Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/u1PYbPBOMe4lWms6YST3ps2jJ4c.roa
File: u1PYbPBOMe4lWms6YST3ps2jJ4c.roa (raw, json)
Hash identifier: nWnBb8PfkVpiRLhaOYdX12vupzuKiklw1vuwll30lLw=
Subject key identifier: BB:53:D8:6C:F0:4E:31:EE:25:5A:6B:3A:61:24:F7:A6:CD:A3:27:87
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 018DEFA9069077AC960C70752C7E683E77D8
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/u1PYbPBOMe4lWms6YST3ps2jJ4c.roa
Signing time: Wed 28 Feb 2024 12:20:48 +0000
ROA not before: Wed 28 Feb 2024 12:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31543
IP address blocks: 91.217.38.0/23 maxlen: 24
109.69.168.0/21 maxlen: 24
185.58.52.0/22 maxlen: 24
185.221.76.0/22 maxlen: 24
2a02:61e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:a9:06:90:77:ac:96:0c:70:75:2c:7e:68:3e:77:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: Feb 28 12:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb53d86cf04e31ee255a6b3a6124f7a6cda32787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:a2:4a:59:6b:06:78:20:36:73:ef:b5:c4:
53:2a:21:03:9a:3b:fb:bc:37:6f:7a:f9:63:47:31:
c7:60:37:59:79:6d:bc:4f:85:dd:6e:79:7f:97:24:
22:fd:70:82:70:f6:89:87:0a:e5:eb:59:f4:7c:ef:
6a:95:6e:60:81:1b:c4:44:b6:be:b7:19:19:1c:37:
a4:64:c1:11:98:12:33:50:9d:04:db:dc:73:52:95:
76:4a:98:0e:48:14:aa:fb:1f:cc:81:af:c0:21:8e:
e2:87:84:b8:8a:34:b8:84:61:74:0f:aa:9c:17:69:
f0:60:7d:22:45:63:f2:47:5b:b6:bb:37:aa:7c:29:
13:dd:62:64:11:a0:23:d3:2e:ed:2c:05:07:ee:fb:
49:78:e8:41:b2:f6:3b:96:07:54:26:a1:7e:39:27:
0b:71:19:b2:a1:04:77:eb:e6:9e:6b:d0:4e:3d:ad:
4f:47:65:77:ad:d3:d2:bb:bd:73:b7:03:64:23:d1:
59:38:1b:50:cf:b6:d9:31:f0:9e:6e:11:3d:ee:63:
3e:39:fe:20:bf:03:9c:7f:af:bf:11:e4:7b:f6:03:
b3:22:32:3b:cf:50:ba:5c:5e:e6:cc:23:35:81:67:
53:b4:9a:be:f0:a2:9a:4d:d0:ac:03:87:e0:1c:1d:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:53:D8:6C:F0:4E:31:EE:25:5A:6B:3A:61:24:F7:A6:CD:A3:27:87
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/u1PYbPBOMe4lWms6YST3ps2jJ4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.38.0/23
109.69.168.0/21
185.58.52.0/22
185.221.76.0/22
IPv6:
2a02:61e0::/32
Signature Algorithm: sha256WithRSAEncryption
b2:31:f3:dd:03:a1:76:6e:5f:71:20:fb:f7:39:9b:e3:7a:86:
fc:40:56:11:b9:8f:8b:2a:fd:c5:12:ed:77:37:ac:19:b7:fc:
db:82:93:2e:e7:ba:42:8e:fb:a8:ad:3f:cb:83:b7:77:0d:8e:
2c:0d:28:93:b6:b9:86:6e:dd:4c:3b:43:5e:4e:82:f7:20:c9:
9f:2b:a6:56:42:64:08:1e:5d:95:ab:a2:e2:c2:80:2b:86:9b:
2c:0f:17:cf:e8:92:a4:b5:c8:5e:64:0b:d3:3b:7d:a6:a3:7f:
83:a9:69:de:cb:52:b0:49:5b:fe:58:08:23:48:7b:9b:67:6b:
2d:58:97:d5:5f:7c:fa:4a:55:cf:43:08:ca:00:cf:f6:f6:0f:
7a:5b:e8:83:ef:e1:9b:08:88:2a:ea:86:ce:18:7b:e4:0b:62:
02:06:f4:a6:10:d3:2f:53:a1:8b:fd:1b:d3:62:72:7d:a2:77:
78:e9:42:88:9f:3b:f0:af:a1:32:9d:27:3f:cb:33:b9:19:82:
d1:8e:74:26:a7:fb:4b:06:be:ba:0b:6a:a4:c9:12:d0:e2:51:
3d:13:b4:c2:76:1a:d7:c9:cf:16:d5:6d:db:7e:6b:c9:42:05:
8f:9b:a5:b9:09:c4:bc:e1:55:c7:3d:c2:30:b4:cf:7d:20:bb:
de:ec:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 09:48:41 2024 by rpki-client on console-ams.rpki-client.org