Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/iFard6KPi6-vl0l4epXsTmCeQNs.roa
File: iFard6KPi6-vl0l4epXsTmCeQNs.roa (raw, json)
Hash identifier: OTyPrn7CnG4shUzkYEHV0yck5EUfpEXH8nILgsplKDw=
Subject key identifier: 88:56:AB:77:A2:8F:8B:AF:AF:97:49:78:7A:95:EC:4E:60:9E:40:DB
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 018CC3B6E5D6EBB240226D51618F36E95542
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/iFard6KPi6-vl0l4epXsTmCeQNs.roa
Signing time: Mon 01 Jan 2024 06:29:52 +0000
ROA not before: Mon 01 Jan 2024 06:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4358
IP address blocks: 91.228.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e5:d6:eb:b2:40:22:6d:51:61:8f:36:e9:55:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Jan 1 06:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8856ab77a28f8bafaf9749787a95ec4e609e40db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:6f:bf:18:a9:af:32:7d:7f:50:5b:d8:5a:
f3:43:0d:72:c6:39:bc:a9:37:20:ee:dc:e7:d6:c8:
77:4b:a2:13:d4:dc:1b:7a:26:9c:9d:22:db:9a:44:
92:68:ce:fd:df:f6:45:e6:14:53:ad:74:3f:48:9d:
7a:22:60:62:05:47:99:90:f2:23:e0:0a:ab:f3:c9:
72:2a:66:b7:77:6e:2d:14:36:12:8b:b2:f3:27:b4:
ce:20:57:8e:16:15:e7:e9:cf:a0:1e:9f:0d:91:da:
3f:a7:5c:17:b4:9f:4c:63:cf:41:63:eb:36:30:04:
92:3b:2c:50:d4:cb:36:cd:6d:15:c3:42:16:30:6d:
0a:1e:36:f5:87:4a:78:f5:84:bc:a7:a7:2d:e2:2d:
40:54:1b:af:a9:b2:ef:ab:20:9f:68:de:dd:8d:7e:
60:b1:70:f9:14:9e:5a:e2:71:a7:52:9f:7c:31:c4:
fc:40:cc:af:93:05:78:7b:79:13:81:1e:cc:0e:ab:
1e:ee:cc:81:86:38:bc:f9:12:41:66:f0:60:f8:4e:
8e:30:1f:ae:db:1b:20:a6:00:48:e1:0e:76:0c:d6:
ad:ce:78:22:79:63:64:d6:7e:6c:ff:e8:1e:55:66:
e0:3b:73:b9:fc:ff:eb:db:51:97:b2:a7:ed:7a:9c:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:56:AB:77:A2:8F:8B:AF:AF:97:49:78:7A:95:EC:4E:60:9E:40:DB
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/iFard6KPi6-vl0l4epXsTmCeQNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.109.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f6:44:36:77:57:fb:26:1e:96:f1:bd:5e:92:1c:10:83:e2:
4a:eb:45:3f:46:0c:2b:bf:c6:12:37:65:70:cd:59:00:38:5b:
0a:f3:bc:9c:ec:38:40:2e:d7:ea:02:6c:86:58:cb:81:51:68:
68:13:fd:70:26:36:88:ae:52:82:b0:b2:e6:97:f6:cb:80:a8:
b6:4f:39:c0:aa:3b:ed:e6:2e:11:33:3e:24:3a:0c:f1:ee:fb:
5c:78:41:47:26:df:c5:70:9a:70:35:8d:d9:46:76:e9:20:9c:
76:2c:94:75:45:34:19:62:8f:4f:e2:07:fe:75:bb:97:75:73:
83:d8:0a:3e:d3:8f:ed:ee:5e:f5:77:8a:3c:78:07:fd:03:86:
41:39:04:ab:1f:77:ee:b6:13:e2:3b:94:2f:37:bf:33:9f:e0:
63:40:84:f5:ad:53:21:b4:50:1c:4e:bf:28:ac:b8:73:55:ad:
d5:4b:d0:1f:95:0b:b4:04:f5:b8:28:ac:30:c8:66:6f:35:67:
b9:4a:09:b8:d7:fe:d2:11:cd:26:ed:de:6d:e9:5c:07:be:bd:
2c:72:3c:1f:22:17:07:d1:22:f2:94:b2:a7:ad:3e:89:19:a0:
f5:c7:57:30:e7:7f:67:bc:67:27:a3:5d:b6:3c:50:eb:00:f0:
ea:a8:4c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:54:33 2024 by rpki-client on console-fra.rpki-client.org