Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/0_lGLyo-uXpeF9n2n0-sDjgga88.roa
File: 0_lGLyo-uXpeF9n2n0-sDjgga88.roa (raw, json)
Hash identifier: viSf1L1zPX0Wy1mKzbNzrFzt0oUYoUWXrwM9xXwmbwI=
Subject key identifier: D3:F9:46:2F:2A:3E:B9:7A:5E:17:D9:F6:9F:4F:AC:0E:38:20:6B:CF
Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Certificate serial: 018CC7958097B3ABE141613865E2F8A1BDD5
Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/0_lGLyo-uXpeF9n2n0-sDjgga88.roa
Signing time: Tue 02 Jan 2024 00:31:52 +0000
ROA not before: Tue 02 Jan 2024 00:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197230
IP address blocks: 91.217.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:80:97:b3:ab:e1:41:61:38:65:e2:f8:a1:bd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Validity
Not Before: Jan 2 00:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3f9462f2a3eb97a5e17d9f69f4fac0e38206bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:fb:00:cc:37:7c:ab:98:34:5c:a9:8a:31:
1b:50:e2:5b:27:86:75:13:01:22:d5:c3:8d:99:cd:
63:62:e2:a1:19:6d:93:94:95:6e:0a:98:ff:84:ba:
69:c4:08:fb:8b:9e:6a:81:11:07:8d:30:b1:18:76:
e3:10:71:4d:f8:c0:3a:2a:c2:c7:ff:38:5c:5d:e6:
d3:86:cb:a4:04:80:7f:a7:74:a3:6c:16:ce:b9:24:
9f:f2:07:72:de:e0:fb:d9:26:f7:75:ff:fa:bd:b7:
be:fd:9d:73:03:2d:d6:ad:42:13:3f:79:cd:f5:d6:
7f:77:33:36:7a:a8:02:20:ff:25:e5:dd:4c:90:b9:
07:7d:81:8a:d6:ce:74:4c:12:f1:0f:44:27:cb:f0:
1c:03:eb:6e:7b:f1:9f:3b:3d:f4:87:71:17:28:ff:
31:8c:04:f5:b3:f0:26:52:04:31:ed:9f:c3:10:b3:
5c:56:e9:56:9d:78:f4:33:df:ac:ae:c6:2e:f1:f4:
48:74:f9:c8:f0:6c:27:7e:d3:61:fc:72:42:ac:40:
64:ad:4a:e4:03:34:72:98:47:6c:31:7c:bc:73:7c:
df:d5:97:bb:56:f0:6b:17:e0:50:48:6a:da:32:e7:
ba:1e:cd:6e:fd:d8:4d:6a:63:74:fe:f0:6b:ca:c4:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F9:46:2F:2A:3E:B9:7A:5E:17:D9:F6:9F:4F:AC:0E:38:20:6B:CF
X509v3 Authority Key Identifier:
keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/0_lGLyo-uXpeF9n2n0-sDjgga88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.140.0/24
Signature Algorithm: sha256WithRSAEncryption
03:26:f2:a0:4d:18:24:c7:8a:65:30:47:39:7e:b7:88:1a:0a:
f9:8d:e1:79:fa:17:c7:33:0a:6f:27:36:f9:5e:77:3d:9d:5c:
55:71:bf:ef:81:cb:84:e9:b1:74:1f:9a:8b:70:67:43:31:c1:
21:a0:e2:79:d6:6b:58:d4:fa:15:f0:1b:79:1e:53:74:5c:fa:
2b:ad:6b:eb:7b:13:e1:f2:c9:35:11:d3:34:79:04:8e:e6:31:
27:4c:38:3d:71:66:9f:58:ef:d1:0f:e5:3b:b4:71:ac:81:03:
b9:39:83:e6:e9:5e:91:2b:c3:49:86:0c:1b:83:e2:df:8e:42:
05:c7:af:0f:a1:b1:99:0e:e7:9b:08:a7:1f:91:e4:cc:15:dc:
d6:6a:32:db:d8:f6:5f:71:5a:33:d3:a7:76:0a:61:b5:5d:06:
02:29:87:1c:52:61:19:22:55:ae:11:6b:de:df:48:1b:e9:f6:
55:c8:d1:c6:f7:c5:3d:0d:09:98:45:9a:c6:9e:52:77:b4:d2:
9f:b8:07:9e:e2:b3:d7:25:95:8b:46:0e:1f:9a:7a:3b:cf:63:
af:cf:5e:81:c0:90:5e:5b:3f:f5:10:30:4a:85:51:de:55:1e:
64:84:5d:70:27:cc:64:d4:52:ce:0b:1f:e7:37:6c:2f:52:d3:
0e:4b:3d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:47:45 2024 by rpki-client on console-fra.rpki-client.org