Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/AbwfR81Ym5r4Rz4WAapd3IQP2qk.roa
File: AbwfR81Ym5r4Rz4WAapd3IQP2qk.roa (raw, json)
Hash identifier: Sdnu2H8sTIohyTZl1MPHFMtOPnKzaAQTpTgg1gQ6kUI=
Subject key identifier: 01:BC:1F:47:CD:58:9B:9A:F8:47:3E:16:01:AA:5D:DC:84:0F:DA:A9
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 018CC7954615FB098A6C1A806B613E4A5A6D
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/AbwfR81Ym5r4Rz4WAapd3IQP2qk.roa
Signing time: Tue 02 Jan 2024 00:31:37 +0000
ROA not before: Tue 02 Jan 2024 00:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51559
IP address blocks: 91.227.4.0/24 maxlen: 24
91.227.5.0/24 maxlen: 24
91.227.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:46:15:fb:09:8a:6c:1a:80:6b:61:3e:4a:5a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Jan 2 00:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01bc1f47cd589b9af8473e1601aa5ddc840fdaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:b6:b6:97:cd:4f:c6:77:f7:51:fd:be:62:
41:6e:3a:7f:8a:dc:68:2b:eb:ab:02:b6:06:70:9b:
c8:b9:70:39:5a:0d:8b:53:7e:1e:a2:16:8b:4c:38:
16:8b:6d:28:15:c9:f6:34:0a:1c:c7:b7:d4:bd:3f:
12:05:b7:ea:01:c0:2c:53:56:4e:4b:f6:16:b1:a9:
2c:0a:66:c1:87:ef:4e:e1:d5:a0:79:62:35:c7:18:
64:f2:93:62:fd:2c:26:8f:ac:54:62:5d:cb:92:08:
53:5c:3a:9f:9b:8c:bc:18:bc:14:46:9e:40:57:77:
a9:c4:70:75:75:a4:de:ae:61:ba:d8:d1:c3:fb:88:
8a:b3:ac:f4:d2:2c:0b:f6:2d:52:5e:d2:4a:7f:4b:
30:07:7a:fc:50:aa:2d:80:f0:00:9c:76:64:90:66:
69:a8:48:bd:62:ed:be:d1:80:68:0d:fd:1a:19:e1:
cc:5d:ee:61:a1:81:aa:07:ae:35:94:cc:87:a5:34:
3e:2b:e5:26:af:02:73:05:d5:b5:dd:8c:ff:39:2f:
ac:d6:9c:6d:95:d9:e3:28:10:0f:d3:2b:8a:66:02:
b8:f8:c1:ce:d9:82:b4:e8:aa:15:16:15:f8:dc:e4:
20:a7:a4:29:ab:a5:e9:7a:76:2a:58:ab:50:9b:bc:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BC:1F:47:CD:58:9B:9A:F8:47:3E:16:01:AA:5D:DC:84:0F:DA:A9
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/AbwfR81Ym5r4Rz4WAapd3IQP2qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.4.0-91.227.6.255
Signature Algorithm: sha256WithRSAEncryption
06:20:78:53:bf:f5:0c:b8:89:de:46:dc:fd:34:1a:d2:9a:01:
43:15:31:36:b5:2a:2d:62:d0:58:61:5f:31:03:6d:3f:07:aa:
4b:24:42:a3:78:a0:4f:f8:a6:c0:a6:53:a8:87:b1:2b:73:64:
4d:56:10:81:2a:43:08:5a:23:7a:fb:4f:06:6e:17:dd:fa:7c:
ec:8b:36:f8:c0:71:f9:af:fa:82:1e:12:0f:74:56:99:c1:1c:
1f:13:83:72:b4:e8:73:67:39:78:8c:1f:75:56:d0:58:e4:76:
e7:4b:e3:cc:12:3c:1a:c8:0c:f4:7c:b5:bf:14:c1:36:ac:15:
f6:3c:db:a8:e6:07:51:42:59:08:f2:de:59:a4:0b:67:cf:71:
00:28:7b:9d:6f:b8:12:d9:5a:04:45:70:44:8a:da:4e:ef:2f:
b9:d7:eb:ea:e0:c7:32:13:1f:04:7c:72:25:79:18:bb:2e:1f:
a1:cb:0c:aa:9d:46:53:f9:b4:12:1c:2d:1a:c4:f6:d8:ae:65:
53:e6:65:37:36:da:84:07:91:bb:e2:64:eb:16:47:02:e7:90:
66:ae:16:9a:63:2b:f5:cf:70:0b:0f:f5:3b:21:97:a0:08:77:
9d:a9:3e:33:55:d0:51:08:39:19:5f:3d:07:c1:c4:dd:46:77:
07:eb:c0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:51:09 2024 by rpki-client on console-ams.rpki-client.org