Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/vNzxqIjFLgdEmg_jQk6WmrQWpAA.roa
File: vNzxqIjFLgdEmg_jQk6WmrQWpAA.roa (raw, json)
Hash identifier: 5D7W2Wv99GKbJW2t6TzRZkIYw1SllbyOisP7MSGT6oM=
Subject key identifier: BC:DC:F1:A8:88:C5:2E:07:44:9A:0F:E3:42:4E:96:9A:B4:16:A4:00
Certificate issuer: /CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
Certificate serial: 018CC8DE857FF967EE8772692B9D2DF75D39
Authority key identifier: AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/vNzxqIjFLgdEmg_jQk6WmrQWpAA.roa
Signing time: Tue 02 Jan 2024 06:31:15 +0000
ROA not before: Tue 02 Jan 2024 06:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44001
IP address blocks: 91.229.36.0/24 maxlen: 24
2001:67c:2cc4::/48 maxlen: 48
2001:67c:cf4::/48 maxlen: 48
2001:67c:2f38::/48 maxlen: 48
2001:67c:cf8::/48 maxlen: 48
2001:67c:cf0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:85:7f:f9:67:ee:87:72:69:2b:9d:2d:f7:5d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
Validity
Not Before: Jan 2 06:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcdcf1a888c52e07449a0fe3424e969ab416a400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:45:38:10:d2:d4:77:62:7d:20:56:81:e3:
d6:60:84:3d:e2:d9:62:a6:75:b0:bc:41:4a:c0:df:
75:58:27:83:75:b9:d2:a1:45:f8:ab:2d:f4:06:ff:
83:37:4b:14:74:63:bf:09:75:cb:0c:6c:61:54:5d:
20:fb:27:ca:a2:bd:72:b6:9c:75:2d:54:df:cd:93:
96:53:7d:4a:c8:e2:35:2c:93:1e:28:30:fb:e0:0e:
38:b4:82:66:b3:8b:47:f6:d6:1f:b4:13:3c:62:7f:
a0:e5:c1:82:a4:16:f6:ab:34:63:6b:81:9e:d8:fa:
08:42:13:8d:a6:d1:e7:d1:e6:e5:1c:3f:e9:46:e9:
45:8a:ba:cb:b9:68:43:2e:e1:18:14:1e:17:2f:b1:
66:ce:41:de:af:5c:70:60:b2:3e:6b:59:e4:25:6f:
a9:41:3c:d2:ce:38:a0:65:f8:45:c8:f2:c7:12:bd:
62:c7:c8:32:51:93:30:87:a8:56:1c:cc:dd:3f:73:
20:89:78:33:53:93:c7:d8:4c:3b:84:20:f8:bf:5e:
87:49:6e:64:41:65:64:89:73:5e:81:df:89:90:2d:
19:d6:14:eb:e3:cc:58:94:56:48:e5:f0:0b:f5:e2:
67:25:c5:7a:86:19:49:d6:90:ba:91:7b:25:5b:9c:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DC:F1:A8:88:C5:2E:07:44:9A:0F:E3:42:4E:96:9A:B4:16:A4:00
X509v3 Authority Key Identifier:
keyid:AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/vNzxqIjFLgdEmg_jQk6WmrQWpAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.36.0/24
IPv6:
2001:67c:cf0::/48
2001:67c:cf4::/48
2001:67c:cf8::/48
2001:67c:2cc4::/48
2001:67c:2f38::/48
Signature Algorithm: sha256WithRSAEncryption
61:f1:37:47:af:25:87:43:ca:97:4f:51:34:85:64:e9:a0:00:
99:59:26:4d:da:fb:5e:19:59:ee:25:21:e3:53:be:6c:bd:6c:
81:c1:2a:9e:cf:2d:58:89:49:22:7e:15:84:d6:7f:b6:a1:b8:
95:bf:60:b2:ac:90:97:e2:27:b0:6d:ca:4b:0e:55:29:33:b3:
6e:1a:1a:b6:71:07:2d:6f:99:8b:f9:54:22:3f:42:e0:7b:fc:
47:23:ca:dc:c6:c4:34:de:89:4b:56:3d:8a:07:14:2e:4b:13:
b4:70:18:aa:f4:0c:f5:ab:b5:6a:42:6e:df:81:26:80:b7:01:
e6:9c:12:7f:bd:14:db:25:d8:0c:fd:63:46:50:8d:08:b7:bf:
1c:05:b9:49:60:b5:9e:c3:ea:44:b9:cc:f8:4e:95:24:23:21:
a3:98:cb:80:41:80:8c:2d:f7:45:1a:8f:2b:d5:65:12:04:86:
09:e5:ae:ad:fb:d7:40:34:46:a7:35:e0:50:db:92:07:5e:e4:
31:36:09:5d:33:1e:5f:61:24:a7:bd:44:87:1e:7e:bc:f6:63:
de:2b:e5:92:ad:81:55:84:29:91:0e:9c:11:5f:f0:df:bd:66:
92:12:e8:17:9e:2b:75:6c:ae:36:96:f8:e2:69:01:20:b2:b8:
29:d8:3d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:28:43 2024 by rpki-client on console-ams.rpki-client.org