Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/lJrMusa3mSiCQQAt6NyvMq3PlX0.roa
File: lJrMusa3mSiCQQAt6NyvMq3PlX0.roa (raw, json)
Hash identifier: 2sSAUYXKwtiuN/k9kfYgZ2s/w2n9QoGYFpAZQf1CvzM=
Subject key identifier: 94:9A:CC:BA:C6:B7:99:28:82:41:00:2D:E8:DC:AF:32:AD:CF:95:7D
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 018CCA298E75F0BA720AA285CDB9F612380E
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/lJrMusa3mSiCQQAt6NyvMq3PlX0.roa
Signing time: Tue 02 Jan 2024 12:32:50 +0000
ROA not before: Tue 02 Jan 2024 12:32:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50981
IP address blocks: 91.226.190.0/24 maxlen: 24
91.226.190.0/23 maxlen: 23
91.226.192.0/24 maxlen: 24
91.226.191.0/24 maxlen: 24
91.216.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:8e:75:f0:ba:72:0a:a2:85:cd:b9:f6:12:38:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Jan 2 12:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=949accbac6b799288241002de8dcaf32adcf957d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:c0:fc:cc:ef:e2:a1:2b:de:a9:9a:5c:2c:
9f:18:72:60:e9:0e:5d:cf:f2:89:87:c2:34:2f:92:
8f:64:ed:29:cf:b9:be:c7:2e:2f:df:f0:7a:1b:81:
4f:df:c2:a2:f3:cc:e8:6b:19:df:6d:44:58:27:e1:
56:da:06:5f:3c:8f:56:f9:90:4f:d0:d6:4c:8d:f5:
cd:a2:b0:56:6d:ed:da:69:99:a6:9e:47:5f:d6:a9:
78:f4:80:b6:38:ea:36:c8:f0:14:09:1b:e0:46:9d:
54:f8:19:f9:10:e2:dc:e6:27:69:76:17:82:fd:f8:
bc:33:5b:f6:ce:b2:95:cc:6f:da:58:ec:af:5a:14:
8e:44:c1:dd:c6:d0:22:bb:cd:1e:79:4c:a3:1d:14:
dc:2b:3f:86:ff:fe:88:29:85:9e:c9:e2:ce:f5:4b:
1a:00:eb:33:16:c3:fa:8b:39:88:41:05:9c:5d:45:
d6:1d:c4:2c:ca:57:47:c4:7a:3f:2b:d0:3c:2f:ad:
52:44:03:67:80:24:ea:0f:33:3a:e9:19:6b:e3:27:
6e:54:7d:a3:17:fb:64:5b:7b:fa:73:57:1a:b0:bd:
cf:dc:68:cc:ef:63:bb:ba:ef:52:9b:a2:29:08:7e:
df:3c:e6:d2:02:d8:24:3e:54:ea:f5:22:f2:a2:f6:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9A:CC:BA:C6:B7:99:28:82:41:00:2D:E8:DC:AF:32:AD:CF:95:7D
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/lJrMusa3mSiCQQAt6NyvMq3PlX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.61.0/24
91.226.190.0-91.226.192.255
Signature Algorithm: sha256WithRSAEncryption
9f:4b:a9:b7:fe:77:67:ff:85:28:4f:d3:0f:71:32:cf:58:7c:
26:f0:7d:97:16:36:f0:ee:5f:b3:72:cb:7b:bc:d3:82:54:91:
2b:94:44:1d:84:b0:ef:eb:c4:0a:78:92:48:e5:a7:66:cd:56:
f3:bd:8f:14:a8:8d:13:77:64:5d:6b:1a:eb:82:8e:0a:dc:f4:
ca:46:98:c1:cd:e2:a4:73:a1:ee:9c:41:4a:bc:52:24:95:a8:
8a:b9:1a:3c:7f:6e:9c:67:12:41:e2:14:c8:9f:3e:a0:5d:31:
9d:ad:40:0c:e5:b5:a8:fe:39:3c:d8:d3:fc:c2:3c:9e:53:9b:
6f:42:f0:98:ee:d2:fd:06:74:2b:25:42:56:2e:8b:9d:24:cb:
25:53:7c:f1:00:c5:d2:db:88:32:4a:fc:8f:c0:38:29:9d:9f:
a6:40:eb:ea:ba:7c:f1:39:1f:b2:00:2f:87:ad:69:2f:9e:fa:
dc:e8:6c:93:04:7f:58:6f:6a:17:01:5a:dd:2d:b5:f3:d4:66:
a5:1d:e3:d5:ae:3f:19:b7:0d:b1:84:b7:62:62:81:64:e6:53:
84:e9:f7:d2:51:61:11:b0:2f:bb:21:18:4d:73:d4:56:0c:a9:
5f:51:dc:82:90:49:11:a0:b2:70:4d:fa:c2:8f:37:02:46:92:
b5:37:bb:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:58 2024 by rpki-client on console-ams.rpki-client.org