Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/CDsriLWRoUDvW_6hL3L1H2lTL_I.roa
File: CDsriLWRoUDvW_6hL3L1H2lTL_I.roa (raw, json)
Hash identifier: jMm8TVhZ6r7tITAjvezylNcnO0x38OYOdZOqXPaCL40=
Subject key identifier: 08:3B:2B:88:B5:91:A1:40:EF:5B:FE:A1:2F:72:F5:1F:69:53:2F:F2
Certificate issuer: /CN=83020637e89655e299d91843769254af07714994
Certificate serial: 018CC94CA4E4C2F9D229FD93FA261DCB7E3E
Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/CDsriLWRoUDvW_6hL3L1H2lTL_I.roa
Signing time: Tue 02 Jan 2024 08:31:32 +0000
ROA not before: Tue 02 Jan 2024 08:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48745
IP address blocks: 91.212.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:a4:e4:c2:f9:d2:29:fd:93:fa:26:1d:cb:7e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83020637e89655e299d91843769254af07714994
Validity
Not Before: Jan 2 08:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=083b2b88b591a140ef5bfea12f72f51f69532ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:73:b8:6d:f8:22:60:86:4d:b8:f9:b8:c1:
59:e4:29:76:3d:e9:cf:7b:65:1c:08:c4:82:14:51:
54:69:5b:99:7f:b7:30:68:d8:f3:81:78:30:5f:cb:
5e:b1:dd:10:9e:b4:ea:97:0c:48:63:40:04:84:b1:
27:ad:fb:76:73:8a:63:61:6c:c1:2e:9c:33:99:08:
45:00:fa:cf:c5:f7:0d:00:00:58:56:27:f2:53:6f:
4d:5b:c1:52:f5:8a:5b:28:ac:2d:79:ac:a9:2f:36:
df:83:54:47:bb:f3:9c:bd:c0:82:57:b8:db:13:bb:
15:e2:03:84:ee:58:43:02:4b:ee:59:a4:97:5c:c0:
fd:6b:06:0c:4f:ad:70:c0:33:c2:96:32:a5:fe:e4:
2b:52:ee:0e:53:9f:57:e4:84:62:1c:a2:f4:fa:ea:
5b:86:f4:63:bd:43:a4:ba:8f:9a:d5:51:8a:6c:6a:
fb:cf:1b:6c:50:d0:a6:c3:0d:41:a2:00:ec:0a:40:
d3:26:69:91:49:03:7f:ea:38:a6:72:c7:fb:5a:42:
8c:06:3f:a9:19:8c:5b:81:96:ee:97:26:64:06:4d:
8d:92:f1:ad:9b:79:16:a6:00:91:29:a7:63:33:07:
80:d2:bb:e9:3a:f4:16:71:0e:c3:f3:7b:43:d0:4f:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3B:2B:88:B5:91:A1:40:EF:5B:FE:A1:2F:72:F5:1F:69:53:2F:F2
X509v3 Authority Key Identifier:
keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/CDsriLWRoUDvW_6hL3L1H2lTL_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.17.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0d:26:fe:44:03:58:2b:dd:9b:d1:be:66:f3:e6:6a:ea:a1:
81:fa:df:91:d2:ee:60:6d:55:53:10:05:c9:92:07:09:53:74:
1e:e1:87:84:33:43:81:50:0a:56:ef:0d:b1:7d:af:7d:13:5f:
05:ae:73:db:d3:54:57:13:53:fc:21:6d:b1:be:45:af:2d:0c:
a7:b6:01:50:75:1e:e0:ea:72:26:18:e5:e9:9d:03:cf:20:d7:
e2:72:e3:b5:81:b5:33:bc:62:f7:4a:9b:44:f1:60:60:af:2e:
e9:b3:be:f0:98:d3:a4:28:00:d9:e7:d8:7d:bb:5e:35:48:65:
7a:ce:4a:be:89:bb:1f:18:63:9e:ef:8d:a3:47:0e:7d:dd:68:
4f:80:9a:9c:b5:a4:87:e4:37:1b:e6:c5:a1:cc:27:8d:cc:35:
93:cd:8e:7d:f2:fd:52:13:bb:e4:ef:e7:e8:46:80:51:da:3e:
d6:2d:56:33:e0:fc:6f:2d:2b:ad:1c:97:de:38:7d:d3:45:40:
57:42:b1:13:e3:ae:d5:d1:58:66:46:93:a8:e0:ea:87:e7:b8:
d7:d6:87:9b:7f:37:ce:27:d4:b0:f9:54:71:e1:7f:bb:c6:13:
d8:76:86:dd:52:2f:01:d3:ca:7b:25:56:16:14:d3:60:08:69:
4f:f5:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:30:44 2024 by rpki-client on console-ams.rpki-client.org