Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/L3g8IVnVziqn8e93RfyuXnHvOS0.roa
File: L3g8IVnVziqn8e93RfyuXnHvOS0.roa (raw, json)
Hash identifier: Vwlv389/azoc6eqSH7ZOUEY5pusU9QqF7xCdf5wEPeU=
Subject key identifier: 2F:78:3C:21:59:D5:CE:2A:A7:F1:EF:77:45:FC:AE:5E:71:EF:39:2D
Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial: 018DF61ACEBA2E1E69560EC1B433DF292934
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/L3g8IVnVziqn8e93RfyuXnHvOS0.roa
Signing time: Thu 29 Feb 2024 18:22:48 +0000
ROA not before: Thu 29 Feb 2024 18:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212226
IP address blocks: 91.198.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f6:1a:ce:ba:2e:1e:69:56:0e:c1:b4:33:df:29:29:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Validity
Not Before: Feb 29 18:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f783c2159d5ce2aa7f1ef7745fcae5e71ef392d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:c1:71:58:30:99:3f:b6:79:dc:70:64:37:
cf:2a:df:78:8b:cb:16:f2:6b:c2:b0:00:76:9a:3e:
f5:fa:b9:11:b5:da:f2:04:95:fd:d1:2f:e7:79:b1:
fd:49:c8:a1:15:c0:c9:65:35:d8:28:ed:c0:e4:a6:
a6:95:0b:d8:52:1e:1f:78:d7:67:ad:d7:80:f7:2c:
4b:01:3a:83:2d:5e:1d:6c:5a:8f:3a:0b:b3:5c:2e:
b2:96:8c:bf:60:b6:ef:e9:fd:92:b5:b4:cd:3d:f7:
69:e3:ca:d9:2c:de:ab:79:7b:1c:1f:27:f7:3d:b2:
1b:5d:d3:5c:7c:d4:2d:f9:50:6f:ce:15:0b:e1:93:
c1:53:d8:4c:ad:54:7b:ed:ff:77:87:a6:97:2b:c0:
a1:89:47:2c:13:cd:c7:66:f6:06:34:15:f7:df:99:
b1:1b:89:7b:96:3a:4f:8a:4a:fd:f7:fb:8a:78:40:
fd:59:7b:1c:ba:81:83:6a:3f:6e:5b:b3:46:78:75:
4d:18:6b:8d:4d:0e:1b:fc:71:cb:14:1c:fd:23:22:
2a:f3:3f:43:2c:57:1c:2f:9f:89:2a:4d:05:de:de:
38:8c:7b:bd:f4:9f:d4:34:a0:33:3f:c4:b5:0a:f6:
8c:33:0d:6e:cc:ae:b4:f6:e6:9d:38:0f:b2:da:b7:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:78:3C:21:59:D5:CE:2A:A7:F1:EF:77:45:FC:AE:5E:71:EF:39:2D
X509v3 Authority Key Identifier:
keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/L3g8IVnVziqn8e93RfyuXnHvOS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.192.0/24
Signature Algorithm: sha256WithRSAEncryption
67:87:2f:71:97:b3:75:68:ea:ba:38:ea:0c:4f:79:1c:12:fb:
1b:07:65:3f:ad:41:f2:82:3a:37:e7:2b:08:7a:62:3c:e7:3d:
5a:a8:34:7d:4b:a5:14:c0:c7:2a:f6:8d:a5:4e:82:33:86:a1:
4d:94:92:42:8b:fb:2f:4c:fc:ca:4f:09:26:ea:40:f9:ed:d0:
c8:34:49:25:62:c7:25:f0:ff:d8:ed:e4:57:84:4c:c8:6e:35:
e3:48:d2:84:7d:f3:e6:86:be:55:2a:8d:04:91:c1:44:d2:86:
60:00:63:9e:6c:51:b1:ba:05:c1:d2:51:d4:9e:9e:0b:64:f8:
e3:5a:a1:54:e2:58:a1:b8:0d:b0:89:e3:7d:d8:52:bb:36:c3:
83:f9:57:80:df:17:dc:73:a7:ee:e5:f3:2b:b8:8a:19:6b:b6:
dd:81:1d:53:12:f5:3c:da:33:51:eb:32:2f:3c:3e:5b:93:ae:
e0:5e:a0:10:f3:36:59:2c:14:c2:18:d2:5a:5f:26:b7:3f:49:
9c:10:f9:79:aa:63:e8:95:5e:a0:66:3f:4e:22:19:fe:51:f8:
42:6e:1f:0e:88:a1:a0:89:ce:b9:9d:43:90:7d:c4:b2:83:0a:
9a:10:93:56:91:f2:f7:2a:1a:b2:db:84:df:73:48:49:fd:0f:
e5:55:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:14:28 2024 by rpki-client on console-ams.rpki-client.org