Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/s5Eps8_YUrKaQ4a8UDie9qfWHQs.roa
File: s5Eps8_YUrKaQ4a8UDie9qfWHQs.roa (raw, json)
Hash identifier: YbwW1mdXawWn4p9h+pcsoxL4EFGDd5xIIL6Qj0qak7U=
Subject key identifier: B3:91:29:B3:CF:D8:52:B2:9A:43:86:BC:50:38:9E:F6:A7:D6:1D:0B
Certificate issuer: /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial: 018CC56E12CFA0793DDDAE35DBFDD1671B9B
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/s5Eps8_YUrKaQ4a8UDie9qfWHQs.roa
Signing time: Mon 01 Jan 2024 14:29:34 +0000
ROA not before: Mon 01 Jan 2024 14:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43366
IP address blocks: 91.231.184.0/24 maxlen: 24
185.70.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:12:cf:a0:79:3d:dd:ae:35:db:fd:d1:67:1b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Validity
Not Before: Jan 1 14:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b39129b3cfd852b29a4386bc50389ef6a7d61d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:99:aa:1a:12:27:60:29:70:22:b8:de:1b:62:
ac:dc:d6:17:e7:dd:03:b2:92:ee:a8:b3:8c:e6:1f:
9b:f5:31:0b:5f:8e:6d:58:12:f2:56:be:7e:b1:6c:
67:e0:4e:e9:e6:fa:f1:ea:57:32:9c:f7:6f:4c:ea:
08:a5:9c:9d:fe:a2:8c:23:fd:b5:cb:1f:a0:05:2f:
bb:9e:bc:1f:7a:3c:52:63:2b:44:a1:f8:2e:34:a0:
c5:24:ef:75:79:0f:0b:11:46:15:20:6c:7b:cb:03:
7c:8d:0d:bd:40:b4:d2:c7:12:e5:b9:6d:38:fa:a0:
17:32:21:f7:3d:1c:75:de:c7:dd:37:99:56:fd:e4:
b9:64:75:21:4e:53:4b:91:48:03:63:80:2c:d2:be:
72:03:bd:18:ce:12:b2:b1:1c:d0:4c:d0:74:ad:db:
f7:47:2f:6a:03:5d:69:49:5c:c5:0c:8c:7d:67:8d:
4e:aa:ec:49:43:93:5a:28:5a:d9:84:94:35:c9:bb:
4e:13:3f:fd:ae:b2:bc:37:fd:16:63:5f:d1:3b:b6:
ec:28:35:31:72:5a:35:b5:2b:8f:ad:c8:8d:57:58:
46:02:f2:45:2e:2b:28:cb:43:96:a7:00:06:64:d8:
f9:c0:a2:4c:97:9c:3b:68:54:9a:f5:b6:17:94:ad:
00:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:91:29:B3:CF:D8:52:B2:9A:43:86:BC:50:38:9E:F6:A7:D6:1D:0B
X509v3 Authority Key Identifier:
keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/s5Eps8_YUrKaQ4a8UDie9qfWHQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.184.0/24
185.70.228.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:4a:12:ec:5d:ea:2d:aa:2d:c8:69:94:a8:d1:d7:dd:79:d4:
8e:ae:03:a0:45:52:c1:e0:ea:e6:5a:eb:2e:88:82:01:0d:cf:
52:2b:b8:20:cf:48:8e:48:f6:d3:0a:e4:14:0d:f6:47:e3:96:
a9:85:f6:61:56:2d:bf:87:80:9f:94:7c:80:47:e4:93:2b:b9:
2c:5d:6a:36:15:bc:0e:bc:5a:78:96:db:55:0d:0c:96:b7:64:
a3:72:24:f4:8e:f4:56:78:13:58:a3:96:47:cd:5e:b9:b2:b6:
e9:9b:4b:98:69:a3:fe:ec:01:ee:06:45:20:d9:bf:4f:43:bc:
4f:08:65:1e:2b:53:31:4d:e5:55:8d:3d:ed:40:01:3a:12:ad:
1e:a3:08:0d:74:b0:4f:85:8a:6c:d6:df:f8:35:5f:f4:5e:40:
6f:41:47:67:bb:bc:e5:75:d5:22:b4:08:8c:e8:5a:1a:5e:21:
6e:7c:8d:c5:8c:d7:20:80:1f:c2:52:5b:90:60:3e:78:1d:33:
9b:cd:bf:6c:59:4d:ed:c1:7a:5c:77:0d:52:21:31:53:6e:51:
7b:e1:63:33:f2:f6:76:b2:0f:55:43:0b:42:7d:ef:f1:2d:4e:
9b:37:c8:47:de:6c:31:5e:17:13:f7:c7:73:d8:20:4f:88:a9:
72:90:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:09:54 2024 by rpki-client on console-ams.rpki-client.org