Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/hCmnb5a1bG-SSw-lxAZazyqNkVQ.roa
File: hCmnb5a1bG-SSw-lxAZazyqNkVQ.roa (raw, json)
Hash identifier: ALvRbQisUAukYzcwf9cgpHPgQuw64zhen3GsUjne7ZM=
Subject key identifier: 84:29:A7:6F:96:B5:6C:6F:92:4B:0F:A5:C4:06:5A:CF:2A:8D:91:54
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018CC79530202A49EFAAA0E949FFD8487618
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/hCmnb5a1bG-SSw-lxAZazyqNkVQ.roa
Signing time: Tue 02 Jan 2024 00:31:32 +0000
ROA not before: Tue 02 Jan 2024 00:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6282
IP address blocks: 91.236.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:30:20:2a:49:ef:aa:a0:e9:49:ff:d8:48:76:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8429a76f96b56c6f924b0fa5c4065acf2a8d9154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:1a:32:a2:b1:36:e8:8d:2b:bc:96:5f:17:
2f:08:26:57:0c:86:98:98:45:a6:76:f0:10:73:ed:
05:f2:c0:fd:d7:18:35:94:80:90:15:26:83:a9:f3:
dc:63:f0:8f:cf:21:35:08:43:df:c7:86:cc:7d:50:
d3:02:1d:a6:5d:e1:cc:31:7d:43:21:12:ce:d9:8c:
36:bb:9a:c0:e8:8e:da:cf:4e:c9:02:19:1a:1b:a1:
53:5f:09:b6:48:62:e7:cc:f1:91:14:16:f6:99:68:
94:28:a8:64:ef:c2:54:68:69:e8:49:25:51:fe:64:
e3:8e:8a:bd:9a:7f:ea:f7:8a:f2:46:b9:2c:fe:a2:
58:a4:b9:98:1d:19:9d:32:ef:38:c1:57:85:70:4e:
7d:56:b7:b3:a9:7e:db:92:bb:cc:2a:16:82:0e:15:
d8:1e:78:e5:ea:5a:5a:4a:21:15:e1:e4:10:68:76:
f7:a2:19:3a:31:06:12:e7:dd:98:00:26:06:b7:3c:
a0:c2:2f:85:fb:54:e0:64:15:4d:68:81:75:dd:13:
92:c9:a0:ab:49:dc:a3:d8:af:41:a5:2f:5b:3c:15:
a3:b8:f0:01:ec:9d:a9:38:71:1b:9e:75:0e:64:80:
3d:9c:19:86:e0:bc:17:33:c4:7b:f2:25:8c:1c:b6:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:29:A7:6F:96:B5:6C:6F:92:4B:0F:A5:C4:06:5A:CF:2A:8D:91:54
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/hCmnb5a1bG-SSw-lxAZazyqNkVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.90.0/23
Signature Algorithm: sha256WithRSAEncryption
30:6d:b4:2d:f1:78:8d:13:19:c8:15:34:f9:b8:c1:5c:01:00:
21:19:be:de:af:eb:b7:de:d7:ab:75:f5:1e:f1:89:4d:52:95:
47:5c:27:b2:97:20:4c:b4:57:0e:37:5f:d1:7c:2c:35:71:1a:
7e:fc:fa:ab:29:fe:bf:1d:1a:24:93:77:6b:65:07:a1:87:2b:
ca:29:11:34:00:cd:ce:aa:be:dc:1f:da:f1:d1:52:36:8e:88:
ef:31:f6:9f:e2:1d:10:48:5c:1f:56:eb:8e:6c:33:ad:84:b7:
21:4f:a2:3a:92:38:9d:f4:79:f8:2c:41:c1:28:2c:87:5c:e1:
76:db:bc:dd:f0:89:8e:51:ac:ca:f3:33:36:18:e9:bd:57:ed:
36:46:15:23:ea:ef:89:fb:6d:76:c2:97:f5:3f:af:48:44:83:
7a:2c:29:03:93:f4:15:56:50:13:32:a4:34:ee:6a:21:ec:c3:
c6:41:b5:dc:ea:33:05:d8:4e:d9:23:36:71:6d:11:71:af:be:
9c:94:ba:a2:e7:4d:a0:e7:c5:97:8c:aa:21:49:a7:9b:a3:c3:
2c:2a:f8:81:75:13:67:71:bb:71:72:15:d0:5c:1f:06:af:a0:
22:46:3d:38:4e:c5:a0:db:1e:15:24:e6:a3:5e:94:ac:c6:24:
3f:68:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:28:05 2024 by rpki-client on console-fra.rpki-client.org