY.roa
File: b44suaJ8-uqdIRYYeejhGSCuhVY.roa (raw, json)
Hash identifier: E9u1aKCheO/8KW36OuY4NwTEOH7DDZzd+J9AFv0wCMI=
Subject key identifier: 6F:8E:2C:B9:A2:7C:FA:EA:9D:21:16:18:79:E8:E1:19:20:AE:85:56
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 018CC6B820E436F0EFA3B96D38F359D7D39A
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/b44suaJ8-uqdIRYYeejhGSCuhVY.roa
Signing time: Mon 01 Jan 2024 20:30:04 +0000
ROA not before: Mon 01 Jan 2024 20:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207918
IP address blocks: 92.246.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:20:e4:36:f0:ef:a3:b9:6d:38:f3:59:d7:d3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Jan 1 20:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f8e2cb9a27cfaea9d21161879e8e11920ae8556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:2f:2b:7e:4c:30:11:83:97:b6:41:41:04:
1e:38:0f:cb:53:66:ec:27:f4:f7:37:bc:d1:f9:6d:
89:ac:02:da:bb:59:a1:92:69:71:ab:18:3b:07:d7:
f0:b6:e6:c4:bd:48:e3:3d:aa:ff:9c:29:2b:68:62:
af:21:77:a1:54:30:73:23:b4:1e:2e:9b:d5:ad:f8:
57:f0:b0:21:22:c9:b6:38:ef:89:a8:1c:07:e9:c5:
5f:bd:37:0f:b6:10:d9:0f:d2:04:de:b2:41:8a:0e:
39:de:61:e1:57:c2:de:05:90:7c:1b:6d:cf:ef:cb:
ae:33:d6:87:60:f7:fe:56:a5:e1:b6:00:5c:e3:6a:
63:5c:55:e4:82:b7:4e:d7:e5:04:62:80:38:41:01:
1d:97:1e:4d:1e:a2:6d:d3:d2:eb:21:66:db:7a:0a:
0a:f0:14:eb:69:e9:99:7d:a0:b6:90:fe:e8:67:87:
97:05:27:95:f0:10:0e:6a:1b:6b:22:af:89:8c:04:
c5:4a:e9:b6:09:4b:93:38:b0:90:bf:0a:58:66:d5:
2c:cb:e6:3f:29:42:99:4e:fd:be:6e:64:cf:86:85:
b2:a7:0d:92:e7:d6:60:a0:2e:f2:eb:57:b5:fc:f5:
1a:85:59:64:04:3e:d8:c9:b6:51:af:57:9d:1f:62:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8E:2C:B9:A2:7C:FA:EA:9D:21:16:18:79:E8:E1:19:20:AE:85:56
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/b44suaJ8-uqdIRYYeejhGSCuhVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.87.0/24
Signature Algorithm: sha256WithRSAEncryption
be:40:65:a2:a3:eb:2e:45:bd:a7:15:63:bb:52:60:1b:20:d2:
f0:b5:50:34:9b:4c:42:bd:e2:6c:b6:41:e5:5f:f8:a1:da:2d:
9e:0c:6d:bd:5e:97:cc:b4:93:bd:29:38:e7:fe:45:79:18:9f:
a8:bd:8c:44:27:5e:1e:c9:6b:72:92:53:6d:c8:c3:67:94:c4:
55:3e:c8:59:90:82:df:3e:dd:5e:6f:79:26:2d:47:ba:05:07:
0f:72:77:e3:03:2f:24:30:cc:5f:04:67:fe:c0:03:f2:48:14:
b5:60:b4:07:1d:bb:a3:b0:9c:b0:83:ea:9a:39:5a:63:2c:b8:
37:cc:fe:d7:42:c9:76:51:d4:c9:0a:66:68:d9:c1:d1:59:81:
3c:83:85:f9:f6:82:9f:1b:11:51:53:55:10:10:16:3e:9d:0d:
d4:b3:96:f2:c1:bd:cc:d9:ff:3e:ac:c6:d0:28:6a:b7:7c:37:
8b:dc:05:4e:4e:d4:f0:61:ed:d1:9a:28:c6:50:b6:b6:0e:a4:
42:52:82:f5:52:fc:91:bc:ad:3a:75:7f:50:31:59:99:fd:20:
88:e8:12:76:4f:bb:38:ac:12:d4:47:74:47:77:ed:80:55:44:
ed:e2:98:98:cf:9c:c6:90:f0:9d:18:a8:83:b6:73:dc:6d:d6:
d2:1d:85:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:48:53 2024 by rpki-client on console-fra.rpki-client.org