Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/j1vf84UrlyVrbzDcPYVIak2iqOI.roa
File: j1vf84UrlyVrbzDcPYVIak2iqOI.roa (raw, json)
Hash identifier: HusVaB4LY24TFiE1+O/whRrghOd0aSisqr3rR3J0wpQ=
Subject key identifier: 8F:5B:DF:F3:85:2B:97:25:6B:6F:30:DC:3D:85:48:6A:4D:A2:A8:E2
Certificate issuer: /CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
Certificate serial: 018DC6A15BDC10ECAF0FDE7FFA700FCF9CFC
Authority key identifier: E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/j1vf84UrlyVrbzDcPYVIak2iqOI.roa
Signing time: Tue 20 Feb 2024 13:08:00 +0000
ROA not before: Tue 20 Feb 2024 13:08:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197515
IP address blocks: 91.214.124.0/24 maxlen: 24
185.195.192.0/22 maxlen: 24
2a13:3900::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:a1:5b:dc:10:ec:af:0f:de:7f:fa:70:0f:cf:9c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
Validity
Not Before: Feb 20 13:08:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f5bdff3852b97256b6f30dc3d85486a4da2a8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5f:02:b3:d3:d3:af:c6:37:65:97:6f:37:7e:
d9:e0:6a:60:21:78:d1:92:2b:27:4a:a1:69:c5:db:
e1:36:0a:09:f0:f9:78:d0:4c:42:8a:bb:ee:2a:0f:
0c:bc:35:06:b0:b8:36:84:c8:cc:eb:b5:08:da:81:
81:2d:21:6a:2d:34:7d:de:5d:f7:4c:7a:a2:f4:65:
f8:d0:83:49:08:9d:4e:32:59:66:09:39:bf:4c:9b:
d6:08:3e:bf:42:da:74:bf:34:2d:b2:a3:d1:b7:85:
81:79:a5:2b:37:1a:36:ac:27:93:e8:89:ce:96:dd:
60:5a:ca:d2:33:31:96:81:6f:ca:b8:67:bc:37:bf:
b0:a7:4f:33:15:b7:64:ea:b9:68:7f:96:c9:7b:23:
a9:67:f4:14:ef:17:a1:2f:8f:b6:8c:77:6d:46:6d:
7e:1a:25:c5:fa:5e:95:77:e2:ca:72:b6:a5:c1:fe:
20:29:18:e0:4e:89:5e:88:a2:12:81:6e:b9:f9:1c:
f5:1e:8d:dd:46:91:0c:64:b4:4b:1b:a7:56:9a:7f:
07:08:da:b9:df:1d:44:c6:dd:45:32:38:a1:35:89:
62:83:e3:5c:f4:14:14:c7:66:3a:8f:ae:c1:04:f5:
d7:00:39:57:7f:80:d8:64:8e:12:2d:b4:27:19:e0:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5B:DF:F3:85:2B:97:25:6B:6F:30:DC:3D:85:48:6A:4D:A2:A8:E2
X509v3 Authority Key Identifier:
keyid:E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/j1vf84UrlyVrbzDcPYVIak2iqOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.124.0/24
185.195.192.0/22
IPv6:
2a13:3900::/29
Signature Algorithm: sha256WithRSAEncryption
27:06:92:67:86:40:81:08:07:26:2e:8d:da:35:de:ba:c8:db:
10:2d:98:8e:ff:15:d3:a9:a8:ca:96:40:ea:4d:80:7e:ee:ea:
d5:0e:83:b3:4a:31:ca:1d:4c:8d:c6:c1:32:f1:90:ca:1f:5f:
b2:41:00:ae:98:2c:30:5b:5e:7b:64:d4:02:47:8a:bb:ad:1a:
e6:f9:de:20:a3:43:4f:3a:c2:af:63:ca:65:e0:08:51:bb:1a:
cf:a1:2e:1a:33:d8:0b:53:ed:38:a8:c8:d3:5a:a9:d7:90:66:
d5:4f:85:a3:c2:c8:e4:1c:1a:43:96:0b:15:2b:9e:ea:fd:36:
ad:b9:74:86:b3:3e:d8:fa:7d:83:0a:c5:22:76:cb:32:d5:6e:
e0:49:79:ca:9f:51:2a:5d:6a:d2:87:8f:32:f3:b0:83:d2:3b:
e4:11:60:68:f7:00:ac:a0:28:17:b7:85:55:27:49:db:6d:d8:
f5:ab:5f:07:a9:19:60:ea:76:9f:f8:f8:94:bc:30:82:43:ae:
90:10:5b:e0:60:16:ba:63:f1:68:4e:b2:82:6a:82:5e:9a:b4:
8a:60:6c:45:9c:9a:7d:e9:44:89:96:26:0a:23:e3:87:4c:78:
f6:93:8c:62:6a:0f:2c:a8:3c:d9:05:8e:0c:2f:cb:3b:10:bc:
6b:1f:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:15:50 2024 by rpki-client on console-fra.rpki-client.org