Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/Tm6vywKbShrDa7hi2tgKoT1EKvg.roa
File: Tm6vywKbShrDa7hi2tgKoT1EKvg.roa (raw, json)
Hash identifier: ebJwSpnFgLE2IPc9CL8i6f4VzVG2RaudvhzBtbu4Jk4=
Subject key identifier: 4E:6E:AF:CB:02:9B:4A:1A:C3:6B:B8:62:DA:D8:0A:A1:3D:44:2A:F8
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 018CC8014B0E2C1DED4033D0C2479BB22509
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/Tm6vywKbShrDa7hi2tgKoT1EKvg.roa
Signing time: Tue 02 Jan 2024 02:29:37 +0000
ROA not before: Tue 02 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21226
IP address blocks: 80.91.192.0/21 maxlen: 21
80.91.204.0/24 maxlen: 24
80.91.206.0/23 maxlen: 23
80.91.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4b:0e:2c:1d:ed:40:33:d0:c2:47:9b:b2:25:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Jan 2 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e6eafcb029b4a1ac36bb862dad80aa13d442af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:9a:82:bf:9d:8b:7b:8c:cf:a4:47:3f:87:
77:d0:3a:54:46:30:2e:00:98:b0:8f:bc:d1:c1:1c:
07:93:4f:06:d2:c4:1f:3e:17:81:5c:86:c3:3d:04:
ad:e3:f5:d7:75:7a:3d:48:a6:d0:2e:d5:cd:7e:21:
ca:de:79:b5:56:93:e5:cc:e5:d2:8e:7e:4a:1c:99:
aa:cd:d3:bc:4f:ff:16:29:e0:d8:eb:65:c0:7a:04:
1a:62:54:db:31:8d:dc:e5:0e:51:09:16:5c:bd:2b:
3c:a3:6d:41:37:13:38:d0:42:42:f0:88:11:4f:c4:
3b:2b:45:cf:60:26:38:56:4f:3f:49:c7:68:72:09:
83:54:ca:56:e5:b8:be:9b:46:ba:ec:8d:93:1d:23:
2c:94:61:fe:2a:bc:56:ee:a6:67:36:90:4a:eb:76:
f4:75:c3:d2:54:2b:dc:fc:b9:ac:b8:e8:cb:2c:81:
be:82:38:b5:a4:fb:25:3c:24:e1:e9:18:c7:49:25:
52:9d:c0:cb:0f:27:36:5f:89:ed:ff:f4:08:07:a2:
68:c2:de:94:90:33:f8:fe:64:4b:9f:f7:f6:91:0f:
8c:7c:a8:5d:06:ac:62:5c:20:dc:9c:db:de:42:91:
94:1e:10:59:b9:1b:b0:86:42:00:04:84:34:9f:a0:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6E:AF:CB:02:9B:4A:1A:C3:6B:B8:62:DA:D8:0A:A1:3D:44:2A:F8
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/Tm6vywKbShrDa7hi2tgKoT1EKvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.192.0-80.91.204.255
80.91.206.0/23
Signature Algorithm: sha256WithRSAEncryption
82:73:f3:d9:ce:8f:3e:5a:37:90:6c:6d:98:47:57:b0:47:49:
60:4b:8f:e8:34:1a:cc:83:b3:7a:00:6c:2a:66:1b:45:63:60:
0c:68:16:9c:35:38:a5:54:2b:d2:3d:56:22:83:01:7e:af:53:
4b:7f:38:96:86:6c:d5:0c:59:6b:d0:2a:af:00:62:27:2a:b1:
3c:b2:f6:67:be:7f:10:5e:56:6d:73:09:e9:71:b1:33:e7:8f:
12:9b:ca:a0:ea:37:17:3b:3a:1a:a9:dd:a6:eb:69:10:12:87:
57:8f:5d:76:a4:04:bb:2f:84:d1:f8:b5:bb:a9:fe:90:ef:10:
9c:40:0f:1d:e2:3e:f7:85:34:9c:25:64:79:d2:e0:f2:78:97:
66:a3:37:56:fb:9a:8d:86:40:61:c1:39:a2:c8:06:36:48:aa:
40:04:62:e4:7d:33:6f:bd:77:8b:28:81:03:26:c6:20:c7:0a:
8f:e9:8f:4c:52:4c:03:24:38:14:6f:29:b7:3d:cc:4a:33:47:
b2:fe:75:3f:f6:bc:bb:c4:03:be:38:f3:56:e3:3f:6f:fc:e3:
79:0f:88:93:9b:79:fe:40:92:89:59:ea:85:f2:15:2b:2b:5b:
e4:60:30:ed:a6:d4:02:27:a1:5b:92:b3:3c:72:fd:64:7e:fb:
61:62:fd:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:48:44 2024 by rpki-client on console-ams.rpki-client.org