Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/sHStvnn7VJKnZBC1lcXnV3HkLx4.roa
File: sHStvnn7VJKnZBC1lcXnV3HkLx4.roa (raw, json)
Hash identifier: YE6eXYI2Sh2Vponj9+6K4ReH9qvkY4pmk166zFvbSm4=
Subject key identifier: B0:74:AD:BE:79:FB:54:92:A7:64:10:B5:95:C5:E7:57:71:E4:2F:1E
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 018D692B05F69288247DF128E9209B382D2C
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/sHStvnn7VJKnZBC1lcXnV3HkLx4.roa
Signing time: Fri 02 Feb 2024 09:34:03 +0000
ROA not before: Fri 02 Feb 2024 09:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.227.208.0/24 maxlen: 24
185.64.73.0/24 maxlen: 24
185.64.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:2b:05:f6:92:88:24:7d:f1:28:e9:20:9b:38:2d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Feb 2 09:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b074adbe79fb5492a76410b595c5e75771e42f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:06:c7:b7:3f:11:b9:45:c0:44:bd:21:49:
a2:03:05:74:c0:39:de:b4:c7:90:f8:df:c6:16:fb:
ef:ac:83:ed:8f:0a:d7:c8:32:b2:e2:3b:e8:6a:07:
68:46:95:06:10:b9:46:40:c2:84:c9:33:66:42:f6:
80:e6:03:f2:54:93:90:44:48:09:69:a5:9c:6b:69:
0f:9a:03:72:e9:17:10:41:e5:36:cf:67:85:9a:d5:
7d:4f:4f:7d:71:5e:2e:0c:f1:ad:a6:fc:d9:dd:10:
07:ae:bd:08:e4:a6:1a:6d:8d:5d:6b:cc:c7:42:be:
79:70:13:ce:76:5e:ee:95:2f:9f:ca:85:df:65:44:
67:06:84:ad:1c:f0:92:e4:45:f1:53:96:29:ba:d1:
3e:7f:67:57:71:81:f7:92:e1:06:db:e6:f2:7d:3c:
ca:d1:c6:c3:89:35:32:d4:ac:8d:a9:1c:15:fb:d8:
45:d8:00:96:c2:10:93:92:1a:c2:8c:ce:9a:64:90:
5b:7a:fb:b1:39:d9:a1:51:17:34:29:ac:db:d5:0c:
ef:a0:a0:a9:ef:de:d9:21:73:71:5d:b6:1d:67:aa:
9f:8f:2d:e4:84:09:0c:f1:a6:06:8f:9b:4c:68:70:
06:be:65:e4:54:87:f9:71:b3:19:8c:c3:b0:d1:34:
41:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:74:AD:BE:79:FB:54:92:A7:64:10:B5:95:C5:E7:57:71:E4:2F:1E
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/sHStvnn7VJKnZBC1lcXnV3HkLx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.208.0/24
185.64.73.0-185.64.74.255
Signature Algorithm: sha256WithRSAEncryption
67:81:58:ed:5a:de:35:0d:ed:12:9d:28:02:9e:7c:dc:18:55:
fa:e1:2d:8a:f4:9f:8d:18:24:fb:4a:c4:c1:e7:a3:9a:41:cf:
76:3e:49:06:06:b6:8e:8f:07:8c:fa:b7:cd:53:32:cb:f6:aa:
9b:8f:13:d3:3e:df:9f:54:aa:c4:29:cc:5a:50:e8:4c:aa:88:
49:37:1c:a3:fc:fe:06:3d:d9:80:2f:4b:f9:c0:e0:66:8f:cd:
fc:82:c5:32:26:c2:13:25:ce:57:87:a3:ad:9a:2d:86:c2:5b:
29:4f:fd:c1:6a:bf:1b:b6:9c:96:e4:18:00:07:28:fe:76:d3:
bc:9d:a1:55:23:7a:3e:ed:43:39:00:fa:6a:21:a1:14:5f:3a:
ee:48:72:36:98:4c:22:4f:41:15:ca:13:7b:c4:92:de:46:4c:
0d:0a:66:1a:2e:72:3e:6d:ea:cc:a3:f2:46:a6:12:39:aa:0b:
e8:a9:30:f7:8f:22:b8:4a:37:59:dd:4c:f5:e1:2d:7f:9d:da:
c7:5e:06:d2:f4:73:4a:d6:83:5f:4d:3c:e9:f6:96:6e:b9:92:
8e:a5:8d:57:ba:92:9d:7d:83:75:d4:8c:19:54:cc:ba:71:64:
d7:ed:22:fe:fe:d6:af:04:e0:c6:f7:13:73:48:09:22:e7:cf:
16:c0:05:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 15:22:46 2024 by rpki-client on console-ams.rpki-client.org