Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/uDfZW8SWL9xGAZgXpCh1WlUeMvc.roa
File: uDfZW8SWL9xGAZgXpCh1WlUeMvc.roa (raw, json)
Hash identifier: 1V+biRiPqcEENrS2rQH7c1WqlPZmELiNQsVNj+C5dbI=
Subject key identifier: B8:37:D9:5B:C4:96:2F:DC:46:01:98:17:A4:28:75:5A:55:1E:32:F7
Certificate issuer: /CN=669edbfae8650adbd6af207b6ea22565439b499c
Certificate serial: 018CC87154231821329DA895D41E0353630D
Authority key identifier: 66:9E:DB:FA:E8:65:0A:DB:D6:AF:20:7B:6E:A2:25:65:43:9B:49:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp7b-uhlCtvWryB7bqIlZUObSZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/uDfZW8SWL9xGAZgXpCh1WlUeMvc.roa
Signing time: Tue 02 Jan 2024 04:31:59 +0000
ROA not before: Tue 02 Jan 2024 04:31:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62068
IP address blocks: 91.217.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zp7b-uhlCtvWryB7bqIlZUObSZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:54:23:18:21:32:9d:a8:95:d4:1e:03:53:63:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669edbfae8650adbd6af207b6ea22565439b499c
Validity
Not Before: Jan 2 04:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b837d95bc4962fdc46019817a428755a551e32f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:c5:60:71:18:2a:dd:c3:c2:7f:de:cb:7e:
4b:35:12:a0:8a:0d:8f:1b:84:50:61:18:41:da:cd:
d7:7a:85:44:20:a9:e1:99:88:a5:54:4f:7f:1d:ca:
09:48:e9:3d:a6:38:26:95:b9:4d:d9:94:b0:54:cf:
05:55:4d:7d:db:85:4d:2c:87:da:44:92:59:f1:c9:
d9:71:c4:67:06:02:36:c4:08:c2:e2:03:be:6f:75:
90:a5:0f:40:f9:59:5c:18:e3:88:78:06:37:ef:0f:
fc:43:d7:8c:c1:c7:dc:b1:bf:b5:73:7c:32:b5:4b:
2e:3f:5d:94:6f:cd:41:62:04:75:ff:5c:76:3e:a0:
a5:7b:d3:15:f5:a8:d9:f5:9e:a4:ee:cb:cb:96:7c:
67:51:fd:50:dc:9f:9d:65:b2:c0:d3:48:34:c9:a5:
0b:30:b8:f3:49:33:e2:5e:38:cd:95:59:7d:02:8d:
c3:5c:b1:c8:19:a2:e9:4f:f8:17:87:61:b6:04:ab:
ff:4b:88:2a:f3:74:a0:6f:28:24:64:f4:c4:07:1f:
66:f5:86:d2:14:12:84:b0:33:7d:b4:cb:5d:4d:02:
e2:7b:a9:5f:08:3b:4f:07:e0:47:77:41:06:7c:c2:
4d:42:7a:78:5a:ad:96:02:69:e1:6b:a2:34:f4:ec:
7f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:37:D9:5B:C4:96:2F:DC:46:01:98:17:A4:28:75:5A:55:1E:32:F7
X509v3 Authority Key Identifier:
keyid:66:9E:DB:FA:E8:65:0A:DB:D6:AF:20:7B:6E:A2:25:65:43:9B:49:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp7b-uhlCtvWryB7bqIlZUObSZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/uDfZW8SWL9xGAZgXpCh1WlUeMvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d8:25:67:23:73:f6:69:1c:af:33:be:50:72:8d:b0:bb:e1:
8c:a6:a9:71:6f:45:d0:a3:ff:98:5a:42:1a:66:1d:d6:8a:6b:
0c:5e:2e:d9:90:3b:f8:99:f7:53:8f:d1:34:48:ac:4a:1f:7c:
3f:cd:fd:9e:c1:a6:3c:e6:a9:1b:d1:68:0d:21:d8:0a:cd:1d:
8a:8d:f1:5b:aa:68:e9:11:f6:65:cd:b2:4e:21:dc:3d:12:b8:
8c:5a:c0:2b:69:3f:ac:f0:dc:a6:cd:03:a9:cd:76:3e:a4:ab:
b8:c3:5e:9a:c6:5b:d1:13:ec:8a:7b:48:1c:46:38:e7:ca:33:
2b:35:50:95:f0:1f:62:b7:3b:c4:a5:3e:03:26:54:0e:0c:6b:
20:3a:46:0d:32:8f:98:c1:1a:d2:9b:0e:ac:d2:fc:0c:15:88:
3c:a9:fe:31:ff:00:40:6c:e4:d6:48:51:70:0f:50:45:b1:76:
e0:63:73:09:c1:53:28:bd:ce:fd:7f:92:74:ca:07:90:7b:aa:
31:50:a8:a2:2d:f0:9e:3c:17:93:af:01:2d:40:b3:b0:11:5b:
a1:ef:ef:57:5d:bd:08:57:8a:2e:a0:2d:33:d7:ad:61:30:66:
d1:04:8c:7a:10:10:37:d8:17:62:22:d4:c4:13:99:3c:f3:b5:
cb:c3:68:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:17:30 2024 by rpki-client on console-ams.rpki-client.org