Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/j_Y8xDo0v-f9NQ3AxJf_P45nTDY.roa
File: j_Y8xDo0v-f9NQ3AxJf_P45nTDY.roa (raw, json)
Hash identifier: /O4V8qzPRNAu/NJEBo6hLvyDp0muotQu7SfY9S6FRhs=
Subject key identifier: 8F:F6:3C:C4:3A:34:BF:E7:FD:35:0D:C0:C4:97:FF:3F:8E:67:4C:36
Certificate issuer: /CN=55c42f2c77a18228c9fa9ab379842660d0792908
Certificate serial: 018D27639716F3DA8C457F28AA7B1C531B71
Authority key identifier: 55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/j_Y8xDo0v-f9NQ3AxJf_P45nTDY.roa
Signing time: Sat 20 Jan 2024 15:00:54 +0000
ROA not before: Sat 20 Jan 2024 15:00:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198515
IP address blocks: 91.235.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:27:63:97:16:f3:da:8c:45:7f:28:aa:7b:1c:53:1b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c42f2c77a18228c9fa9ab379842660d0792908
Validity
Not Before: Jan 20 15:00:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ff63cc43a34bfe7fd350dc0c497ff3f8e674c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:35:4c:ee:0b:77:82:08:18:16:b1:a2:4f:
4f:35:c5:a4:38:68:ec:ac:65:5c:33:81:61:23:01:
d8:4e:ff:0b:1f:d5:48:94:93:3c:2d:ea:2b:d0:62:
51:8f:72:cd:48:06:71:f5:d3:cf:d5:bd:29:7f:5b:
62:1a:3c:66:e5:42:22:01:ec:f6:74:db:25:f4:db:
03:40:54:0a:4b:81:43:ff:6e:5d:ea:72:49:0b:ea:
21:3f:bc:88:52:30:e8:c3:1d:9e:8e:c6:eb:f4:f1:
83:09:13:c2:58:74:6c:04:02:22:2c:8c:9f:38:44:
bc:c2:18:a9:d8:9c:2c:4f:4f:bd:a9:62:24:ae:06:
a6:0d:9e:12:2f:eb:00:43:b8:6b:53:aa:d1:54:19:
7a:af:54:7b:cc:54:98:2e:d2:44:b4:f1:e3:e6:56:
4e:71:f1:d2:83:dd:9e:a6:e6:f6:de:41:cb:37:8a:
13:af:6e:30:0d:4f:41:8a:5e:78:af:11:02:f2:6f:
ea:c9:1b:ed:be:22:3d:b3:77:f0:b8:c9:38:d5:8c:
fd:a7:ab:05:3d:8f:ef:fa:75:61:29:fc:5d:70:d6:
f8:22:e2:10:47:2c:f8:8d:26:44:f5:4c:72:54:fa:
6f:25:02:33:28:96:ff:49:88:1e:ca:38:ea:31:b1:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F6:3C:C4:3A:34:BF:E7:FD:35:0D:C0:C4:97:FF:3F:8E:67:4C:36
X509v3 Authority Key Identifier:
keyid:55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/j_Y8xDo0v-f9NQ3AxJf_P45nTDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.213.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f5:f5:2c:03:82:64:8b:f1:0e:20:dc:61:ca:30:69:04:76:
c8:e5:e2:5e:fb:c5:8e:7f:0d:84:50:0a:b9:53:81:73:5a:fe:
1f:57:2d:56:44:52:33:a3:3a:85:fb:8b:6e:73:53:77:00:91:
16:fa:c4:83:81:0e:cc:b8:e7:71:13:33:a2:d7:d2:cf:e6:ae:
50:63:d3:e0:82:9d:e9:35:6e:03:ea:6b:91:79:e5:d3:cc:98:
62:ff:93:43:97:21:57:d0:bc:3e:48:8b:b8:0d:64:ac:22:e0:
1b:e9:33:a6:40:67:17:44:f4:27:96:ee:2c:cd:f3:9a:36:23:
ff:cf:6d:fe:cb:24:b6:67:9e:b2:b9:6e:d4:f5:51:5a:c9:d3:
67:56:ee:25:b9:d6:ee:39:68:7d:09:02:81:72:88:a9:a0:2f:
cd:88:40:8f:b3:3c:f0:bf:cd:82:2f:ef:ba:0c:f9:1e:5e:57:
6c:73:88:6a:3d:0b:83:6f:40:ab:83:d6:a8:98:1a:a0:1c:e5:
10:fe:7c:71:81:ef:79:7e:6a:49:b8:5b:ec:63:c8:b4:ae:08:
40:5f:ad:32:54:59:7c:27:8f:5b:43:f9:b6:cb:f1:ee:38:e9:
74:2c:d6:ff:f6:23:bc:a0:b7:4d:86:de:41:e2:4c:fe:03:19:
65:b0:74:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:55:11 2024 by rpki-client on console-ams.rpki-client.org