Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/l8GVuhPkJ1jELesBFrdTxXeDCCk.roa
File: l8GVuhPkJ1jELesBFrdTxXeDCCk.roa (raw, json)
Hash identifier: 6Y9KmP1k8q1szkGt3sMOoWC8CgGIZKqj7zmOBUxv6NI=
Subject key identifier: 97:C1:95:BA:13:E4:27:58:C4:2D:EB:01:16:B7:53:C5:77:83:08:29
Certificate issuer: /CN=496e79694637ee05579e1804c14d851e382a14c8
Certificate serial: 018CC801407393C9BF8EEED8416BA3B239D7
Authority key identifier: 49:6E:79:69:46:37:EE:05:57:9E:18:04:C1:4D:85:1E:38:2A:14:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SW55aUY37gVXnhgEwU2FHjgqFMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/l8GVuhPkJ1jELesBFrdTxXeDCCk.roa
Signing time: Tue 02 Jan 2024 02:29:34 +0000
ROA not before: Tue 02 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35297
IP address blocks: 91.236.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/SW55aUY37gVXnhgEwU2FHjgqFMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/SW55aUY37gVXnhgEwU2FHjgqFMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SW55aUY37gVXnhgEwU2FHjgqFMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:40:73:93:c9:bf:8e:ee:d8:41:6b:a3:b2:39:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496e79694637ee05579e1804c14d851e382a14c8
Validity
Not Before: Jan 2 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97c195ba13e42758c42deb0116b753c577830829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:81:fa:fd:8b:da:fb:c4:ff:fc:db:ba:a0:
ba:a7:98:58:99:de:55:52:23:e5:4e:33:bc:62:51:
ad:16:0b:76:dd:09:ab:99:cb:16:e7:00:fa:d3:b9:
09:8b:79:87:e6:cb:35:55:29:7a:5c:e4:02:c0:72:
8f:ee:ad:c2:a6:04:f9:6d:5c:7a:6e:9d:37:0a:e6:
c8:b1:92:e8:8d:b4:18:d4:e5:d3:3d:79:60:85:9a:
a5:c8:82:fa:9f:56:cd:32:49:61:cd:a0:a6:86:74:
e7:32:fd:b9:41:c1:75:bf:46:4a:af:9c:a6:93:e4:
cc:de:e5:7b:06:68:83:dd:9b:3a:9c:10:7f:48:80:
48:ec:f7:81:26:02:b5:7c:db:24:ae:5a:a0:ea:a5:
e2:be:d3:cf:80:a7:15:55:64:5d:c4:c2:46:38:76:
28:76:d1:85:94:87:f3:03:14:d7:4a:cc:d2:e1:18:
34:d2:10:dc:dd:4c:f8:c4:5a:ee:93:3f:c9:3d:be:
61:f8:f2:f7:3b:af:b9:d2:86:74:49:73:8c:77:37:
02:c7:82:61:fa:6b:d5:00:77:e5:00:c6:3d:30:45:
a0:62:d9:4a:5a:f3:a3:19:7e:3a:c0:79:41:6c:d0:
ca:31:3a:17:1b:a4:fe:0a:cd:d1:c0:05:7f:20:9a:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C1:95:BA:13:E4:27:58:C4:2D:EB:01:16:B7:53:C5:77:83:08:29
X509v3 Authority Key Identifier:
keyid:49:6E:79:69:46:37:EE:05:57:9E:18:04:C1:4D:85:1E:38:2A:14:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW55aUY37gVXnhgEwU2FHjgqFMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/l8GVuhPkJ1jELesBFrdTxXeDCCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/SW55aUY37gVXnhgEwU2FHjgqFMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:70:bd:e6:7b:63:1b:0e:4a:c9:32:b7:5c:cb:66:fd:e2:ef:
20:f3:bc:83:02:c3:eb:62:84:b1:c4:29:a1:18:8a:e7:b5:22:
44:66:90:75:e4:4d:65:b1:31:55:90:37:82:a3:0d:be:7f:05:
0b:6e:d7:3c:69:a9:3d:b6:5d:cb:0b:9f:78:f9:6a:24:d7:43:
17:08:3e:30:49:32:a5:bc:1d:bc:93:91:72:a6:77:3a:a6:43:
82:2e:7c:5f:7f:66:20:35:12:af:74:84:71:2b:fa:71:01:89:
d6:c4:95:0b:46:76:27:fa:a0:db:8a:86:42:18:7b:6c:32:74:
13:18:58:35:88:7d:3e:d8:a2:6b:6a:de:09:6e:85:20:15:20:
ba:63:60:55:eb:ac:54:8a:e2:fb:cf:63:59:c2:38:77:79:4b:
50:85:62:77:0c:2c:f2:59:20:47:ef:7f:d9:e0:e4:e1:5e:1e:
1e:8a:e1:b8:0c:de:12:7f:ea:ef:ab:b1:23:da:78:f6:13:40:
92:1c:ed:d7:35:21:6a:3c:2a:58:67:77:31:9f:81:06:46:c0:
11:d6:1d:49:79:f6:3e:e0:66:22:e6:50:43:40:78:89:34:31:
ee:f5:d9:2a:2a:96:47:39:fe:69:f2:3f:11:51:d9:1f:ba:22:
5d:47:5c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 00:02:38 2024 by rpki-client on console-ams.rpki-client.org