Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/FF8l4e0EeKB6743Y_Og28UZU0GQ.roa
File: FF8l4e0EeKB6743Y_Og28UZU0GQ.roa (raw, json)
Hash identifier: cnrhnTb/PXnZzqMi9lYKWAj8aDAT0ZPq3fPD8VrMnKk=
Subject key identifier: 14:5F:25:E1:ED:04:78:A0:7A:EF:8D:D8:FC:E8:36:F1:46:54:D0:64
Certificate issuer: /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial: 018CC6B82B2A99DFF60F43B406E2361F9579
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/FF8l4e0EeKB6743Y_Og28UZU0GQ.roa
Signing time: Mon 01 Jan 2024 20:30:07 +0000
ROA not before: Mon 01 Jan 2024 20:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198245
IP address blocks: 91.232.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 22:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:2b:2a:99:df:f6:0f:43:b4:06:e2:36:1f:95:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
Validity
Not Before: Jan 1 20:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=145f25e1ed0478a07aef8dd8fce836f14654d064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5f:e6:69:55:40:26:5d:84:d3:bd:9e:a5:4c:
76:57:42:1f:ff:a6:0d:72:8c:21:8f:b7:75:62:0a:
de:4b:ff:a4:22:fb:e7:27:84:31:21:c2:24:48:2f:
32:10:4c:a0:c0:3f:95:89:ce:66:34:0e:24:9b:53:
27:66:96:66:b8:21:fd:5e:9e:c0:ce:53:5a:eb:85:
9a:b8:83:a8:64:13:6b:de:e9:b0:13:d2:6c:08:c4:
ee:e0:a4:bf:4b:fd:08:50:3a:e3:fe:ac:c7:31:34:
ac:bb:6f:83:63:ef:16:81:bc:32:ba:32:6d:79:0f:
05:95:11:36:0b:cc:8e:57:ab:60:f0:d0:b7:12:b3:
41:54:6b:d5:e2:da:20:38:6f:96:10:8d:01:06:da:
7c:aa:40:fc:2b:5a:ae:2f:bf:aa:e4:79:cd:fe:68:
12:c4:42:81:a8:1e:6c:97:94:95:88:c4:ca:31:fe:
b4:88:a1:72:61:2c:0f:9a:1f:c7:13:99:5a:87:88:
68:07:d9:69:c3:48:0f:b6:6c:5e:e1:e4:9e:bb:45:
f0:e9:68:0e:1b:d3:81:90:19:1d:f4:58:d8:42:a9:
90:63:84:0e:b6:33:fe:9c:1f:f4:6f:fa:e6:e6:24:
de:db:be:c3:82:21:84:7e:20:e9:65:d2:4c:2c:fc:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5F:25:E1:ED:04:78:A0:7A:EF:8D:D8:FC:E8:36:F1:46:54:D0:64
X509v3 Authority Key Identifier:
keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/FF8l4e0EeKB6743Y_Og28UZU0GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.234.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:26:ba:af:91:1e:c5:48:b0:69:63:66:78:45:66:22:56:df:
e3:81:0b:10:93:5b:31:01:f0:e0:fa:65:7b:9c:f9:35:f1:c4:
05:86:78:31:4f:fd:53:f3:4e:97:21:27:49:b1:bd:c2:78:1e:
09:3a:46:ff:58:ad:3b:67:60:2e:83:07:6e:f4:44:4e:4d:12:
52:61:84:86:08:e3:9f:9e:11:32:f5:f9:07:33:37:66:a0:16:
c3:b0:98:7d:dc:7b:b2:3c:ce:d1:cc:44:84:8c:c0:97:c4:79:
ea:c4:65:bf:fe:5b:3c:55:94:9e:06:b9:ce:7c:3a:b3:98:8d:
37:89:bb:5d:4d:09:ab:66:d6:a6:70:94:25:cb:76:3c:d8:5f:
68:0b:f7:38:8e:07:56:fd:e7:1c:91:db:68:78:9e:4e:a2:6e:
e7:c2:67:f2:bb:5c:71:98:5b:ee:53:7a:e4:f1:ce:40:65:c8:
4b:1d:01:31:c4:b7:ab:3c:ee:98:ba:a3:e7:0a:51:da:20:e9:
4f:09:9c:63:cd:2a:bd:ab:cd:af:c3:9e:e8:ea:08:45:2f:61:
47:c3:5f:4e:ae:5a:81:98:f1:fb:26:0b:60:15:23:40:ba:45:
26:0c:b5:a7:7b:64:c4:5d:8d:79:af:5f:bb:b1:11:20:f8:77:
4a:ea:29:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:13:53 2024 by rpki-client on console-ams.rpki-client.org