Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/IbvfiypRFLkKZr79RKRM1lu1zrw.roa
File: IbvfiypRFLkKZr79RKRM1lu1zrw.roa (raw, json)
Hash identifier: hpx+NEHdVKWpF0ucrJxarFBx8jvyHDXXw9ev0n2L6IU=
Subject key identifier: 21:BB:DF:8B:2A:51:14:B9:0A:66:BE:FD:44:A4:4C:D6:5B:B5:CE:BC
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 018CC2DB14B26581CC2CE92C31D3CF2BF0EC
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/IbvfiypRFLkKZr79RKRM1lu1zrw.roa
Signing time: Mon 01 Jan 2024 02:29:46 +0000
ROA not before: Mon 01 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198541
IP address blocks: 91.233.28.0/22 maxlen: 24
176.110.160.0/19 maxlen: 24
81.162.0.0/20 maxlen: 24
188.0.192.0/19 maxlen: 24
91.219.72.0/22 maxlen: 24
81.162.16.0/21 maxlen: 24
176.110.192.0/20 maxlen: 24
91.236.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:14:b2:65:81:cc:2c:e9:2c:31:d3:cf:2b:f0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Jan 1 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21bbdf8b2a5114b90a66befd44a44cd65bb5cebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:2a:00:03:30:bb:af:ac:ff:ff:9a:2b:b8:
7d:cc:2c:e5:48:d7:ad:b5:9c:d1:78:1c:d7:d4:60:
8f:62:be:24:ca:fd:22:20:f2:21:1e:e2:c1:2d:8c:
15:b4:92:5d:02:9e:04:b9:1b:2b:e7:42:2c:52:a2:
a6:91:43:28:21:45:f8:af:1f:1d:84:97:14:f7:d4:
8f:c5:52:e5:a5:f8:5a:90:b2:33:86:d1:01:16:e2:
07:c8:dc:c5:14:24:44:2f:d3:e0:6a:cb:24:37:1d:
8a:5b:27:0c:17:24:71:06:a8:3e:f8:8e:85:82:44:
f9:4a:89:14:5f:86:4b:03:4e:6c:a0:37:f9:47:01:
7a:e7:8a:ad:28:fa:64:ae:c5:8f:b3:f8:0c:be:62:
4f:4e:19:64:2b:82:a4:dc:1a:38:b0:28:c1:65:aa:
d9:f2:13:ad:6e:cf:35:a4:f6:b6:65:26:13:b3:52:
bd:dd:d0:2d:d7:37:71:4e:b4:3b:ff:d7:93:6e:83:
ac:9e:06:17:6b:fa:d8:dd:78:6d:22:54:fe:13:20:
a3:11:f1:3b:01:2d:de:99:57:55:bc:55:80:f9:57:
a4:ea:60:7c:c4:53:07:2f:a9:4e:79:76:c2:e9:a2:
01:5d:bd:b6:cf:09:27:8f:43:c9:b6:76:e4:a2:3a:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BB:DF:8B:2A:51:14:B9:0A:66:BE:FD:44:A4:4C:D6:5B:B5:CE:BC
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/IbvfiypRFLkKZr79RKRM1lu1zrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.0.0-81.162.23.255
91.219.72.0/22
91.233.28.0/22
91.236.60.0/22
176.110.160.0-176.110.207.255
188.0.192.0/19
Signature Algorithm: sha256WithRSAEncryption
99:3e:12:f0:dd:36:c8:62:cb:d4:20:08:0d:77:c1:f3:8b:2d:
3c:9e:d3:fa:b2:4c:1c:3c:e6:0f:4a:48:81:81:b4:de:f2:72:
88:58:ba:9e:d2:26:01:f6:06:30:74:56:6a:6f:cf:ad:87:e5:
14:89:92:ac:61:1f:cc:4f:96:bd:6a:2a:70:e8:e8:00:f1:93:
16:55:d1:54:8e:fa:06:66:c6:1b:0f:0c:8c:a3:e1:ee:44:19:
e9:18:68:17:e9:5d:d9:fd:b5:0e:f3:ea:ec:a4:96:3f:10:4e:
25:e8:4c:b1:80:99:96:b9:82:ac:1e:b2:61:b4:c0:1e:a9:be:
98:a1:e4:7c:dc:ad:8a:88:28:5b:a1:7d:22:30:7a:c4:55:f6:
86:07:37:5b:68:22:24:47:42:02:1e:27:72:75:42:fc:78:63:
f9:14:a1:80:a8:84:df:0f:48:07:e4:1a:0a:48:fd:77:71:a0:
d6:b6:54:68:4b:2a:24:e8:98:7f:4d:65:67:94:ab:41:ef:f9:
0e:05:d3:ca:22:8b:89:5e:e5:e2:2c:70:32:6a:6b:a5:90:fb:
ee:a4:ae:6e:6d:c4:f3:84:6a:88:49:aa:e8:0c:42:bc:10:6d:
db:ce:11:94:07:44:d1:aa:21:bc:26:f2:53:2c:63:cd:78:c1:
ff:a0:06:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:22:07 2024 by rpki-client on console-fra.rpki-client.org