Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/b-dIybfaVzk33uDQvfdtrTbgRws.roa
File: b-dIybfaVzk33uDQvfdtrTbgRws.roa (raw, json)
Hash identifier: Z2xoGIIreiAXFsHcNcewdXfPG9kDwh2qs8nOW1xY8XA=
Subject key identifier: 6F:E7:48:C9:B7:DA:57:39:37:DE:E0:D0:BD:F7:6D:AD:36:E0:47:0B
Certificate issuer: /CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
Certificate serial: 018CC4248D155EEF23D1E4E8224A4C98B379
Authority key identifier: 4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/b-dIybfaVzk33uDQvfdtrTbgRws.roa
Signing time: Mon 01 Jan 2024 08:29:38 +0000
ROA not before: Mon 01 Jan 2024 08:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211157
IP address blocks: 185.76.151.0/24 maxlen: 24
91.105.192.0/23 maxlen: 23
2a0a:f280:203::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:8d:15:5e:ef:23:d1:e4:e8:22:4a:4c:98:b3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
Validity
Not Before: Jan 1 08:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fe748c9b7da573937dee0d0bdf76dad36e0470b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:f7:29:14:05:70:ee:be:f4:07:54:d0:3f:
df:e8:6a:b4:3e:10:ee:2a:1a:13:b1:86:cf:ab:19:
32:c7:99:17:7e:e2:27:10:97:bd:ff:db:8c:8f:13:
47:c5:a7:d3:dc:f8:05:3f:df:05:72:2f:4d:21:e9:
a4:4e:dc:a3:c1:ac:98:2f:27:a2:65:db:34:9a:d6:
77:ce:71:b0:9d:e1:8c:ee:fc:65:76:3a:40:0c:14:
12:46:d4:45:60:b9:80:e2:56:37:cc:6a:3a:30:b3:
d5:cb:74:a8:04:96:d7:e2:5e:c4:0e:89:f8:e4:fe:
b8:b8:1d:a8:ab:20:63:5e:88:cf:c1:a9:f2:49:18:
26:35:8b:8f:6d:2b:88:16:39:72:4c:61:b5:7a:7b:
b8:d4:7d:76:fa:32:93:8d:d9:90:8b:ab:1f:91:d0:
61:74:5d:73:ca:ff:3c:c3:e5:84:b0:45:63:95:2e:
fa:7f:06:bd:15:57:66:61:dd:2c:89:7a:2f:14:c9:
9c:e5:e4:e4:5b:58:70:36:73:00:d0:3e:80:a4:31:
da:42:a4:45:34:bd:2c:13:4d:72:81:8a:9f:1d:f1:
9c:ae:7f:b8:49:0d:ab:1a:ef:c5:b6:3d:ce:eb:0b:
79:78:bf:16:71:ce:18:a7:56:2c:8e:73:db:4b:d0:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E7:48:C9:B7:DA:57:39:37:DE:E0:D0:BD:F7:6D:AD:36:E0:47:0B
X509v3 Authority Key Identifier:
keyid:4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/b-dIybfaVzk33uDQvfdtrTbgRws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.105.192.0/23
185.76.151.0/24
IPv6:
2a0a:f280:203::/48
Signature Algorithm: sha256WithRSAEncryption
75:7d:ef:d1:f9:1e:f5:ea:0f:01:8c:77:bb:04:8c:25:ac:a0:
4d:8f:49:e1:bb:9f:2c:87:9b:59:ca:51:dd:3b:e9:2a:d3:c6:
24:5b:2c:cb:ee:c7:4f:6c:78:40:2d:93:52:c1:a6:38:de:b4:
38:8a:6c:4b:27:20:2e:2b:ac:46:87:9e:46:66:04:d5:12:36:
1f:c5:61:37:07:e4:1a:26:77:57:34:f4:99:b3:46:bb:89:a2:
f6:f2:84:2b:e0:46:ff:4e:a5:56:e7:97:8e:e3:be:40:44:1f:
99:7a:b4:d8:2e:b2:ac:ff:97:e1:8a:2d:6f:a5:58:49:92:96:
7e:1b:3e:2f:57:cd:c5:f3:df:0f:d9:e9:1c:65:02:65:8f:d3:
aa:ad:f7:02:40:4e:6d:73:aa:db:2b:3e:34:2c:17:80:00:50:
ee:0b:30:c1:7e:0f:dc:e1:be:11:d4:09:4c:d2:7c:64:47:8b:
db:2e:c3:29:0d:37:d4:11:65:9b:b5:f3:33:3b:35:fd:65:2c:
e0:c5:25:a4:99:4f:c3:ef:42:dd:8c:26:a7:92:ee:00:df:bf:
9d:a7:fa:01:0b:84:10:95:95:c8:d7:6e:ba:b0:12:bf:3e:ee:
d2:61:ab:31:c1:fa:32:da:3e:af:d3:c5:1f:13:52:49:f6:8d:
44:5c:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:07:29 2024 by rpki-client on console-fra.rpki-client.org