Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/v4YMcovPaRoYZ8UrqGvhkoyuZP8.roa
File: v4YMcovPaRoYZ8UrqGvhkoyuZP8.roa (raw, json)
Hash identifier: s2j+vKhHPnTQ4EvndSJD7uqWtgk4EUIE+RYXML3iMCQ=
Subject key identifier: BF:86:0C:72:8B:CF:69:1A:18:67:C5:2B:A8:6B:E1:92:8C:AE:64:FF
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 018CC26D0D823BD0504B721FA1F21415BF60
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/v4YMcovPaRoYZ8UrqGvhkoyuZP8.roa
Signing time: Mon 01 Jan 2024 00:29:35 +0000
ROA not before: Mon 01 Jan 2024 00:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209690
IP address blocks: 91.132.244.0/24 maxlen: 24
91.132.246.0/24 maxlen: 24
91.132.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0d:82:3b:d0:50:4b:72:1f:a1:f2:14:15:bf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Jan 1 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf860c728bcf691a1867c52ba86be1928cae64ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fb:ff:a8:93:ae:7b:79:86:a2:e3:4a:78:1b:
7c:02:8c:d8:97:c8:24:6f:16:36:90:a6:01:0f:9a:
1a:dc:0c:ed:58:45:c7:c9:dc:0b:fd:cb:c8:21:b7:
bc:78:31:7e:cb:40:c2:66:21:13:ab:9d:25:f3:eb:
42:9e:ce:3f:78:3d:60:e3:69:7b:ec:6a:05:c3:2a:
1c:1a:19:e9:57:0c:75:b2:03:d2:ca:56:ed:57:9a:
8a:e2:fe:43:1e:62:1f:86:60:af:2b:01:9d:c8:41:
44:3f:07:51:9e:78:f6:d0:1f:d2:79:79:94:01:fd:
43:1a:6c:e5:66:e1:db:bc:f0:9c:fc:48:77:8d:b0:
9b:68:02:6e:5c:ef:72:c9:8c:7a:60:c2:f7:61:1b:
a1:7d:4a:46:7a:2a:5a:da:d5:63:3c:15:5d:fb:df:
a0:6f:0d:00:0d:4e:b6:f7:f0:61:02:7c:15:c8:b1:
af:85:de:62:fe:5c:14:06:3e:66:29:f4:28:e7:93:
87:87:42:b0:af:d3:34:0b:6a:4c:4a:a9:3b:bb:2d:
39:9d:7d:98:b9:f3:f7:b1:7b:c9:f5:50:6c:99:b4:
e6:16:9c:53:fe:56:f8:5c:69:7c:e1:eb:3c:95:53:
ae:65:20:28:4e:2b:47:24:45:e1:ad:f9:91:82:a3:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:0C:72:8B:CF:69:1A:18:67:C5:2B:A8:6B:E1:92:8C:AE:64:FF
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/v4YMcovPaRoYZ8UrqGvhkoyuZP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.244.0/24
91.132.246.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:1a:c0:c4:70:92:88:7c:28:b2:d9:d5:71:5a:4b:60:7d:6a:
96:2d:ee:0d:63:48:75:2d:1f:c3:da:3d:a9:fb:1a:26:89:cc:
00:f8:2d:21:09:27:df:4a:72:a3:20:42:8b:75:dc:d6:af:c1:
91:d6:86:44:7e:eb:9c:18:cf:63:f3:39:a4:6c:43:c4:dd:b6:
8d:68:8e:f8:ea:f4:17:92:01:ab:7e:e6:74:d9:9e:3b:b3:32:
94:37:5a:19:ca:19:e1:f2:f0:ca:f3:2c:7d:ff:c2:61:46:38:
f8:e2:3f:44:7f:8f:4c:af:fe:33:9a:b1:c9:fd:04:45:03:3e:
dc:16:76:d2:30:e1:3e:aa:74:b5:4e:05:6b:d0:2b:b2:44:11:
41:8d:6c:b7:5c:2e:b5:65:c0:4c:80:0c:06:97:ba:f1:75:f5:
5b:3b:45:4a:bc:3f:f9:65:40:df:96:04:d9:34:02:9f:c1:47:
8d:70:c8:4b:4d:23:18:d9:17:f3:ee:f3:b5:39:75:fb:f7:27:
e7:e3:2b:a5:36:78:f6:05:73:b7:42:4a:5f:fd:8e:0b:07:41:
9f:c2:ac:5b:8a:5b:49:cd:2d:ea:7f:06:5d:b7:f7:ec:88:2f:
f6:a1:e9:61:2f:77:21:32:27:aa:76:5c:ed:2b:2a:0d:5d:eb:
9e:49:39:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:58:17 2024 by rpki-client on console-fra.rpki-client.org