Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/wY0CfTG1bQ8mWqEUxkvVGDzlEl0.roa
File: wY0CfTG1bQ8mWqEUxkvVGDzlEl0.roa (raw, json)
Hash identifier: N6Rx23k8GF+E68BpU/SGmbZjoVcW7LLG5mAnKq8TjgY=
Subject key identifier: C1:8D:02:7D:31:B5:6D:0F:26:5A:A1:14:C6:4B:D5:18:3C:E5:12:5D
Certificate issuer: /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial: 018D3182CB39555C0D11919963E1A9FBFE88
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/wY0CfTG1bQ8mWqEUxkvVGDzlEl0.roa
Signing time: Mon 22 Jan 2024 14:11:11 +0000
ROA not before: Mon 22 Jan 2024 14:11:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210060
IP address blocks: 91.223.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:82:cb:39:55:5c:0d:11:91:99:63:e1:a9:fb:fe:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Validity
Not Before: Jan 22 14:11:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c18d027d31b56d0f265aa114c64bd5183ce5125d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:03:e9:61:30:3b:64:30:20:b7:2b:2f:84:e3:
c6:df:b3:6e:fb:75:d7:bf:5c:d1:a7:57:bd:23:95:
51:2a:63:41:7f:be:05:53:81:b8:aa:ec:ea:06:e7:
03:b1:f4:6f:32:79:78:a4:e1:e4:6e:0a:27:2e:66:
d2:a1:ae:82:46:17:e1:4f:0d:c5:db:d8:48:ec:c9:
4f:ce:45:4a:c2:b4:a8:b7:79:9e:c1:45:e8:ef:dd:
d3:09:e0:cb:6c:b5:da:57:78:dd:01:b7:e9:79:51:
d2:52:d6:17:c9:a1:aa:56:ee:7c:11:b6:01:af:da:
bf:85:93:91:e6:80:a3:aa:31:25:32:60:9f:08:c4:
8c:0d:6c:83:16:63:f5:08:a4:d6:e4:85:fb:94:b8:
ad:3c:9f:27:68:b9:29:54:55:2b:70:46:8d:98:f7:
2d:46:2a:21:21:8c:c9:d3:fd:a6:d9:57:47:7d:80:
8e:05:73:07:83:54:2f:18:b0:79:80:ba:cd:0b:c1:
63:a7:85:e1:7f:90:94:b1:5a:c0:05:f9:d2:0c:87:
ce:6b:7b:a4:f5:89:c5:6f:02:eb:5a:f5:b5:57:b0:
73:9c:fe:4f:a2:c5:52:33:32:6c:09:d8:0d:93:93:
70:68:0b:b7:7a:44:9c:e2:e0:fa:91:3e:5d:d0:03:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8D:02:7D:31:B5:6D:0F:26:5A:A1:14:C6:4B:D5:18:3C:E5:12:5D
X509v3 Authority Key Identifier:
keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/wY0CfTG1bQ8mWqEUxkvVGDzlEl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.45.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:9f:f0:11:3b:76:43:f0:73:b7:9b:ee:2e:70:a0:f9:f4:ac:
5b:bc:e9:15:f4:d6:db:19:5b:bc:63:9f:f7:8f:b1:03:23:a1:
5a:dd:68:93:2f:70:99:8e:bc:c6:4b:f4:11:12:3e:b1:95:8c:
99:36:3e:21:34:74:3c:92:5f:25:52:54:9c:f5:6d:53:96:60:
4c:c9:0d:5f:9d:49:9c:66:3d:44:6e:d6:99:fd:56:f4:c7:3b:
c0:71:77:a0:4f:c9:d4:91:09:49:e5:7c:c0:04:4e:f0:6b:85:
22:20:dd:38:c4:cf:fa:b3:72:9d:3b:6e:12:5a:ad:01:8b:3c:
a1:7d:f3:3e:00:be:61:a1:1e:33:03:04:35:54:f0:39:1e:a4:
89:92:70:8b:21:01:84:db:16:a4:fe:fe:34:49:2d:41:e4:9c:
71:3b:24:9a:f7:db:92:27:27:6e:21:d3:9e:f3:93:f5:03:24:
13:57:fa:75:78:97:c9:3b:b6:7f:da:38:a9:a3:77:b7:21:d4:
af:30:a3:e7:0f:f7:af:67:62:b8:31:b8:a0:d1:ca:ee:df:03:
17:98:78:4e:8b:a3:bf:ac:fb:73:50:2b:4b:9b:d0:79:60:da:
0a:84:1b:e9:57:82:33:89:41:40:7b:19:06:67:db:b0:c6:1f:
93:e7:a2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:26:38 2024 by rpki-client on console-fra.rpki-client.org