Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/h29tUqff0zqxbLRWItH0XcE6G_g.roa
File: h29tUqff0zqxbLRWItH0XcE6G_g.roa (raw, json)
Hash identifier: qwdq0TRbUtQWWYqUYH4VW4J/EMw/vtW1+jYXtt3+t6g=
Subject key identifier: 87:6F:6D:52:A7:DF:D3:3A:B1:6C:B4:56:22:D1:F4:5D:C1:3A:1B:F8
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 018CC7942156803DEC3D6E883EB7A37CDCF5
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/h29tUqff0zqxbLRWItH0XcE6G_g.roa
Signing time: Tue 02 Jan 2024 00:30:22 +0000
ROA not before: Tue 02 Jan 2024 00:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 91.225.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:21:56:80:3d:ec:3d:6e:88:3e:b7:a3:7c:dc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jan 2 00:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=876f6d52a7dfd33ab16cb45622d1f45dc13a1bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:cd:6c:23:63:69:ef:06:07:d5:a8:76:e9:
6d:2a:bf:cf:cf:d0:8b:ef:2d:5e:f9:9a:1a:a4:b9:
e4:60:9b:6b:15:64:5f:53:d6:5f:6d:18:f7:c8:85:
d4:ac:35:2c:0a:f9:65:24:40:d4:b2:32:cd:a5:78:
4b:36:6a:e6:ee:28:fc:cf:63:4a:b4:b8:b6:15:1d:
b5:71:bb:60:9e:d2:f6:1f:e8:58:2d:13:13:65:af:
bf:07:7a:1b:6f:41:2c:09:0e:8f:a2:7c:fe:45:3a:
e7:45:2a:1c:c6:f8:15:5c:61:0c:20:a4:77:b9:86:
69:63:5f:e2:a2:45:dc:43:ea:3f:d8:35:75:c1:9c:
f0:13:7d:09:99:7f:09:2d:a0:b0:3d:6b:12:41:6c:
af:c9:d9:36:5a:d2:5d:b8:30:d2:81:02:55:74:f6:
d3:50:93:02:ab:2f:ab:08:57:d1:6b:45:31:8c:67:
8f:6f:0c:e1:70:b3:6c:f3:85:06:c8:ef:4b:2e:fe:
34:15:83:d0:9d:9d:be:4e:70:84:cd:3a:49:93:a8:
61:af:81:c8:7e:54:0d:d8:87:2d:a0:9e:90:dd:00:
3b:cf:23:ee:16:54:fb:8f:6b:93:54:43:9c:0a:d1:
d2:9b:95:cd:77:d4:f6:bf:de:72:9d:35:02:64:75:
57:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6F:6D:52:A7:DF:D3:3A:B1:6C:B4:56:22:D1:F4:5D:C1:3A:1B:F8
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/h29tUqff0zqxbLRWItH0XcE6G_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.248.0/24
Signature Algorithm: sha256WithRSAEncryption
11:86:3a:23:07:fa:02:4a:9e:1d:d6:6b:54:8b:f8:37:c5:67:
48:e8:00:54:2c:f6:ac:52:23:28:2f:fa:c5:a7:71:03:e4:17:
e2:b8:44:a5:8a:fd:b5:af:49:71:78:43:75:ae:bd:73:1d:d8:
22:15:b5:24:ce:a4:21:93:fd:0e:d9:aa:ae:56:a6:15:b1:82:
aa:d5:5a:24:69:fa:bb:4f:92:e4:00:ac:05:aa:72:6c:9e:fb:
09:97:4b:3c:94:0f:75:e5:f3:08:50:00:9e:5b:2c:78:28:42:
88:50:98:ac:2a:58:72:d5:8d:98:39:87:82:5a:32:d4:e6:9a:
1a:22:2e:42:0e:b7:0a:a3:c0:70:86:ec:d6:40:42:fe:34:34:
25:d5:3b:8f:5f:b1:68:b3:ab:ca:c2:60:46:34:16:28:2b:50:
b8:2a:d1:59:f9:09:bd:24:de:3e:30:52:66:09:c1:14:7e:b9:
3b:97:c4:f5:04:d6:5d:d9:f7:a9:0c:b5:69:d3:35:8a:dc:ba:
34:33:e5:28:86:31:58:0e:13:43:6b:17:ba:a9:01:67:7a:bf:
c8:f2:fa:57:38:e9:bb:22:69:25:c1:1b:81:cc:5e:4e:42:52:
d1:c3:8d:c1:d4:17:1e:24:1c:dd:d6:d0:af:3b:b9:58:43:cc:
44:40:3b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:27:33 2024 by rpki-client on console-ams.rpki-client.org