Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/GEpKy_gDNk7dmMu9TbaDtO4Ax9I.roa
File: GEpKy_gDNk7dmMu9TbaDtO4Ax9I.roa (raw, json)
Hash identifier: +q+XbCFbZwSUzRB/pKV//eMyxxZ+uN2JVEKmqnucr8Q=
Subject key identifier: 18:4A:4A:CB:F8:03:36:4E:DD:98:CB:BD:4D:B6:83:B4:EE:00:C7:D2
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 018CC801797801198C70CCAA700DC9F21E0C
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/GEpKy_gDNk7dmMu9TbaDtO4Ax9I.roa
Signing time: Tue 02 Jan 2024 02:29:48 +0000
ROA not before: Tue 02 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 91.223.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:79:78:01:19:8c:70:cc:aa:70:0d:c9:f2:1e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: Jan 2 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=184a4acbf803364edd98cbbd4db683b4ee00c7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:62:98:a9:0e:b8:c8:ed:0d:b3:f6:72:e3:
dc:a4:e6:c8:dd:2a:2e:26:24:46:ef:a2:7d:eb:f0:
42:06:df:02:4f:c4:c4:5a:b3:13:f0:a9:c4:f5:f6:
51:a2:80:96:e5:2a:9c:16:ac:ea:d2:6e:d7:51:d4:
0f:48:49:e1:c8:c3:f3:01:6a:17:b9:78:70:9b:46:
5b:e6:77:fe:d3:f1:54:a3:3d:c0:d5:25:b0:70:f4:
d6:71:13:b1:cb:c2:00:86:b0:52:b4:b9:8e:22:62:
27:a2:01:44:07:14:bd:4a:6f:df:12:21:7b:a9:b1:
f0:fc:6b:ce:d0:1e:cd:31:18:ff:5f:ca:20:bf:6a:
c2:db:27:ec:57:29:1f:5b:6e:21:fb:f2:6c:a5:4d:
70:9a:01:e9:e2:2b:cc:6f:ed:60:23:0e:4e:1a:71:
79:ed:98:e6:f3:de:73:e2:bf:b3:65:b5:c2:ee:cd:
7f:c6:8f:3a:38:a8:2e:4a:62:15:d8:29:95:8b:6f:
58:28:e4:63:4b:a0:eb:a1:30:c6:2f:fc:c5:73:25:
67:4a:0b:3d:d2:41:f1:99:fc:5f:8b:81:89:4b:ee:
06:e8:1d:d3:84:bd:03:3c:c2:8f:70:62:d1:b4:fa:
ed:f1:06:40:9e:11:8b:8a:48:eb:59:49:2a:7e:b8:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4A:4A:CB:F8:03:36:4E:DD:98:CB:BD:4D:B6:83:B4:EE:00:C7:D2
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/GEpKy_gDNk7dmMu9TbaDtO4Ax9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.85.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fa:39:15:9c:06:fc:05:42:a7:88:7f:7c:e6:ee:16:a0:7e:
78:20:6d:67:19:fc:d5:5a:f1:90:b0:21:06:5c:ce:65:ff:93:
8c:d3:69:a0:34:a2:fb:c8:86:b6:43:5a:b9:91:e6:02:45:bc:
27:6d:10:51:5c:28:57:b0:0f:16:9b:be:b5:41:ad:16:d1:00:
62:08:53:2e:6b:4d:c0:b5:51:25:87:0d:a4:86:19:83:57:d4:
e2:4f:7e:9d:8e:c2:5a:6c:48:6b:91:de:6f:4c:97:ec:d4:20:
da:8b:b9:58:cb:fe:9f:f8:cc:eb:4b:23:16:b0:d5:09:0a:4c:
d5:d9:17:88:df:00:70:93:cf:12:e4:7d:0c:fe:b4:1c:2a:38:
12:71:a4:ad:af:a4:cd:0e:fd:d8:66:11:b6:f4:b5:89:63:5d:
0d:5c:51:c1:7b:e8:d1:f4:4d:f1:66:37:57:31:67:d7:19:05:
d3:01:f1:24:54:72:63:da:49:67:dc:30:1e:67:ec:9c:a2:84:
7c:cf:ba:31:fd:bf:e2:91:0a:ab:5c:1a:46:e0:bd:7d:f3:33:
96:3b:46:b7:2a:79:b1:4c:eb:d6:d4:4e:64:2b:91:49:15:bd:
ec:e4:85:36:4c:a2:51:0c:1f:c4:c2:2b:7d:aa:2b:bd:21:04:
fd:9f:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 14:58:02 2024 by rpki-client on console-fra.rpki-client.org