Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/CyogARmBheYBY9zsdpmfs6DXYAo.roa
File: CyogARmBheYBY9zsdpmfs6DXYAo.roa (raw, json)
Hash identifier: CngiySxBbytGlZ7HtdQXODskMAytvf8d6ObREGYbj+8=
Subject key identifier: 0B:2A:20:01:19:81:85:E6:01:63:DC:EC:76:99:9F:B3:A0:D7:60:0A
Certificate issuer: /CN=ec2408f545242558c1103c0194b4f561eb9a23a2
Certificate serial: 018CC6B917B477BB6A4D42C628639E8D5D20
Authority key identifier: EC:24:08:F5:45:24:25:58:C1:10:3C:01:94:B4:F5:61:EB:9A:23:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/CyogARmBheYBY9zsdpmfs6DXYAo.roa
Signing time: Mon 01 Jan 2024 20:31:08 +0000
ROA not before: Mon 01 Jan 2024 20:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47848
IP address blocks: 91.208.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:17:b4:77:bb:6a:4d:42:c6:28:63:9e:8d:5d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2408f545242558c1103c0194b4f561eb9a23a2
Validity
Not Before: Jan 1 20:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b2a2001198185e60163dcec76999fb3a0d7600a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:74:56:16:a2:2c:16:62:6e:84:63:39:b3:81:
b4:4e:1e:1b:2b:66:60:8f:a0:fc:3e:76:a8:d8:29:
a9:62:da:6a:99:7c:83:b6:79:d8:b7:a9:49:6f:70:
6f:f3:c2:1b:fe:47:81:d6:51:29:d2:e0:f9:d0:ab:
3e:64:09:12:37:0c:d1:e2:95:b4:11:25:07:43:37:
8d:dc:fe:dd:bc:13:fe:a7:6b:11:62:ec:47:a4:fe:
fc:fe:f6:97:93:78:f0:63:9d:ca:94:18:fc:ed:cd:
1e:3a:4c:ad:5a:bf:4f:7d:77:aa:7b:cd:33:40:fe:
ed:9e:0b:6c:38:06:82:c4:f7:ee:b6:99:cf:a7:f8:
89:c2:88:71:ed:72:ea:c1:ff:77:8e:b4:42:b1:91:
22:26:24:a9:e2:6e:9f:b2:d1:f6:19:47:24:64:45:
41:67:2e:8a:67:8b:c8:78:30:db:ea:ee:72:0f:10:
75:5a:16:64:7e:1b:83:80:dc:c1:37:4a:99:b6:03:
fe:58:42:81:4c:73:71:16:df:a9:01:0c:5f:0d:04:
78:0f:d1:a3:b4:7a:a6:ee:1c:dd:44:9a:6a:99:96:
ec:33:ec:e3:aa:e2:5b:0a:b1:ab:f2:7e:38:98:f2:
3c:bb:91:49:fd:9e:47:bb:6b:2c:22:0b:42:00:27:
71:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2A:20:01:19:81:85:E6:01:63:DC:EC:76:99:9F:B3:A0:D7:60:0A
X509v3 Authority Key Identifier:
keyid:EC:24:08:F5:45:24:25:58:C1:10:3C:01:94:B4:F5:61:EB:9A:23:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/CyogARmBheYBY9zsdpmfs6DXYAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.178.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f0:57:b8:52:fb:f8:fb:5f:b3:eb:83:c7:af:e2:4e:e3:3a:
4c:79:c4:2d:aa:4f:cf:1b:2e:b8:d6:7f:a2:8c:54:1e:9b:f8:
21:d0:8f:ae:0b:f9:12:ae:f3:07:f5:b2:eb:cb:aa:39:b4:85:
d9:02:c5:c6:96:46:e0:99:16:38:2a:a7:8b:ca:02:ec:de:eb:
42:4a:0b:91:23:ce:56:05:ba:05:99:d7:77:ae:28:53:70:26:
00:fe:3b:d4:1e:ba:8e:9d:77:af:78:fa:f6:f9:17:b3:f5:eb:
34:0b:2f:be:34:e9:4c:63:cc:f2:34:99:9c:cc:0c:60:3a:57:
38:95:7d:bf:b6:3f:93:43:0f:98:ed:52:79:c8:3a:fd:e5:94:
de:ec:ae:40:65:a0:c7:f4:d7:25:31:7d:34:d1:dc:8c:07:e0:
d1:45:32:ad:c2:0b:88:1a:6c:44:ab:ff:64:64:68:c6:92:f7:
19:3e:f5:9e:f5:9c:eb:be:b9:62:a6:9d:97:c8:84:8f:0a:0b:
6f:ea:d5:af:52:13:11:b6:fc:e6:18:26:b2:11:0b:32:c5:8f:
1d:ab:8c:19:28:5f:88:71:8f:0c:d7:01:55:9c:14:c1:e8:8c:
c2:cd:24:c3:1f:3c:46:ee:26:b7:d4:4f:a3:4f:f1:d7:11:49:
7c:60:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 05:24:11 2024 by rpki-client on console-fra.rpki-client.org