Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a47574-57c9-4eba-a532-5ba6e5b07d9d/1/Gt8UV7-wDTQ9j8zAJBpFVXPx0lM.roa
File: Gt8UV7-wDTQ9j8zAJBpFVXPx0lM.roa (raw, json)
Hash identifier: XiWwknEtgirbg2ogdiRR+Z11PUk5zFKP8JmJO9bIw5E=
Subject key identifier: 1A:DF:14:57:BF:B0:0D:34:3D:8F:CC:C0:24:1A:45:55:73:F1:D2:53
Certificate issuer: /CN=befea9e231f7ef6f15ba93e25649ee254cd5e8ea
Certificate serial: 018CC94AC3C57DB9681C64CF9286D6FEEC33
Authority key identifier: BE:FE:A9:E2:31:F7:EF:6F:15:BA:93:E2:56:49:EE:25:4C:D5:E8:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vv6p4jH3728VupPiVknuJUzV6Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a47574-57c9-4eba-a532-5ba6e5b07d9d/1/Gt8UV7-wDTQ9j8zAJBpFVXPx0lM.roa
Signing time: Tue 02 Jan 2024 08:29:29 +0000
ROA not before: Tue 02 Jan 2024 08:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39413
IP address blocks: 91.232.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a47574-57c9-4eba-a532-5ba6e5b07d9d/1/vv6p4jH3728VupPiVknuJUzV6Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/a47574-57c9-4eba-a532-5ba6e5b07d9d/1/vv6p4jH3728VupPiVknuJUzV6Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vv6p4jH3728VupPiVknuJUzV6Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:c3:c5:7d:b9:68:1c:64:cf:92:86:d6:fe:ec:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=befea9e231f7ef6f15ba93e25649ee254cd5e8ea
Validity
Not Before: Jan 2 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1adf1457bfb00d343d8fccc0241a455573f1d253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:10:a1:0f:d3:d9:b4:4e:98:4e:c2:75:ee:f6:
9e:3e:38:34:77:c6:59:a6:3f:8c:8e:a8:bd:9f:e8:
8b:ab:a7:41:1c:7e:86:89:00:9f:6c:3b:87:51:b9:
5c:99:04:df:31:91:ea:0f:4b:f3:5f:8f:5b:dc:23:
6a:6f:21:19:b8:22:ab:8d:fa:63:ea:e8:df:00:51:
7f:7c:c3:92:a4:0c:d4:dd:cf:f9:6b:e4:9a:3d:af:
a5:f1:00:e8:b6:65:8c:65:15:f5:b1:b1:ee:fa:6f:
01:a0:d7:37:b3:30:c1:36:57:22:7a:2b:7d:92:b4:
71:e8:8e:04:71:b8:8e:ad:c3:2c:54:3e:70:ae:dc:
5c:7c:a9:09:3c:fe:1c:cc:ce:ca:84:bc:e5:f0:92:
74:0c:a0:b7:23:10:72:f3:ab:2e:d9:19:6a:c2:54:
b3:77:a4:45:b4:05:c4:7d:1f:fe:7a:06:7d:e3:d5:
5a:b6:9c:15:90:b6:8b:ba:ad:43:b3:14:5c:9b:0c:
20:f4:7a:bc:6b:c6:e4:88:84:7c:47:bd:a2:2f:b7:
43:7f:7e:2f:f7:54:b1:df:c1:0e:34:7b:59:f4:6c:
55:d7:e3:78:2f:d1:c5:b5:f2:89:0c:e3:0d:d0:d0:
2a:43:3a:00:43:d1:65:74:fb:cc:d7:cd:95:e8:21:
7d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DF:14:57:BF:B0:0D:34:3D:8F:CC:C0:24:1A:45:55:73:F1:D2:53
X509v3 Authority Key Identifier:
keyid:BE:FE:A9:E2:31:F7:EF:6F:15:BA:93:E2:56:49:EE:25:4C:D5:E8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vv6p4jH3728VupPiVknuJUzV6Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a47574-57c9-4eba-a532-5ba6e5b07d9d/1/Gt8UV7-wDTQ9j8zAJBpFVXPx0lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a47574-57c9-4eba-a532-5ba6e5b07d9d/1/vv6p4jH3728VupPiVknuJUzV6Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.157.0/24
Signature Algorithm: sha256WithRSAEncryption
32:be:34:96:8d:85:af:b5:19:d8:33:b9:57:22:7f:0f:28:4c:
61:74:8a:67:6d:23:19:e0:e8:9d:75:76:35:c4:1a:24:4c:8a:
77:15:ea:02:c5:51:61:42:69:65:d6:b0:68:94:39:75:ea:ae:
e3:da:63:ce:b0:79:e4:45:dd:2a:e1:b3:a7:3e:a0:2d:6c:3c:
15:3c:a1:13:7e:7a:91:44:7f:9f:cf:3d:ae:df:ad:e1:d7:8b:
b4:61:c3:fe:de:df:6e:91:e2:d2:a0:92:ea:3a:7e:f2:93:2a:
dd:dc:34:e3:60:0c:05:fe:f9:88:fd:36:fa:07:7e:cf:e7:1b:
f5:91:20:4d:90:16:5c:46:69:74:fe:e8:3f:26:fd:00:ed:66:
9c:9b:9a:c1:86:a5:f5:82:3d:a2:16:f5:69:da:be:e5:1d:5b:
57:66:ec:fa:7e:03:3b:62:41:5b:1b:7a:b7:7a:87:a1:85:05:
6c:5a:84:41:f6:b2:a6:70:54:88:a3:51:01:0a:66:c8:07:e1:
ce:98:29:20:ca:63:a2:20:ee:ed:5e:a8:cc:f5:ad:d7:0c:b1:
3b:59:19:41:73:e4:3e:cb:7f:ab:15:09:04:0d:6e:76:22:a5:
39:eb:b3:f7:89:1e:dd:75:4b:68:97:f2:99:3a:b1:2f:67:71:
fa:83:ad:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:04:15 2024 by rpki-client on console-ams.rpki-client.org