Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/kzUYwJhep0ceBv9K25Sx1AuBXa0.roa
File: kzUYwJhep0ceBv9K25Sx1AuBXa0.roa (raw, json)
Hash identifier: kRIcvR47bh8AsbJtBsF4GDAQ6tpHZYGd+jDHo4ODfDI=
Subject key identifier: 93:35:18:C0:98:5E:A7:47:1E:06:FF:4A:DB:94:B1:D4:0B:81:5D:AD
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 018CC795100D28A0583ACE9CC14E238FA90A
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/kzUYwJhep0ceBv9K25Sx1AuBXa0.roa
Signing time: Tue 02 Jan 2024 00:31:23 +0000
ROA not before: Tue 02 Jan 2024 00:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29314
IP address blocks: 91.226.6.0/23 maxlen: 23
31.41.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:10:0d:28:a0:58:3a:ce:9c:c1:4e:23:8f:a9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: Jan 2 00:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=933518c0985ea7471e06ff4adb94b1d40b815dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c1:2e:1f:ac:09:75:7c:da:d4:44:e3:fc:7c:
b0:c7:ad:da:b7:b2:57:bd:a4:f9:dd:8e:d3:80:1e:
e9:11:f8:c1:ec:16:24:e9:4f:f6:11:3d:a7:bc:0a:
19:7d:bd:0f:f3:70:26:8b:5f:55:66:f7:5b:3f:46:
80:ae:6a:4b:5e:76:03:fc:dd:fd:7d:cf:02:e9:d2:
b4:69:ed:dc:95:44:c2:00:bb:3e:1f:29:c3:6c:87:
5e:02:49:eb:df:c9:43:4b:ec:ca:4f:a0:25:a8:9c:
70:9a:70:fd:dd:bf:94:04:a7:3e:70:b8:7f:7f:77:
c3:4b:7c:54:c6:00:f8:55:cd:e3:db:3c:ad:d5:af:
55:30:c2:33:e7:da:66:25:fb:95:88:74:83:87:f9:
93:68:3b:4c:a6:44:e7:09:f5:6c:08:02:a1:d9:fe:
3e:d9:bb:9f:30:8b:7e:ac:41:c6:cf:81:f3:d5:b0:
b6:4c:22:5d:c8:73:6d:36:3e:9b:f7:9c:dc:a1:c5:
43:a7:f7:41:02:bf:be:d5:ed:75:d3:9d:82:bc:21:
f8:11:c4:65:d3:5f:9f:c7:f3:98:95:01:f3:8e:cc:
79:cd:2f:38:53:7e:21:47:5a:83:b9:34:25:9e:1f:
cf:ed:ab:03:88:8c:b3:ca:55:f0:a0:97:7b:44:4b:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:35:18:C0:98:5E:A7:47:1E:06:FF:4A:DB:94:B1:D4:0B:81:5D:AD
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/kzUYwJhep0ceBv9K25Sx1AuBXa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.208.0/21
91.226.6.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:1c:24:fa:ed:c3:75:ad:1c:3d:cc:15:0c:35:5a:e0:29:03:
a0:80:75:50:8d:6b:83:2c:4b:38:00:ff:ed:d0:ab:17:28:be:
e3:95:5d:03:76:b3:04:e6:df:d3:0d:19:9e:fe:3c:19:76:88:
80:64:39:f0:52:df:a5:09:b8:64:a1:cd:f4:6c:26:ae:b6:a2:
1c:83:4e:b9:43:ec:74:c7:d8:7a:65:6d:62:44:eb:51:4c:0d:
cd:d3:38:29:89:1e:9b:05:76:55:de:5c:f0:63:30:87:3d:04:
a8:20:ea:b4:a1:40:11:75:22:4f:13:00:a9:3f:50:20:14:ef:
4d:88:9e:db:90:97:8f:68:9b:71:e8:0a:4b:d3:2e:00:62:01:
9c:ff:2f:d7:08:7b:90:07:47:15:a4:63:90:1f:2f:cc:ab:cb:
7c:a6:ac:db:fe:08:c7:61:51:95:0d:64:c1:23:09:5d:75:64:
5c:ab:5c:6a:50:f6:c0:82:cd:5a:cf:90:b2:25:3d:f3:d9:49:
a6:df:fb:e5:1e:18:cc:85:80:4e:46:56:e1:f9:70:db:75:6d:
f5:dc:9e:3b:e6:c4:96:e7:d7:e8:46:a6:cf:c2:c8:5b:08:c8:
9f:99:c6:1b:fe:0f:9c:84:7f:2f:ac:e0:96:d4:9a:9d:eb:c2:
a7:94:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:05:33 2024 by rpki-client on console-ams.rpki-client.org