Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/mFxi4XGyXNbtb78HZ5XVptPDsD0.roa
File: mFxi4XGyXNbtb78HZ5XVptPDsD0.roa (raw, json)
Hash identifier: FtIuuMAL5UzDiJh1EjHFQZYP35mqWs2Fc0Z0NesEl54=
Subject key identifier: 98:5C:62:E1:71:B2:5C:D6:ED:6F:BF:07:67:95:D5:A6:D3:C3:B0:3D
Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial: 018CC9BB166D2D7E0FE26DC0DF05E95D54DF
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/mFxi4XGyXNbtb78HZ5XVptPDsD0.roa
Signing time: Tue 02 Jan 2024 10:32:10 +0000
ROA not before: Tue 02 Jan 2024 10:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5464
IP address blocks: 91.237.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:16:6d:2d:7e:0f:e2:6d:c0:df:05:e9:5d:54:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Validity
Not Before: Jan 2 10:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=985c62e171b25cd6ed6fbf076795d5a6d3c3b03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:99:65:a7:86:fc:2d:a3:bd:9b:2c:4c:c0:75:
88:7e:a1:96:8a:e1:9d:56:5f:3e:3b:45:ef:45:23:
fd:ff:ae:2a:65:10:55:75:3e:05:8c:e7:09:a8:7e:
8f:dd:26:b8:6c:4e:b8:18:71:e2:6b:aa:04:69:05:
30:52:7a:ff:02:9d:56:a9:e9:b0:08:82:69:33:e8:
85:7d:a3:a9:7b:b0:cf:98:a3:de:a1:32:5c:97:f7:
04:ee:6c:6a:32:b9:9c:5b:6a:33:b5:7a:86:85:28:
50:e5:5b:06:26:7a:5e:29:cb:19:b5:22:65:50:6d:
04:d7:a5:19:83:dc:80:ca:f7:20:b4:4f:e5:53:f0:
2d:ed:10:da:8f:c1:d0:98:6a:de:27:6a:56:a0:7c:
f3:02:6f:02:4c:b8:90:00:1c:91:1e:53:23:b3:02:
ce:1f:31:08:25:25:72:8e:0f:8e:62:f4:5e:3d:bd:
e8:b2:26:8a:64:ec:ec:93:69:7e:a0:d3:0b:0d:e6:
00:ae:4f:65:85:bb:c4:5a:d2:8e:f0:8d:6f:42:da:
61:8c:d5:20:2a:e3:60:f5:fc:9c:3d:18:bd:cd:0e:
db:17:56:6e:31:57:44:7d:39:97:ee:b9:e0:2e:17:
e6:7c:a2:23:46:20:9e:f1:43:c8:23:80:6a:84:6a:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5C:62:E1:71:B2:5C:D6:ED:6F:BF:07:67:95:D5:A6:D3:C3:B0:3D
X509v3 Authority Key Identifier:
keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/mFxi4XGyXNbtb78HZ5XVptPDsD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.100.0/23
Signature Algorithm: sha256WithRSAEncryption
25:d4:6c:da:9c:fa:29:2f:1c:86:86:e6:3b:ca:97:b8:c8:ea:
67:af:1e:7f:2d:8a:4d:16:d2:f9:f1:29:58:bb:1b:cf:b8:d8:
2b:ec:e5:ad:57:3c:11:a4:e9:45:92:67:2f:df:7c:3b:3d:de:
33:70:ee:b0:c4:76:e6:c4:33:90:55:18:1f:63:a9:4f:0d:08:
15:e7:fd:43:d7:03:43:f2:78:37:e8:85:0c:6b:4b:e7:c4:a6:
06:83:33:de:d3:95:ad:45:3d:06:ef:b0:94:22:93:e9:83:3b:
5f:4a:96:97:d4:e2:0d:bd:01:6f:c3:13:5d:95:4f:10:f2:96:
19:9e:f3:1f:93:a6:8d:ad:c4:a6:67:f6:53:0d:bf:49:6c:f9:
b7:15:2b:b9:38:5a:2a:c5:7a:03:90:cd:62:44:cf:84:b2:25:
e9:ec:64:a7:d4:ac:cd:8e:47:b9:df:4e:8d:21:a6:25:44:9d:
4e:72:5c:4f:25:97:af:6c:ee:f6:1b:49:1a:89:4e:0a:ed:0b:
cb:71:69:61:f0:92:d8:4c:b8:26:13:17:01:11:bb:5c:1d:eb:
d5:53:cb:e8:0a:d1:89:1f:df:98:af:57:1b:c1:c5:46:45:55:
5b:62:8b:b3:11:d1:cc:de:69:17:5a:fe:7c:40:98:9f:18:ef:
e2:a3:60:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:32:26 2024 by rpki-client on console-ams.rpki-client.org