Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/aLEHn32TmYszWXJazZ_6MRcCz-8.roa
File: aLEHn32TmYszWXJazZ_6MRcCz-8.roa (raw, json)
Hash identifier: ChJxcQmgDO4CzI4a3mA4VU7WlmyBjbpQKc/2Nub1B8M=
Subject key identifier: 68:B1:07:9F:7D:93:99:8B:33:59:72:5A:CD:9F:FA:31:17:02:CF:EF
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 018CC801A5BE33B710D36C9C3C0BF7AAA22E
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/aLEHn32TmYszWXJazZ_6MRcCz-8.roa
Signing time: Tue 02 Jan 2024 02:30:00 +0000
ROA not before: Tue 02 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34829
IP address blocks: 85.91.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a5:be:33:b7:10:d3:6c:9c:3c:0b:f7:aa:a2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68b1079f7d93998b3359725acd9ffa311702cfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:42:72:56:52:0b:e9:b6:6c:73:6c:22:fd:75:
81:00:79:42:ab:95:5b:39:ba:84:65:b1:a8:3b:2b:
6c:cf:1b:0d:f2:18:1a:80:81:26:e0:50:38:77:53:
ea:6a:09:d8:10:d3:ae:a6:59:d3:b4:55:2f:ea:35:
56:5b:a9:eb:a7:7c:a3:cd:fe:29:6b:06:78:35:b6:
2f:fc:30:dd:87:20:ff:71:fd:fb:51:3e:22:d0:48:
74:93:38:66:e0:2b:e6:fe:2e:28:1d:f0:b3:88:d6:
39:9e:1c:30:ca:72:ea:a9:0f:49:5e:20:47:b6:42:
60:e8:a6:63:ff:7d:33:3b:d6:4b:39:e3:8b:d8:1a:
3b:e0:f9:07:3b:f1:3e:40:4b:d9:12:4c:3c:75:bc:
3c:db:37:fd:90:ff:50:5f:02:5c:4b:4e:5d:32:30:
48:d9:c1:68:68:ab:c4:0b:7c:76:05:c6:e4:2e:69:
4f:28:91:d5:57:0d:52:10:ba:fa:06:6a:f5:46:f6:
a6:ca:bf:ed:07:13:50:df:4b:24:7a:3c:8d:47:ea:
9a:71:75:7d:ea:10:6e:31:95:52:30:e1:19:ae:a1:
c9:76:d5:4a:61:1f:78:3f:6d:af:83:98:30:87:42:
2b:e0:37:e4:06:54:1c:03:1d:c1:18:07:8e:08:f4:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B1:07:9F:7D:93:99:8B:33:59:72:5A:CD:9F:FA:31:17:02:CF:EF
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/aLEHn32TmYszWXJazZ_6MRcCz-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.91.104.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b8:77:c2:bb:f8:7b:96:75:2e:5b:17:86:0f:5d:1d:34:bc:
c2:4b:49:2e:f8:80:a8:64:db:36:e2:f6:f9:86:ee:d4:f8:d7:
42:fe:49:76:8e:1d:dd:a3:0d:3d:9e:99:b8:e8:b1:16:0d:b8:
51:8b:7e:8f:48:a1:9c:ee:38:be:75:5c:9a:bd:3e:63:3e:c3:
89:71:d2:1a:81:bc:cf:27:54:52:c4:c5:bd:6b:73:15:d7:b7:
9f:50:14:f3:14:bf:4d:62:9f:11:ee:c0:90:66:d4:38:c6:68:
6f:e4:e2:15:51:d6:9c:42:98:63:c7:33:7b:5e:7e:87:94:5d:
f4:a8:f3:df:17:d3:b7:30:10:e4:7f:fd:bf:7e:79:c0:79:69:
65:29:33:23:25:17:30:cc:1b:ba:b5:b4:e5:d2:29:14:04:de:
99:21:bc:ea:1a:96:f3:37:48:c4:c1:09:0c:f1:1f:02:03:9c:
0b:88:71:f5:5e:e8:9a:6b:c5:37:1f:4d:6c:83:0a:72:ff:34:
4c:88:3c:33:58:48:55:20:e9:e7:0b:af:2f:39:eb:09:11:88:
c3:6a:91:33:aa:7b:4b:7c:94:70:70:55:7c:24:8b:4a:74:f7:
dd:56:f5:df:6b:dd:18:47:ad:e7:e0:73:04:b1:5c:c3:63:3c:
e6:78:da:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:53 2024 by rpki-client on console-fra.rpki-client.org