Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/0OzbWqeyS-modkV7KOTGk-Xbys8.roa
File: 0OzbWqeyS-modkV7KOTGk-Xbys8.roa (raw, json)
Hash identifier: UXQi4LYuJx6pnCqAWmDlQAgag+ph0vd051a5V9YU/iU=
Subject key identifier: D0:EC:DB:5A:A7:B2:4B:E9:A8:76:45:7B:28:E4:C6:93:E5:DB:CA:CF
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 018CC26CF7A5F9D456075AE120F1D869FD51
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/0OzbWqeyS-modkV7KOTGk-Xbys8.roa
Signing time: Mon 01 Jan 2024 00:29:30 +0000
ROA not before: Mon 01 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56853
IP address blocks: 91.228.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f7:a5:f9:d4:56:07:5a:e1:20:f1:d8:69:fd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Jan 1 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0ecdb5aa7b24be9a876457b28e4c693e5dbcacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:61:a7:f2:e6:26:a5:19:2d:2a:8b:20:e2:
f9:d3:2e:0d:ca:69:48:61:ce:0b:cf:ec:a6:88:66:
01:02:f4:6c:d9:78:2f:06:65:8d:f2:70:ed:a1:6e:
59:ff:d4:62:9e:cd:e7:12:79:ac:71:c9:72:41:7b:
c8:de:3e:00:32:fe:e4:3d:ed:fb:e2:5b:b2:01:55:
5f:d8:59:4c:0a:2c:6f:d5:4d:b0:f7:58:e9:3a:24:
df:76:91:17:d3:13:78:95:f2:69:12:7c:35:c9:01:
21:67:bc:a5:cc:9c:af:20:86:d7:c1:e3:33:7f:82:
12:8c:f9:47:8b:df:fb:07:47:b8:01:ff:68:d6:7d:
bf:fd:f7:10:27:b9:24:52:e2:06:ff:9f:32:78:36:
80:8b:75:d2:64:8c:71:7e:c8:4c:a5:d0:13:b0:55:
e9:69:c5:d6:ba:4a:f8:fd:37:7f:f2:71:15:89:b0:
0e:50:b5:fc:e4:5a:7d:1a:76:96:33:db:f6:c9:a4:
26:00:fb:1a:9a:6e:b4:52:b4:36:a8:8d:a3:9c:35:
57:7b:be:dc:f3:6d:09:90:d2:7e:90:cc:d3:cb:74:
e4:81:c0:ef:de:42:ed:bc:f0:76:20:9c:e2:69:78:
e9:f1:06:b9:50:00:b2:4f:68:f0:dc:e4:ab:0a:fd:
9c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EC:DB:5A:A7:B2:4B:E9:A8:76:45:7B:28:E4:C6:93:E5:DB:CA:CF
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/0OzbWqeyS-modkV7KOTGk-Xbys8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.102.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f8:e2:88:b4:2b:ba:67:28:26:0f:b9:92:ad:9d:10:ea:4a:
50:7b:46:2e:16:86:ec:44:9f:18:84:d2:44:d2:30:a7:6f:3e:
49:8e:c0:fb:ff:6d:cf:e7:c6:ec:ee:fc:c6:df:47:f8:00:36:
0d:cd:df:da:11:19:b9:c2:6c:67:11:37:9f:48:dc:5a:0e:fb:
2c:df:62:5e:02:04:ba:f0:d5:91:18:68:77:07:55:a8:1d:95:
65:ee:f6:46:e0:89:8d:c9:0d:f8:39:bd:43:15:76:a5:be:e4:
f4:81:94:cb:49:f6:e0:eb:9a:ef:91:ad:47:ec:ff:97:3f:b4:
e7:b8:26:70:82:78:a9:a5:41:51:a8:dc:61:e2:a5:31:6d:8a:
44:d3:24:38:e6:f3:ea:68:6b:03:70:68:88:8e:1a:27:61:fd:
1c:35:3c:b6:94:7d:d8:cc:47:8a:6d:d9:64:1c:fc:c3:a1:92:
1d:05:77:76:17:eb:74:7f:7b:d2:90:33:a0:8d:53:eb:79:09:
29:3b:0a:7f:8e:9e:48:70:d6:8f:e8:ec:e7:54:81:4a:72:f8:
69:86:86:a6:cb:69:4b:d3:7e:c7:9e:45:87:e5:24:68:ea:7e:
a7:ac:8b:e4:51:ba:64:5c:f6:45:27:59:f4:b7:ce:1d:92:c8:
bc:1f:71:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 14:23:12 2024 by rpki-client on console-ams.rpki-client.org