Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/X3LjHTkcDGy1aU0PjKh0eIR9Wfg.roa
File: X3LjHTkcDGy1aU0PjKh0eIR9Wfg.roa (raw, json)
Hash identifier: LtkLNpS7IyuEXC8HFx1zADqH3hTeVZpZw+e7Qa2dFh4=
Subject key identifier: 5F:72:E3:1D:39:1C:0C:6C:B5:69:4D:0F:8C:A8:74:78:84:7D:59:F8
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 018CCA2B7331782D0DACA3B9A622DAE6E60E
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/X3LjHTkcDGy1aU0PjKh0eIR9Wfg.roa
Signing time: Tue 02 Jan 2024 12:34:54 +0000
ROA not before: Tue 02 Jan 2024 12:34:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206854
IP address blocks: 91.228.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:73:31:78:2d:0d:ac:a3:b9:a6:22:da:e6:e6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Jan 2 12:34:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f72e31d391c0c6cb5694d0f8ca87478847d59f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:3a:88:b5:e4:1c:9c:cd:01:08:76:62:57:
59:97:81:41:f8:86:9b:9f:4d:a2:d9:5f:67:79:fc:
82:0e:5d:2e:47:18:2a:ef:2b:a9:85:7a:5b:8e:60:
b6:78:31:70:6b:f1:51:ad:f9:40:35:31:da:33:ee:
a7:ff:98:c7:2a:dc:cf:62:3a:83:ba:9c:a4:5c:9d:
19:cc:dc:14:62:1a:c0:c1:b2:ab:7d:8b:e2:e6:1a:
84:04:45:28:59:96:a4:7b:7f:59:56:61:da:e0:3e:
83:e1:33:93:f4:5e:2f:22:94:18:2b:45:5c:5d:97:
bb:f0:39:e9:b5:28:51:1b:dd:ba:62:f6:93:2e:94:
59:b8:18:e9:6a:af:f5:ee:a8:db:19:44:0d:57:fa:
8e:c2:89:a8:a0:5b:be:d3:94:0a:fe:65:e1:ba:b0:
cc:67:da:41:69:27:f6:d5:36:d5:c8:10:b8:05:ec:
b9:7c:9d:da:6b:cc:23:7a:f9:a6:c9:18:2a:0f:76:
3d:c6:33:53:c5:a1:bb:51:4d:15:f1:84:ec:74:4e:
9c:5b:af:ad:72:93:e7:95:f8:ef:9b:43:f8:1c:47:
ad:68:59:b0:d5:d6:47:e1:53:b2:6b:ff:b1:ce:ab:
b0:7a:84:98:37:2f:ac:24:c4:d5:77:8f:17:98:75:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:72:E3:1D:39:1C:0C:6C:B5:69:4D:0F:8C:A8:74:78:84:7D:59:F8
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/X3LjHTkcDGy1aU0PjKh0eIR9Wfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.22.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:64:f4:7d:05:62:e1:f0:51:30:23:6f:17:9c:9f:e3:f7:2c:
df:c2:86:96:78:57:71:d9:b5:09:8c:cf:fd:78:03:0f:5c:0f:
77:9a:e0:ba:af:7d:19:51:df:b4:6d:cf:d1:61:41:67:13:b3:
c6:83:fd:32:90:ec:4f:a6:ef:bf:70:a5:b9:ca:10:34:96:e7:
45:85:33:78:3f:35:dd:f6:28:1b:c8:6d:c5:e8:88:f8:9a:7f:
62:17:91:74:21:30:9c:6f:fe:82:5e:6e:e5:17:fc:12:68:a9:
80:83:b1:ce:c2:21:69:ae:12:ce:18:dc:12:e6:db:31:ca:14:
68:19:2a:b6:f5:1b:12:7c:8c:be:a9:d2:f8:3a:db:a6:2e:07:
e9:d3:ba:64:8c:37:18:d5:a4:d3:f1:07:96:04:0a:26:f2:72:
ad:16:4d:6d:8b:c0:b6:b7:27:fc:fa:97:d7:75:66:eb:94:df:
61:83:33:a8:bc:ae:ab:6e:d4:27:61:76:98:7e:4f:8d:44:b3:
5e:ce:89:ff:d7:e5:63:79:95:75:96:bf:56:27:47:0d:a2:40:
00:38:b1:8c:81:f4:dc:9e:ee:66:31:1b:43:56:dc:49:9a:96:
d4:77:40:9c:e6:cd:4b:c5:6c:fa:80:cc:2f:e2:8e:91:e0:dd:
fa:f3:ee:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:34:18 2024 by rpki-client on console-ams.rpki-client.org