Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/NoIcgrsuUfZ7IstRIfIIiVIR88I.roa
File: NoIcgrsuUfZ7IstRIfIIiVIR88I.roa (raw, json)
Hash identifier: 62Cefa0PLS3JxwItcYJwExyLZbQJnrT2J14NRxR0m5w=
Subject key identifier: 36:82:1C:82:BB:2E:51:F6:7B:22:CB:51:21:F2:08:89:52:11:F3:C2
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 018CC5DC3A4D459D2EE14D5EABE08ED9D648
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/NoIcgrsuUfZ7IstRIfIIiVIR88I.roa
Signing time: Mon 01 Jan 2024 16:29:53 +0000
ROA not before: Mon 01 Jan 2024 16:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47958
IP address blocks: 91.208.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:3a:4d:45:9d:2e:e1:4d:5e:ab:e0:8e:d9:d6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: Jan 1 16:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36821c82bb2e51f67b22cb5121f208895211f3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:54:f1:06:9a:15:dd:5f:bd:37:dd:2f:57:
30:92:54:18:d0:f0:3f:a9:b2:e6:b3:1f:6b:02:50:
68:6e:0c:92:97:aa:f4:b1:62:27:05:3b:74:85:ea:
e6:fc:f3:8d:4b:f6:e6:1c:00:28:19:3f:47:0c:89:
fa:f6:16:be:25:ff:ee:85:b1:c2:ad:d2:71:ae:59:
8f:8f:b6:60:69:4b:fe:4c:82:1f:89:f8:f4:5e:13:
79:fb:22:0e:45:5e:aa:38:e7:01:28:f8:40:cc:09:
00:67:41:a0:f0:db:06:1c:53:84:22:93:02:2e:cc:
1e:8a:f7:1c:bd:f7:00:76:d3:56:10:da:d6:37:e4:
e3:0c:04:b2:c6:7f:bc:52:74:c4:92:37:98:58:dd:
fd:3d:68:5b:df:fb:b6:ac:9f:f8:47:5a:0d:7d:7f:
aa:96:a3:65:da:bd:81:28:66:cf:08:9d:f1:38:05:
93:0d:2a:8d:72:c8:f6:9b:a7:b5:22:ac:94:52:28:
65:6a:e5:35:66:28:1a:40:4f:c8:6c:3c:ce:93:63:
9d:93:35:c7:73:fe:fa:4f:c6:2b:bb:c6:d0:be:10:
27:4a:dd:fb:ed:c6:84:da:00:51:52:35:42:21:ba:
c9:43:47:96:e6:45:fe:e0:75:ea:5f:ca:ff:27:8f:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:82:1C:82:BB:2E:51:F6:7B:22:CB:51:21:F2:08:89:52:11:F3:C2
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/NoIcgrsuUfZ7IstRIfIIiVIR88I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.215.0/24
Signature Algorithm: sha256WithRSAEncryption
84:60:0c:26:45:97:b3:c1:66:6f:8c:23:97:31:1f:af:25:64:
a3:cf:d4:e8:af:ef:59:0f:b0:47:b7:62:65:c2:20:ab:af:29:
02:ad:62:84:41:01:6e:7b:90:e2:2b:fb:5d:cf:eb:0b:18:57:
85:69:84:97:77:dc:e6:65:d9:79:e0:5f:ec:05:f6:d5:78:ac:
da:60:06:cd:72:88:11:eb:29:fd:69:08:54:d0:b8:03:60:cb:
9e:fc:74:0e:64:33:64:71:87:70:ef:d4:17:8f:b9:67:3a:b9:
2f:93:1d:d2:28:1f:b6:ff:d3:43:a5:83:40:28:18:dd:a5:c7:
84:eb:ef:bd:2c:9a:6e:8a:40:56:c4:f2:79:db:c1:f2:0e:6c:
bb:50:16:5c:d4:34:ad:3a:4e:a1:74:ee:a7:52:eb:4f:9f:50:
11:04:80:a1:f8:ac:b3:ae:c9:2e:65:19:f6:ef:27:a0:9a:4c:
21:7e:06:3b:a7:c2:a5:eb:09:87:74:25:7f:4b:cb:7c:93:8a:
01:8c:5b:76:08:2a:56:ab:89:e8:95:e8:f3:de:c6:bc:d6:84:
7c:71:46:39:e3:99:e4:35:d0:e2:72:ac:bd:24:4e:5d:f4:7e:
91:12:08:54:89:84:37:c3:e7:2b:77:50:51:3e:e0:17:cb:d8:
41:09:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 12:19:53 2024 by rpki-client on console-ams.rpki-client.org