Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/L5_0ZPQYeFyn_h3eej3QZ16DZLY.roa
File: L5_0ZPQYeFyn_h3eej3QZ16DZLY.roa (raw, json)
Hash identifier: JbNibg7CQOU7FQgaTkff+UDX2VQvQDJUZc5aTiONgDA=
Subject key identifier: 2F:9F:F4:64:F4:18:78:5C:A7:FE:1D:DE:7A:3D:D0:67:5E:83:64:B6
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 018CC7958989BB9A858A574C8F5808C8B716
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/L5_0ZPQYeFyn_h3eej3QZ16DZLY.roa
Signing time: Tue 02 Jan 2024 00:31:55 +0000
ROA not before: Tue 02 Jan 2024 00:31:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211430
IP address blocks: 91.209.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:89:89:bb:9a:85:8a:57:4c:8f:58:08:c8:b7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: Jan 2 00:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f9ff464f418785ca7fe1dde7a3dd0675e8364b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:b0:fa:48:f4:25:e3:6e:fc:19:14:d7:7d:
b7:8b:30:ed:23:b0:6f:fc:b9:a4:10:81:5f:e4:b6:
62:e6:2b:25:6c:88:39:a9:f6:d0:49:9f:e6:68:e2:
51:01:be:42:7b:82:36:82:1e:47:fb:3d:01:07:01:
02:f7:9e:4c:89:3f:90:8f:b9:63:f1:e1:60:f7:02:
7f:c7:1e:62:f0:74:5a:e1:06:03:e1:66:bd:d7:ac:
86:99:a7:e9:51:a1:59:d4:bb:75:cd:1b:0f:1c:82:
08:22:2c:0d:b3:b1:69:15:27:2b:fe:90:e6:29:5d:
8c:e5:ee:32:fa:43:9f:cb:ec:e0:63:a5:99:33:96:
b4:ff:c8:f0:a9:ce:b0:b1:4c:f9:fc:1d:26:84:27:
54:dd:54:a7:4d:ab:bb:82:7a:4e:c2:68:9b:e2:8b:
d1:bd:88:0a:3b:13:d9:9c:84:51:1a:e9:8e:1f:0c:
39:5b:a8:d4:f8:80:65:1d:60:52:b3:b9:7e:a2:0e:
bc:ce:11:b4:bb:b2:f0:e1:54:67:9d:2f:ff:06:69:
e3:db:89:12:ed:93:0c:e9:b1:a4:e0:ae:e7:3a:d5:
79:64:1a:f1:37:5d:65:64:48:2a:1f:f8:dc:1a:d0:
78:62:08:ca:05:c2:6c:a3:05:76:e6:b3:8f:ca:25:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9F:F4:64:F4:18:78:5C:A7:FE:1D:DE:7A:3D:D0:67:5E:83:64:B6
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/L5_0ZPQYeFyn_h3eej3QZ16DZLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.105.0/24
Signature Algorithm: sha256WithRSAEncryption
46:80:26:7b:06:08:b8:6d:ce:a1:93:bd:00:0a:15:f2:a1:e6:
4b:89:32:8e:a3:1b:da:32:67:8d:32:8f:c2:e2:10:2f:50:7f:
fd:f5:ba:24:81:eb:92:19:61:f1:f3:70:1a:48:18:9c:47:35:
d3:4a:65:13:73:6b:9b:55:c3:42:06:6b:0c:9f:1e:c8:09:c7:
b1:cb:37:3e:6b:1a:a1:d7:5b:c8:71:26:39:85:7d:52:df:75:
88:a6:77:40:82:9b:80:40:a3:e8:47:78:86:64:d6:b8:84:14:
0f:7d:4b:55:9f:0d:6b:ef:ef:a5:d5:e0:4f:59:09:e4:f4:67:
c5:65:7a:a1:e0:69:72:14:2d:cc:4e:2d:83:eb:61:00:63:3b:
1e:5c:2e:83:0f:60:fe:99:10:d6:77:2b:38:31:dd:c7:e0:a9:
34:c3:54:62:b7:86:58:37:8b:8c:a2:a3:78:94:f5:76:84:39:
4f:7c:41:8b:61:20:3e:06:4b:82:ce:b2:1f:69:f7:f0:47:8e:
bb:ec:bc:f1:6f:6a:68:30:22:c2:80:3f:67:e6:b6:e0:ab:16:
f3:29:2c:47:5d:b9:81:d9:39:d8:d6:2a:b4:dc:a6:7c:e4:39:
57:99:41:7a:55:3c:8b:43:b2:fb:e7:02:a9:57:09:42:61:97:
7a:73:a5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:24:20 2024 by rpki-client on console-ams.rpki-client.org