Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/b_NszsHdj4e2HvaDK4FWv4tWqLU.roa
File: b_NszsHdj4e2HvaDK4FWv4tWqLU.roa (raw, json)
Hash identifier: CbRa5WYcIJoDPFBo0Q6ZSz/Xddrt6htjYUS+TF4rRYQ=
Subject key identifier: 6F:F3:6C:CE:C1:DD:8F:87:B6:1E:F6:83:2B:81:56:BF:8B:56:A8:B5
Certificate issuer: /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial: 018CC3B739B444BD1622D97A7AD54A349D49
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/b_NszsHdj4e2HvaDK4FWv4tWqLU.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 91.216.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:39:b4:44:bd:16:22:d9:7a:7a:d5:4a:34:9d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ff36ccec1dd8f87b61ef6832b8156bf8b56a8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:ed:4f:70:60:4b:1f:a4:41:79:62:32:b1:
57:ef:2a:df:0e:22:65:b4:13:18:a7:6b:9c:ca:bc:
30:35:56:61:dc:3d:d3:64:e2:fb:39:d0:4e:76:12:
d5:32:2d:d7:c3:11:01:7f:d2:50:17:eb:99:0a:1a:
3b:79:1c:7a:35:e7:b5:c3:c1:e2:82:ec:7c:52:eb:
56:33:92:8a:d9:4f:56:f8:35:70:7e:13:ff:60:92:
42:fc:e5:64:56:cb:b7:3f:d8:c6:13:cb:cb:0e:55:
e7:74:81:09:e9:b2:ac:d2:0d:80:5c:33:3d:80:1b:
ca:f9:38:ee:ff:6c:36:17:f2:17:1b:66:63:ca:32:
ff:d0:62:f9:87:07:83:2b:3f:40:f9:ea:a3:81:93:
b2:2a:fd:61:9c:bd:a5:16:e8:49:4a:99:75:f1:47:
a9:77:f0:c6:48:fd:58:6b:b5:3c:5a:aa:6b:d4:d1:
59:4d:9f:f1:91:37:eb:46:09:a0:73:c7:8f:00:cf:
e2:cf:63:c9:a0:5a:46:09:8c:bf:c1:fc:b1:63:43:
58:9b:c7:3b:32:7b:7e:b7:00:8b:2c:d5:4e:45:97:
20:89:7e:d0:d4:22:98:37:3a:fc:eb:1f:9e:32:de:
cb:a0:a8:3a:92:d5:77:75:f8:7d:8d:9d:aa:06:77:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F3:6C:CE:C1:DD:8F:87:B6:1E:F6:83:2B:81:56:BF:8B:56:A8:B5
X509v3 Authority Key Identifier:
keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/b_NszsHdj4e2HvaDK4FWv4tWqLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.184.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:93:61:5b:2e:99:d5:05:b8:0b:49:9b:07:f0:21:fe:1c:41:
12:7a:d8:e0:75:ab:63:d9:58:e7:ae:a1:1b:1d:a0:b5:cc:95:
9e:ab:73:57:ba:6f:1f:07:a3:a4:43:8e:97:53:58:d8:d3:23:
f4:6d:4a:85:0f:79:d0:48:aa:19:53:8b:f0:40:4b:3c:4b:af:
1d:40:41:91:62:65:ff:f1:67:81:53:3f:e6:f3:c8:ff:22:73:
ee:ea:bf:d0:de:e3:6b:65:24:62:cc:48:cb:86:a9:e2:ae:aa:
78:19:6e:06:43:4d:5e:c0:57:5b:86:0b:46:40:69:10:0f:be:
43:57:79:51:6d:25:94:68:c0:b1:40:80:66:96:81:89:4d:60:
7d:25:06:4f:07:c3:06:b6:71:cf:1e:52:e9:98:3c:95:58:8e:
12:1d:74:46:99:bc:7c:46:fe:e1:05:75:b5:5e:23:a2:2b:bf:
47:89:b6:a9:fb:7a:c8:c8:f3:d5:7f:f5:00:62:ec:45:f5:f9:
34:7c:2f:d2:52:71:04:f3:82:91:3e:35:b2:f9:fc:44:8d:69:
c8:0a:63:16:7e:90:8e:b7:75:03:f0:36:fe:2f:d3:44:30:c2:
64:d2:90:3a:37:e7:fa:22:0f:d8:f8:dc:b3:a4:41:c1:47:0c:
4f:a8:56:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:44:04 2024 by rpki-client on console-ams.rpki-client.org