Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/woiaAGl9OJjsC94QfxQ0HLMQ0PM.roa
File: woiaAGl9OJjsC94QfxQ0HLMQ0PM.roa (raw, json)
Hash identifier: TSRj6wTZSMq79GMYMMMK2u4wIIVLeddRzBE42/6LHkI=
Subject key identifier: C2:88:9A:00:69:7D:38:98:EC:0B:DE:10:7F:14:34:1C:B3:10:D0:F3
Certificate issuer: /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Certificate serial: 018E0F4FA3ABD13E64A1A2A6EF0636BCC417
Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/woiaAGl9OJjsC94QfxQ0HLMQ0PM.roa
Signing time: Tue 05 Mar 2024 15:51:01 +0000
ROA not before: Tue 05 Mar 2024 15:51:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 91.108.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0f:4f:a3:ab:d1:3e:64:a1:a2:a6:ef:06:36:bc:c4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Validity
Not Before: Mar 5 15:51:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2889a00697d3898ec0bde107f14341cb310d0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:b0:8c:8b:b4:6b:db:2e:b6:dd:27:6c:ef:
d5:a7:1e:75:c1:f4:b1:e5:45:9e:4b:4f:98:98:27:
c9:aa:cc:1c:66:ed:2c:be:91:bc:5d:41:8d:75:89:
34:1e:42:ca:40:b1:71:66:02:9c:0c:56:44:82:bf:
f7:b4:07:75:c8:ac:70:7e:4e:d0:69:cd:aa:f9:ac:
27:b8:f6:44:92:5c:9b:07:84:61:25:d3:01:77:9e:
93:f8:21:d1:b6:4a:e0:57:57:53:96:8e:12:eb:9b:
0a:d3:5b:f1:65:0a:1e:59:0e:8e:8e:a8:91:19:1a:
c9:db:ec:47:08:61:e5:7c:97:f0:c6:fc:78:de:58:
1d:60:a2:26:ce:a9:c5:c6:7f:45:2b:55:52:73:44:
55:ad:85:f9:2f:37:43:5b:05:74:e7:23:12:b8:16:
0d:32:95:12:b1:38:4b:94:71:b9:a0:b6:12:79:dd:
93:4e:6c:5c:61:a8:cc:1c:1f:2c:b7:b3:e9:cf:f6:
19:2c:2b:e9:73:00:a7:2a:e7:a4:1e:eb:84:c7:f5:
80:80:eb:a3:9f:6c:6b:5d:bd:ee:ba:eb:c4:0c:85:
73:92:1b:4a:e4:93:c0:93:6b:f8:71:0d:62:50:7e:
a2:ca:dc:2c:e8:5a:99:ef:35:fd:9e:7a:ee:5d:43:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:88:9A:00:69:7D:38:98:EC:0B:DE:10:7F:14:34:1C:B3:10:D0:F3
X509v3 Authority Key Identifier:
keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/woiaAGl9OJjsC94QfxQ0HLMQ0PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.189.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:0a:2a:a0:1a:db:ca:ea:07:f0:2a:17:36:0a:47:59:cf:0e:
ff:c9:da:32:2a:85:ba:25:07:8b:cc:bd:c1:7c:44:ce:df:bd:
b3:51:3d:7a:79:0e:69:fc:2d:d4:6d:43:f8:bc:04:f8:0b:16:
a3:a5:09:6b:a2:4b:5d:a3:e3:2d:3c:f8:3f:66:d5:f8:c7:a0:
97:00:63:66:d5:a6:8a:e7:cb:5f:f5:07:c6:5c:43:f7:fe:84:
16:f9:a8:38:28:c1:00:c0:39:69:9a:60:ac:a8:6c:5c:83:cf:
9a:89:61:3d:85:ab:04:79:9d:de:6c:4e:de:81:c7:a7:3e:ee:
1e:c5:10:66:14:79:ed:93:03:31:ed:1d:f2:87:98:20:c6:7b:
9a:e0:e9:60:44:03:1c:a1:e3:4a:9f:c5:40:b3:16:d4:8e:d7:
fc:a3:6a:7d:77:ff:e4:18:20:0c:4a:eb:d8:a8:28:d8:2b:e9:
5c:c0:15:6d:45:a4:c9:c6:0f:11:34:2f:9a:b0:97:fd:cc:52:
8f:44:70:8d:30:cf:d1:9d:53:94:ce:6e:70:ff:11:e6:0a:fe:
6b:9c:4e:e3:eb:2a:f5:a3:0f:d2:1c:54:c1:4b:62:ff:0c:9e:
59:01:0c:65:93:4f:37:3e:39:82:c2:89:eb:7d:de:44:d8:62:
42:58:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:51:35 2024 by rpki-client on console-fra.rpki-client.org