Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/JYYEhwESiYOujsnZhNvoW2ejP0A.roa
File: JYYEhwESiYOujsnZhNvoW2ejP0A.roa (raw, json)
Hash identifier: 4wvssMi5Tv+ec6ln103qa1/bjSyN8ShwoSIJgpuphT8=
Subject key identifier: 25:86:04:87:01:12:89:83:AE:8E:C9:D9:84:DB:E8:5B:67:A3:3F:40
Certificate issuer: /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial: 018CC348F1B2067F7DE272932512C3E286F3
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/JYYEhwESiYOujsnZhNvoW2ejP0A.roa
Signing time: Mon 01 Jan 2024 04:29:46 +0000
ROA not before: Mon 01 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197916
IP address blocks: 91.228.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f1:b2:06:7f:7d:e2:72:93:25:12:c3:e2:86:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Validity
Not Before: Jan 1 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2586048701128983ae8ec9d984dbe85b67a33f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:e3:15:b0:4c:a7:84:23:d3:cf:4d:3a:f3:
a8:05:07:94:d1:d9:9e:68:34:5b:a4:68:48:84:2d:
f1:d5:c0:b5:f7:25:fd:f1:7d:b6:1b:a1:1a:b7:28:
55:cb:cb:68:32:ff:80:0a:e2:9f:61:9a:7d:31:5c:
c1:a5:4b:75:54:84:93:9d:d7:1c:07:3e:fa:aa:1b:
d9:e7:70:80:61:d3:1d:b0:39:0d:47:30:79:16:f6:
c7:dd:d0:e7:71:9b:14:cf:e8:ca:a2:d3:da:d0:0e:
f6:f7:4d:28:28:90:4d:a8:4a:ce:27:d4:8f:79:4c:
99:41:b3:83:51:94:ee:a4:5b:4d:ff:70:d7:b7:be:
9f:44:96:10:1d:6c:a7:84:98:35:6c:60:e4:b3:30:
c4:6d:ec:18:8b:06:af:5d:54:38:58:1c:e6:41:05:
23:de:10:10:e6:eb:3e:b2:d9:8f:9c:f0:eb:58:ce:
34:a3:e0:ae:7f:4c:9e:89:c7:21:43:ae:ad:42:0a:
3a:ad:e7:49:d5:b0:7a:3c:c0:7e:09:5f:a0:c2:39:
96:09:69:5a:c1:9b:45:68:f0:c9:da:18:52:72:13:
91:08:ee:40:3d:f4:b0:62:10:db:ae:30:73:d2:99:
42:d8:34:9e:a3:e0:50:0a:2e:16:fb:88:c2:dd:da:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:86:04:87:01:12:89:83:AE:8E:C9:D9:84:DB:E8:5B:67:A3:3F:40
X509v3 Authority Key Identifier:
keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/JYYEhwESiYOujsnZhNvoW2ejP0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.169.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:42:8b:c1:c4:ff:78:ab:00:8e:5b:69:a4:ca:6b:95:62:77:
d4:fe:1b:e7:85:55:8b:8b:fd:30:3c:94:4f:07:7e:d6:9d:4d:
97:aa:8f:8c:90:d0:2a:0a:36:bc:1f:7b:0f:cd:2f:db:97:e3:
97:85:43:92:ac:97:eb:14:ae:99:41:6a:64:69:4e:dc:59:22:
bb:bb:1e:06:75:89:52:fc:a7:3a:c1:88:72:98:ce:87:b7:16:
60:ac:a3:5a:d7:95:0c:ce:94:22:2c:ea:43:09:30:c5:6e:ec:
f6:3e:75:de:22:d6:68:9e:30:15:c3:2e:1a:99:04:27:65:bc:
2e:23:ee:e6:a2:04:1f:a9:6d:c6:5c:c7:ce:19:ba:f1:1f:9c:
3b:a6:26:d5:74:4f:34:a2:f6:94:53:1e:ed:a2:38:0f:f6:18:
f7:0b:db:c9:b3:bf:84:7c:59:2f:00:98:e7:6c:2b:0d:87:d2:
62:4e:7f:17:36:4e:a4:ec:5f:e4:d0:b9:d9:92:bd:52:6f:15:
81:2a:75:bc:c5:95:88:7e:91:18:3f:c6:f2:33:64:72:7e:d8:
c3:53:71:1a:6d:4a:f1:a3:12:72:0c:0c:0c:01:61:b2:9f:78:
4b:df:06:f9:6e:ab:41:de:23:97:2c:10:7a:70:4c:ab:c4:fc:
20:7e:12:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:14:27 2024 by rpki-client on console-ams.rpki-client.org