Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/0pfcc1rglLuSnj7OE4XItikPATY.roa
File: 0pfcc1rglLuSnj7OE4XItikPATY.roa (raw, json)
Hash identifier: mUcKo5EAhI89jyPvc40ppcifBtynaXpzdB2ooZQr3AE=
Subject key identifier: D2:97:DC:73:5A:E0:94:BB:92:9E:3E:CE:13:85:C8:B6:29:0F:01:36
Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial: 018CC5010FF38847C8DB3051C3BD73CA17FF
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/0pfcc1rglLuSnj7OE4XItikPATY.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57630
IP address blocks: 91.237.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0f:f3:88:47:c8:db:30:51:c3:bd:73:ca:17:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d297dc735ae094bb929e3ece1385c8b6290f0136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:23:d7:c9:23:78:8c:4b:e1:e4:95:4a:f5:
26:af:c9:89:35:0b:69:7e:48:ad:f6:10:48:41:33:
b9:1d:13:d7:f6:1f:86:59:35:e0:99:66:f0:b3:cc:
a7:40:c0:31:e3:f1:47:b0:f0:8f:a4:52:ed:6e:4b:
c9:a0:c1:38:84:e2:4e:09:dd:5b:b3:45:48:f1:fb:
4e:83:0c:d2:b1:3c:8e:71:19:a0:9c:85:66:26:1b:
5b:bd:57:db:cc:35:b5:fb:fc:1c:c9:a8:08:64:5f:
c1:2a:5a:0e:d5:f8:9a:95:2d:3b:05:e9:f8:c6:a7:
a1:08:f0:84:ba:67:21:57:e2:8e:33:1e:73:76:d7:
e9:b4:6f:5a:56:b9:83:7e:a1:38:f3:03:9d:87:17:
d7:15:55:fa:3a:5c:23:02:97:7d:59:a8:aa:4a:0c:
20:a0:70:b6:4f:bb:fa:fd:0b:20:aa:cc:8a:e3:b8:
5e:e8:c4:7f:12:d9:28:ea:6c:ff:78:46:f4:4b:48:
68:08:22:55:9f:f7:16:6d:42:08:2f:3f:d4:d3:37:
cf:6d:ff:47:1a:0c:f7:4a:10:b2:15:20:6b:7c:b0:
1d:bd:0d:a5:9b:3a:2b:f6:35:5c:5c:e6:7d:ca:2e:
7d:79:fb:5b:67:83:24:a0:b5:45:d5:4b:53:96:4e:
0f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:97:DC:73:5A:E0:94:BB:92:9E:3E:CE:13:85:C8:B6:29:0F:01:36
X509v3 Authority Key Identifier:
keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/0pfcc1rglLuSnj7OE4XItikPATY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.106.0/24
Signature Algorithm: sha256WithRSAEncryption
70:3c:68:22:46:8f:35:89:ac:07:ec:d2:83:ee:bb:27:a7:c9:
8b:4e:d1:c4:29:6b:43:90:3d:b0:06:b2:79:98:47:10:21:72:
3e:0a:6c:9f:09:c2:91:d0:31:26:d1:c9:4c:b5:11:d9:d0:f0:
1f:52:91:26:6a:6d:28:06:de:f8:fd:f2:52:a4:3c:58:9d:e4:
a4:f1:25:79:91:5a:3c:49:f6:bb:5a:60:38:e9:c6:32:bf:3d:
3c:c5:6c:aa:26:a5:d7:bc:d3:77:e6:66:96:5f:81:79:db:ef:
e2:9f:d6:eb:a0:f5:c6:a6:74:8f:e9:69:b1:5c:11:11:74:ca:
91:f2:8a:0b:0e:97:57:44:4a:fe:97:e6:dc:2e:94:bc:3b:d2:
c6:64:0a:99:c6:5c:fa:de:38:1d:3a:fd:c7:8a:91:d5:65:aa:
e2:29:a3:c2:9d:89:bb:f2:73:5b:ce:67:bb:85:b7:5b:73:9d:
35:1f:9f:b4:f1:e4:00:ca:e6:9c:53:14:cf:8c:56:f2:40:45:
be:c0:54:c5:e8:3a:8b:77:d0:45:2b:1b:2c:58:76:66:d5:a9:
8e:68:2e:74:4e:b5:0f:49:04:2b:d2:77:28:f8:29:33:87:03:
09:5b:32:b2:b7:07:46:7f:71:ef:00:17:5c:19:fc:4a:fe:6f:
dc:91:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:06 2024 by rpki-client on console-fra.rpki-client.org