Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/bNn3GRbpy_EAzZTJReu0VaV47nU.roa
File: bNn3GRbpy_EAzZTJReu0VaV47nU.roa (raw, json)
Hash identifier: AgQjYfjwCbJbaQl42Qs5NBYkRgZVEogKzpNSoOWIGrM=
Subject key identifier: 6C:D9:F7:19:16:E9:CB:F1:00:CD:94:C9:45:EB:B4:55:A5:78:EE:75
Certificate issuer: /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial: 018CC2DB5006F38A14601AB50A306265BF90
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/bNn3GRbpy_EAzZTJReu0VaV47nU.roa
Signing time: Mon 01 Jan 2024 02:30:01 +0000
ROA not before: Mon 01 Jan 2024 02:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39402
IP address blocks: 91.240.83.0/24 maxlen: 24
91.240.80.0/24 maxlen: 24
91.240.80.0/22 maxlen: 22
91.240.81.0/24 maxlen: 24
91.240.82.0/24 maxlen: 24
194.246.91.0/24 maxlen: 24
194.246.88.0/24 maxlen: 24
194.246.88.0/22 maxlen: 22
194.246.89.0/24 maxlen: 24
194.246.90.0/24 maxlen: 24
2a0d:e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:50:06:f3:8a:14:60:1a:b5:0a:30:62:65:bf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
Validity
Not Before: Jan 1 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cd9f71916e9cbf100cd94c945ebb455a578ee75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:b7:ec:e0:98:fb:fc:9e:91:0c:f9:69:6f:
11:10:c0:0d:c5:92:c3:ae:0d:b9:ba:72:c6:e8:9b:
17:0f:03:a9:35:76:3f:d7:1f:67:e7:50:54:4a:87:
f9:88:e5:20:79:16:1f:5d:7f:0d:e8:b5:8b:3d:2a:
c5:c3:4a:d0:da:14:23:19:c9:f5:b4:1e:0d:42:fb:
19:ce:83:e7:dc:40:b9:3d:93:c0:f0:30:c4:d3:9d:
00:08:7a:09:bb:e7:d6:8e:41:3b:f3:5b:44:c5:35:
85:75:6f:fc:43:63:79:78:0a:cc:f3:61:b5:60:82:
38:c3:4e:ce:33:a3:02:78:59:c8:8c:1e:7f:03:45:
1f:4f:99:b7:c9:24:e1:94:5a:60:ea:fe:13:c5:a8:
50:40:62:5e:47:d8:35:ad:95:1e:f7:cc:d8:5a:c8:
05:db:c1:1f:a2:d6:7b:75:8d:45:d6:3b:5a:cd:f9:
2d:7c:c3:32:78:a0:30:5c:a9:6c:11:6b:5b:90:41:
c2:76:bc:73:f9:ad:dc:8b:3d:2b:dc:2a:c7:d1:dd:
7a:86:5c:d6:4d:86:dc:eb:ff:0a:b0:1e:ce:a1:c4:
26:7b:70:c8:c6:33:6d:89:a5:a5:cd:63:51:1a:fb:
df:b2:1c:34:8e:8e:d4:03:b2:37:24:98:45:9b:ce:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D9:F7:19:16:E9:CB:F1:00:CD:94:C9:45:EB:B4:55:A5:78:EE:75
X509v3 Authority Key Identifier:
keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/bNn3GRbpy_EAzZTJReu0VaV47nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.80.0/22
194.246.88.0/22
IPv6:
2a0d:e40::/29
Signature Algorithm: sha256WithRSAEncryption
cd:3a:2d:c4:be:a9:8c:82:88:96:87:7d:c8:df:7e:f0:ac:57:
cb:6f:2c:1d:04:68:17:e6:5b:e5:7a:34:45:22:17:a8:03:62:
cc:f6:d6:7e:9f:fd:37:68:0b:bb:5e:59:e7:66:a3:8b:48:26:
0c:2f:d8:70:14:8d:06:f0:91:ca:c1:6a:0c:43:4e:d8:0c:61:
b1:5f:de:bd:46:52:cf:46:76:bf:3b:94:f7:2b:fb:93:9a:9b:
48:ad:24:f9:ef:89:3d:55:38:7e:a3:18:9f:27:ae:95:08:0d:
33:df:5f:0d:c8:06:d6:3a:7f:c6:d4:5c:80:86:d4:36:2b:e0:
63:c1:b5:c1:9e:85:91:40:da:80:3a:71:c6:eb:8e:e4:b5:a2:
37:44:36:80:0b:b9:90:85:05:dc:b5:ff:e0:05:8f:2d:00:71:
50:4e:02:b0:ba:e1:14:42:ac:01:89:a1:ed:0b:5e:ec:fe:a7:
b3:88:d8:f7:9b:8b:55:33:92:97:50:69:71:2f:54:1c:b8:d1:
82:cb:c1:ed:66:f2:a9:5b:e0:fb:3c:3b:70:0e:bc:61:3d:af:
3b:c9:71:62:9c:6a:25:d0:90:86:2f:a7:dd:15:21:98:eb:41:
ba:c1:cd:0c:61:60:2a:f2:65:8c:20:0a:82:66:ae:e2:fc:44:
65:28:2a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:45:51 2024 by rpki-client on console-ams.rpki-client.org