Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/K1e-UIsa18VTRAdTLxx6aQpnLlw.roa
File: K1e-UIsa18VTRAdTLxx6aQpnLlw.roa (raw, json)
Hash identifier: OvUtmE3q4LOnTyLOy3c+ITczxqv6dd4unY32JsmC1Hk=
Subject key identifier: 2B:57:BE:50:8B:1A:D7:C5:53:44:07:53:2F:1C:7A:69:0A:67:2E:5C
Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial: 018ED64801E4B2CBE1A0D40463890BB0959E
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/K1e-UIsa18VTRAdTLxx6aQpnLlw.roa
Signing time: Sat 13 Apr 2024 07:07:06 +0000
ROA not before: Sat 13 Apr 2024 07:07:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 91.207.60.0/24 maxlen: 24
91.217.91.0/24 maxlen: 24
91.226.212.0/23 maxlen: 23
176.103.48.0/20 maxlen: 20
193.169.86.0/23 maxlen: 23
2001:678:334::/48 maxlen: 48
2a13:f580:1::/48 maxlen: 48
2a13:f580:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d6:48:01:e4:b2:cb:e1:a0:d4:04:63:89:0b:b0:95:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
Validity
Not Before: Apr 13 07:07:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b57be508b1ad7c5534407532f1c7a690a672e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:13:a9:96:96:3a:47:6b:2d:a5:e1:c2:18:
44:eb:b5:19:be:2d:cf:e9:90:59:2b:1b:5d:d6:22:
f3:6d:27:ec:df:81:bc:3e:25:79:64:61:27:2c:ba:
48:b2:31:8a:a9:75:e4:02:5b:00:86:7a:dc:f4:a2:
12:9e:54:6f:ac:92:ab:b2:5e:1b:ab:24:b9:ab:0d:
55:10:21:f3:02:70:2f:52:37:e4:7e:f8:84:5d:0b:
84:56:ea:c6:b9:dc:07:f0:4c:83:ff:db:94:96:95:
99:31:cf:77:61:50:1c:52:6a:8b:8d:84:ef:70:1f:
d8:61:5b:03:3f:44:89:ba:cb:0e:81:59:b4:51:94:
59:a8:0b:93:dd:44:62:32:53:10:c4:04:5d:0c:75:
56:34:ce:a9:d2:86:4e:d8:8a:81:96:01:8a:db:ac:
94:3d:60:17:54:1d:43:ff:02:0a:cf:fb:22:76:15:
98:9d:12:27:c5:c0:32:11:5c:1e:66:63:93:eb:91:
15:17:83:f9:4e:4a:3d:fc:86:e5:f4:c5:bd:ae:6c:
fb:2a:b2:eb:47:cf:2e:0b:2d:fd:f1:83:3d:8a:d5:
5b:41:c6:dd:3a:4e:9a:a4:74:85:a9:88:d0:af:3f:
2c:81:a1:f9:78:a7:84:dd:b5:2c:69:34:c1:86:49:
16:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:57:BE:50:8B:1A:D7:C5:53:44:07:53:2F:1C:7A:69:0A:67:2E:5C
X509v3 Authority Key Identifier:
keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/K1e-UIsa18VTRAdTLxx6aQpnLlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.60.0/24
91.217.91.0/24
91.226.212.0/23
176.103.48.0/20
193.169.86.0/23
IPv6:
2001:678:334::/48
2a13:f580:1::/48
2a13:f580:4::/48
Signature Algorithm: sha256WithRSAEncryption
45:77:a4:2d:8e:cd:42:e4:7b:06:1a:83:04:ba:7e:79:20:2c:
17:09:fa:a5:3c:5b:75:c8:9f:1d:97:00:6f:24:c3:ea:b0:e9:
d4:03:d8:d3:3b:28:5b:b2:3c:b7:a0:57:c9:ab:4d:6e:ba:ee:
94:7e:ee:59:13:63:0b:fe:e6:99:0d:b8:8a:5e:d8:38:01:57:
03:03:b3:98:02:9a:5e:a9:f3:f9:ea:db:9a:8e:58:cd:e8:ed:
35:c3:9d:ed:47:54:78:17:2d:a2:97:bb:c9:c5:ce:08:31:07:
24:dc:9c:62:e7:ea:bf:f7:6b:3a:be:18:66:b7:a5:a6:d4:17:
b0:06:6e:af:12:ca:cd:a5:64:c3:3b:fe:06:5a:8c:76:53:a5:
5a:19:c3:15:ae:7f:7c:0c:a6:31:38:fa:b5:65:f3:db:9e:52:
63:1d:7d:b2:e6:a1:c7:4d:be:5f:f1:bf:1b:e6:96:15:75:d3:
2f:99:18:e6:e3:5c:bf:b5:5e:69:4d:7b:35:5f:9a:89:c9:c1:
8a:1e:0f:6f:45:58:d4:74:87:2a:26:2d:90:1c:ff:dd:5c:d8:
19:39:db:2c:90:e0:31:9b:56:6d:e8:63:4d:6e:d7:c3:5e:88:
5e:68:14:b9:0b:bc:00:26:4d:33:10:7b:28:f1:64:99:a8:e9:
14:ba:8a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 11:26:36 2024 by rpki-client on console-fra.rpki-client.org