Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/wZ0zl4Fp9rUD-Eb3vvzDWm2eUZc.roa
File: wZ0zl4Fp9rUD-Eb3vvzDWm2eUZc.roa (raw, json)
Hash identifier: 5eVVuVH2bgVoD564N6VmuTVieuhogrKC8IUJifJVC+M=
Subject key identifier: C1:9D:33:97:81:69:F6:B5:03:F8:46:F7:BE:FC:C3:5A:6D:9E:51:97
Certificate issuer: /CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
Certificate serial: 018DD0247B27928694FC5229F0D2E9EC0EFA
Authority key identifier: 95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/wZ0zl4Fp9rUD-Eb3vvzDWm2eUZc.roa
Signing time: Thu 22 Feb 2024 09:27:48 +0000
ROA not before: Thu 22 Feb 2024 09:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42402
IP address blocks: 91.189.56.0/21 maxlen: 21
91.189.56.0/22 maxlen: 22
91.189.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:24:7b:27:92:86:94:fc:52:29:f0:d2:e9:ec:0e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
Validity
Not Before: Feb 22 09:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c19d33978169f6b503f846f7befcc35a6d9e5197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:57:2a:b2:0a:69:57:82:d1:b8:96:ba:7b:
f2:a9:39:14:76:8a:88:59:47:c0:28:79:ff:d3:5f:
d7:3a:cf:f0:08:0a:09:b0:e6:05:b9:37:a2:29:21:
c0:35:0e:e0:0d:ce:84:96:0b:ea:1e:96:92:bb:63:
04:48:5d:8d:9f:a6:65:75:d9:2e:72:a1:a9:7d:e6:
0a:6c:f4:c2:2c:93:06:7f:54:2f:6f:96:41:ce:99:
be:b2:35:43:e9:5d:1e:64:53:b3:b5:e2:9a:47:8b:
41:85:c3:47:8c:c6:3a:da:55:a0:12:33:c7:6c:7f:
06:2b:36:3a:39:05:69:c5:f7:3c:fc:c7:09:82:1f:
f8:1f:1e:dd:2c:54:e9:7f:1e:ae:b5:f0:b0:a4:9c:
4c:50:a1:20:31:50:1c:76:4d:dc:f5:5d:80:c7:19:
33:4f:a9:cd:39:9b:7f:b3:f9:0f:50:5a:5c:40:45:
ea:e2:ef:6d:d1:56:59:c1:f0:0f:b4:93:f4:24:40:
5d:56:0f:45:9d:bf:c6:2b:70:f6:fc:f5:39:55:34:
d6:4a:f9:18:76:43:7d:0a:a0:4d:08:3a:08:25:1a:
23:f5:f4:81:01:81:35:fc:4c:9e:3c:17:7a:55:58:
30:33:ae:ff:bb:59:78:06:17:57:15:8b:62:a4:e8:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9D:33:97:81:69:F6:B5:03:F8:46:F7:BE:FC:C3:5A:6D:9E:51:97
X509v3 Authority Key Identifier:
keyid:95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/wZ0zl4Fp9rUD-Eb3vvzDWm2eUZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.56.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:46:c3:cf:de:a1:d8:b9:07:74:ab:0c:8f:ee:3b:16:d5:a1:
e5:c9:6b:0f:ff:b5:cb:09:d8:23:97:b9:55:b6:d5:11:0c:0d:
63:9e:35:fd:5a:ab:57:99:72:41:23:c4:ae:59:74:15:d5:70:
64:e1:f9:8d:30:29:19:d4:c2:12:4b:ec:f3:dd:f0:71:56:43:
a0:3f:78:40:c3:ff:15:f8:1b:05:56:6c:4a:50:47:40:ba:66:
ce:fb:24:b1:c8:64:4c:3e:fc:c5:d1:3e:ae:79:7e:6d:74:04:
a7:df:10:65:0d:6d:39:04:f9:3f:fc:d5:17:7b:69:10:e4:df:
a8:95:a2:4b:fd:72:1e:7e:90:d5:e0:a0:d2:16:81:b5:11:49:
cd:21:f4:5f:e6:4b:13:4a:41:fc:2e:88:6e:8c:02:f1:84:22:
02:6e:ec:b8:4b:98:bc:29:13:06:b1:c2:da:b1:6c:b1:c9:76:
05:83:4d:44:b6:e6:59:ae:8d:7a:2c:49:c6:15:c8:fb:88:da:
c4:09:c2:8d:bd:2b:64:d7:2b:96:a4:d1:6d:cd:ba:7f:68:5a:
ff:e7:39:ee:47:9e:46:65:da:9a:ad:12:94:7c:6a:2e:89:52:
1e:8a:68:de:55:4c:aa:a2:a6:72:21:ac:6e:b6:9f:45:88:d0:
9d:51:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:21:13 2024 by rpki-client on console-fra.rpki-client.org