Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/IdS3yV5NzB0LApCKNpVKGwMOG4U.roa
File: IdS3yV5NzB0LApCKNpVKGwMOG4U.roa (raw, json)
Hash identifier: xpJCNK19xOY5wRORw6WK3wQHwDLFCRDtTbywQziSQOM=
Subject key identifier: 21:D4:B7:C9:5E:4D:CC:1D:0B:02:90:8A:36:95:4A:1B:03:0E:1B:85
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018CC64B5EDC744C6626860D2840F61A8FFE
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/IdS3yV5NzB0LApCKNpVKGwMOG4U.roa
Signing time: Mon 01 Jan 2024 18:31:17 +0000
ROA not before: Mon 01 Jan 2024 18:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211439
IP address blocks: 185.169.228.0/22 maxlen: 22
91.132.12.0/22 maxlen: 22
193.37.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5e:dc:74:4c:66:26:86:0d:28:40:f6:1a:8f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21d4b7c95e4dcc1d0b02908a36954a1b030e1b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:60:f9:a6:07:92:f4:85:3d:41:6a:2b:3f:ac:
36:6f:ab:9e:aa:75:9b:37:99:12:52:c1:e0:92:d7:
18:ea:28:90:51:dd:27:aa:b3:42:fd:99:ff:5e:08:
65:fe:d2:15:3d:3a:b6:d0:e8:b1:ae:4a:76:62:ea:
4d:5b:e4:c3:3e:20:72:61:a2:be:82:bb:53:cd:f2:
dc:8b:c3:42:49:9c:31:a9:f6:e6:9c:d6:ae:b8:16:
2e:0a:da:5b:98:69:8f:12:31:76:92:2c:aa:66:5f:
5f:43:f4:3c:a6:6c:39:41:c6:79:b9:6b:64:f9:04:
f2:a8:c3:a2:90:3a:a8:87:9e:da:d4:5f:20:e1:73:
72:0d:54:20:21:fc:24:09:8a:06:4f:72:45:17:55:
8b:58:4c:c0:6c:20:e9:44:f1:d0:92:69:86:35:7c:
04:73:35:d8:9a:75:70:0b:cc:4c:da:99:e5:55:dc:
99:38:51:92:54:f1:b3:f9:85:74:4e:c0:bc:de:70:
63:78:b3:bf:3f:cc:97:08:77:bd:35:13:a6:f3:8d:
26:df:79:f1:fe:f8:1d:35:6e:4f:45:67:45:c4:3b:
a5:40:c0:6a:6c:13:7f:65:e7:91:8d:49:55:29:f3:
a2:0d:1d:05:18:a9:81:9e:bd:a3:85:44:6d:1f:6b:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D4:B7:C9:5E:4D:CC:1D:0B:02:90:8A:36:95:4A:1B:03:0E:1B:85
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/IdS3yV5NzB0LApCKNpVKGwMOG4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.12.0/22
185.169.228.0/22
193.37.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:75:d8:1a:29:d5:b2:1d:64:e8:3f:ec:14:3f:44:49:94:85:
83:1d:94:19:c1:92:23:c8:46:59:b9:6d:c5:f1:a8:8f:e4:3b:
8a:ca:65:97:4d:b7:36:d7:54:fe:4d:fd:be:9e:90:42:c7:76:
b3:e8:59:2f:08:fb:73:45:9e:42:ea:7c:41:ee:8c:00:a4:ca:
e7:86:94:62:02:19:64:f2:96:e1:f6:cb:c5:b3:b5:2f:15:86:
4f:94:9d:0e:b4:89:6b:02:fa:2e:6d:d6:5c:2f:57:d1:18:68:
de:d7:7b:09:26:a2:ce:b1:c4:d7:53:a1:de:ca:1d:d3:c5:f2:
07:a8:37:7a:29:f1:82:bf:b7:4a:11:58:f2:57:53:bb:bf:24:
5b:02:15:82:11:fb:f8:7e:13:e9:8e:34:3b:b1:38:cb:35:ba:
3b:f5:d6:5f:2e:0b:11:08:6d:b1:ab:ab:08:cb:e7:26:b8:1c:
0b:ad:ed:94:39:c3:9c:c6:57:d0:00:26:7b:4e:48:5c:13:2b:
c4:ed:e4:24:13:8c:2d:9b:70:58:88:45:18:67:fe:f9:cd:45:
1f:c4:db:cb:b3:23:9d:97:e2:be:32:fc:a5:5a:0c:e1:c8:e8:
c9:97:eb:79:51:41:4c:6e:91:f1:3a:42:5d:f3:4d:5e:ff:35:
64:7c:74:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:37:28 2024 by rpki-client on console-fra.rpki-client.org