Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/pO8a2jFXLBohngu3F9Y_szH4ZY8.roa
File: pO8a2jFXLBohngu3F9Y_szH4ZY8.roa (raw, json)
Hash identifier: VbMinTqNssNbKJZh8z2ibr9wf/WPESYbDi3B1a1XU9Y=
Subject key identifier: A4:EF:1A:DA:31:57:2C:1A:21:9E:0B:B7:17:D6:3F:B3:31:F8:65:8F
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 018CCA99C9EB67E352AB0E5156946E9D9737
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/pO8a2jFXLBohngu3F9Y_szH4ZY8.roa
Signing time: Tue 02 Jan 2024 14:35:25 +0000
ROA not before: Tue 02 Jan 2024 14:35:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201108
IP address blocks: 91.206.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:c9:eb:67:e3:52:ab:0e:51:56:94:6e:9d:97:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Jan 2 14:35:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4ef1ada31572c1a219e0bb717d63fb331f8658f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:73:a3:b0:89:8e:3a:f9:b9:14:26:11:b5:
e2:08:8e:06:6e:6a:cf:62:1d:e4:48:87:d8:d8:1f:
6e:8c:dc:01:ed:33:04:5a:39:56:ef:86:d0:5e:a7:
39:bb:0c:81:88:d6:6a:a2:7e:b7:46:1e:dc:f6:32:
ad:c1:f0:c5:f5:d7:71:9b:bb:ae:51:64:f2:31:b0:
f7:44:a5:ec:98:7b:5a:dc:c9:38:5f:f9:f9:d0:8f:
a9:69:dd:88:33:a1:17:7d:f8:13:a2:73:10:b8:80:
0d:f6:f9:3c:e7:ee:04:b3:67:be:e4:d3:ed:ec:8c:
7e:da:42:f1:91:89:b8:e1:2d:ee:86:91:b5:90:f9:
21:44:ca:bc:36:ef:d3:66:6e:a9:ad:9c:20:37:45:
0b:0c:1d:72:62:c0:38:86:7b:36:eb:2b:55:5d:84:
b1:19:32:9e:23:5a:6d:f8:b9:09:a8:92:3e:10:93:
49:e8:1a:6b:61:77:d2:88:78:99:f2:10:f9:a9:85:
d0:63:a6:f0:6e:33:bf:24:72:48:c7:60:36:57:9c:
d1:e4:39:24:fb:7f:90:a0:75:89:6b:1f:11:8c:40:
fc:21:e9:3e:ac:2a:c4:7f:f3:43:55:08:65:21:68:
2b:a3:58:fb:70:23:2e:60:59:4c:ee:1f:b3:c3:65:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EF:1A:DA:31:57:2C:1A:21:9E:0B:B7:17:D6:3F:B3:31:F8:65:8F
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/pO8a2jFXLBohngu3F9Y_szH4ZY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.113.0/24
Signature Algorithm: sha256WithRSAEncryption
50:76:f8:65:24:9f:59:7c:3c:8b:a1:c2:99:37:33:0d:49:4c:
fb:ad:99:09:21:bb:75:fd:66:63:0b:86:74:71:85:da:0a:3c:
83:f0:52:92:21:b3:c6:ba:f1:50:a2:cd:2c:96:a4:8b:52:cc:
f6:da:62:6f:82:0c:d1:db:d7:14:4c:e8:32:a4:6b:83:52:b2:
a1:e4:72:43:a2:ef:be:1c:1c:46:9d:ca:ab:34:78:dc:df:32:
5a:38:5e:c0:d4:dd:47:d8:56:aa:12:7c:db:83:ee:bb:2c:7c:
3b:ab:4f:01:5b:4c:d0:be:46:03:53:4b:d2:f1:6d:07:83:87:
aa:91:2f:93:e3:61:e8:12:7f:c6:23:a5:dd:ce:da:5e:68:41:
6c:2f:31:1d:ec:eb:89:4f:00:e1:54:49:7a:2a:73:d7:6d:4e:
c6:99:ed:0b:13:73:0f:91:67:e4:6b:d5:33:eb:08:b4:fb:7a:
f3:e4:93:b6:49:98:da:9e:e2:55:bb:57:01:98:06:f3:64:ac:
21:a3:fd:e2:50:3e:f5:c7:64:ce:82:ab:92:f8:a1:56:b8:03:
a4:c7:3a:21:fa:57:ad:46:69:d1:9a:fc:8b:34:4f:07:79:98:
55:62:09:9f:d1:4e:4a:0e:d9:0b:bf:42:95:37:65:2f:a6:3b:
64:48:93:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:51:18 2024 by rpki-client on console-ams.rpki-client.org