Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/vi6WM7sEUnflo_6nJkMKIs30HnE.roa
File: vi6WM7sEUnflo_6nJkMKIs30HnE.roa (raw, json)
Hash identifier: 80emMOGDa7fzjqbhyioI81co6V6k57qDKBgdSINVxt4=
Subject key identifier: BE:2E:96:33:BB:04:52:77:E5:A3:FE:A7:26:43:0A:22:CD:F4:1E:71
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018CC56DF990501B3ECE98150E4369C28BF9
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/vi6WM7sEUnflo_6nJkMKIs30HnE.roa
Signing time: Mon 01 Jan 2024 14:29:28 +0000
ROA not before: Mon 01 Jan 2024 14:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207235
IP address blocks: 91.107.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f9:90:50:1b:3e:ce:98:15:0e:43:69:c2:8b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be2e9633bb045277e5a3fea726430a22cdf41e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:53:83:ea:6a:35:43:73:d4:09:fe:d5:37:
c6:37:3a:90:e0:b2:b1:e1:01:6d:14:3f:a6:f5:ee:
05:30:e1:bc:ab:07:10:55:db:ef:9d:80:58:88:35:
75:41:de:4b:f4:5e:1c:0f:d7:58:0c:d9:3f:7f:82:
5c:cb:24:8f:7f:47:4f:4d:78:c0:bf:13:ee:e4:4d:
34:51:d4:08:8c:f9:61:f2:49:93:43:84:eb:22:ac:
c0:f5:21:f9:73:a8:d7:b8:8e:e9:71:26:f2:fe:d4:
03:46:a3:b2:2d:c6:6a:e9:f7:f1:ef:fc:cb:37:2f:
6f:ee:7c:2e:0f:2f:a2:3f:4b:a6:04:bd:04:ad:1a:
76:77:c2:53:29:c8:3d:70:7b:d4:d0:54:16:44:8c:
db:e6:55:f3:de:4b:ff:ab:1f:c3:81:e0:22:22:90:
db:9f:4e:9d:4c:4f:b1:a1:7b:da:58:0b:0a:6c:75:
66:e5:75:50:ee:d3:ea:31:94:0c:fe:e7:bb:9e:d9:
30:be:99:0f:a7:92:49:8e:ef:9f:66:75:4d:cc:89:
3c:5e:b1:bd:5c:0b:f8:1a:ed:1c:48:f2:ce:0c:54:
9d:d1:19:26:21:c2:5d:2f:17:6d:9d:43:e4:85:50:
bb:2e:6f:90:df:31:09:40:32:e4:9d:8d:84:7f:5d:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2E:96:33:BB:04:52:77:E5:A3:FE:A7:26:43:0A:22:CD:F4:1E:71
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/vi6WM7sEUnflo_6nJkMKIs30HnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.117.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f8:cf:aa:1e:f0:7f:aa:46:35:96:ed:4b:34:6b:01:f8:b7:
1f:28:7f:23:59:ed:24:d6:35:47:da:20:65:f8:cb:4a:a9:dd:
54:40:e5:a1:d5:a9:da:45:3e:ce:a6:e2:d6:99:a2:d4:5d:ec:
56:1f:c0:8b:8a:81:be:1d:a8:bf:65:34:29:a7:68:fb:3c:11:
34:75:5e:f3:31:7e:44:f7:1f:a0:26:49:ba:53:b4:cd:4a:7b:
3f:21:79:91:31:00:02:57:a4:10:56:67:49:b6:c0:16:57:28:
d1:81:28:5c:9e:de:4e:93:c7:3f:c9:ab:07:3d:fa:e5:53:6b:
2b:91:2a:d3:3a:79:d4:fe:8f:06:10:1f:d1:25:0b:53:74:12:
cf:03:bf:12:4c:e0:8b:be:44:60:fc:1b:c6:3e:cd:ac:cf:70:
03:b8:6b:bb:43:f2:08:b6:26:22:6a:d2:fb:3f:7a:42:fc:8b:
d4:0b:9f:8c:c5:6e:4e:ab:e0:7d:aa:8c:28:de:6f:f8:93:0b:
b8:cc:94:71:63:76:0d:1f:d6:b5:b6:28:a7:6b:91:9a:53:37:
b2:d0:05:e4:4a:a0:d0:e4:a5:29:89:4a:0a:24:25:f2:5e:f8:
61:62:62:df:ef:e4:69:a6:0f:df:ec:05:2b:fe:40:94:3b:39:
c1:b7:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 20:42:19 2024 by rpki-client on console-fra.rpki-client.org