Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/gVToHVNQenvf_vCBv_zI_VfiniM.roa
File: gVToHVNQenvf_vCBv_zI_VfiniM.roa (raw, json)
Hash identifier: 4DY6UeAsN7Slb3Uhx2e4uwU2g9rISBPrhW1gZNsScBY=
Subject key identifier: 81:54:E8:1D:53:50:7A:7B:DF:FE:F0:81:BF:FC:C8:FD:57:E2:9E:23
Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial: 018CC80310DA76866D2E2B60B39B8AB5B411
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/gVToHVNQenvf_vCBv_zI_VfiniM.roa
Signing time: Tue 02 Jan 2024 02:31:33 +0000
ROA not before: Tue 02 Jan 2024 02:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2119
IP address blocks: 91.220.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:10:da:76:86:6d:2e:2b:60:b3:9b:8a:b5:b4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Validity
Not Before: Jan 2 02:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8154e81d53507a7bdffef081bffcc8fd57e29e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:fa:f5:07:fc:de:50:27:cd:d1:a7:99:12:
65:ad:e5:b4:12:86:64:0e:5f:d5:05:9d:87:e1:6d:
d5:b1:88:7e:9c:2e:3b:27:58:77:fa:5d:fa:60:79:
56:b8:e9:66:e2:97:e1:de:d8:37:0b:97:b5:44:47:
3b:b0:4a:52:dc:38:6a:d1:46:60:88:04:11:f7:f9:
0d:2f:f3:dc:ab:0c:9e:a9:de:f1:03:e9:03:37:19:
85:2a:48:78:e9:aa:e0:7e:4f:2e:50:d3:80:72:ad:
f4:b2:65:f4:cb:56:03:1c:53:16:ad:17:39:25:69:
64:2e:e5:ca:a0:11:f6:c3:bc:14:b1:0d:42:34:4d:
71:53:f7:69:07:07:f0:62:c0:3c:9a:c6:46:f5:bb:
03:83:17:0b:ef:10:0a:85:64:d8:dc:de:f1:4c:ca:
33:30:3b:22:1f:87:0b:f3:ed:18:77:a7:6b:c7:85:
e8:f5:ac:39:8e:3c:b4:bf:1f:8f:db:39:d3:14:34:
45:4f:40:94:6d:37:22:59:d4:c8:a5:01:b4:93:7e:
f6:78:18:7b:9d:0a:e0:b8:55:9b:cd:bb:9e:81:b9:
30:f1:b1:fd:46:82:3d:17:d0:70:00:f1:ee:f8:ec:
a1:3d:3c:99:83:64:cd:0d:32:9d:65:8e:b9:a5:7a:
df:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:54:E8:1D:53:50:7A:7B:DF:FE:F0:81:BF:FC:C8:FD:57:E2:9E:23
X509v3 Authority Key Identifier:
keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/gVToHVNQenvf_vCBv_zI_VfiniM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e7:a4:1b:c1:ae:75:27:7a:dd:fe:9f:b5:0e:76:3f:3b:46:
55:5f:3f:5a:88:bf:a6:f8:c2:3e:6f:8e:ea:ac:e1:65:1b:a4:
4b:7a:cf:9e:b9:f7:68:99:06:3e:de:3d:db:b9:63:d8:07:08:
3c:37:72:a4:95:29:bf:b0:49:f7:99:ff:8d:f6:8a:8c:c0:58:
cc:b6:d1:25:b2:05:0c:8d:af:bb:0e:9a:eb:34:40:6e:70:9a:
49:b2:9f:53:c0:ce:f7:05:8e:48:03:d5:c8:ae:8b:9e:4a:7c:
2f:3a:45:f5:a5:09:93:e9:9c:03:13:1b:2c:e0:6a:7a:7f:6e:
f8:7f:44:ae:08:02:a7:e9:eb:a3:e4:c2:7c:ff:8a:8c:53:39:
e6:b4:cb:a9:c3:0b:51:25:3b:8f:ef:9a:13:7b:db:d2:37:d7:
89:99:92:d3:d0:bf:e2:ca:53:17:a0:6a:7d:b8:80:1c:a0:78:
40:06:23:60:66:23:a8:69:21:43:c7:93:f4:31:c5:ed:f1:e8:
30:9e:48:6d:ba:70:59:a9:96:e6:dc:fa:ed:3e:92:3c:7a:72:
13:11:f3:43:8a:51:7d:92:7b:c4:a5:e9:8c:a5:58:e1:5d:ac:
ff:ed:4a:4c:15:28:29:37:df:7c:e3:5e:42:91:38:20:ff:1b:
2b:15:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:05:36 2024 by rpki-client on console-ams.rpki-client.org