Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/9WFsq3uZZdssDU8GBjPAbEp0Gxg.roa
File: 9WFsq3uZZdssDU8GBjPAbEp0Gxg.roa (raw, json)
Hash identifier: Bfteh9sbF6Yy9esRf5jZ0jhZyvUnaacVYZs5p43jOEA=
Subject key identifier: F5:61:6C:AB:7B:99:65:DB:2C:0D:4F:06:06:33:C0:6C:4A:74:1B:18
Certificate issuer: /CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Certificate serial: 018CC5DC5E7039616C38CB03C9C6F0199925
Authority key identifier: 2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/9WFsq3uZZdssDU8GBjPAbEp0Gxg.roa
Signing time: Mon 01 Jan 2024 16:30:02 +0000
ROA not before: Mon 01 Jan 2024 16:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39043
IP address blocks: 91.211.68.0/22 maxlen: 22
195.66.156.0/23 maxlen: 23
195.66.156.0/24 maxlen: 24
195.66.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5e:70:39:61:6c:38:cb:03:c9:c6:f0:19:99:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Validity
Not Before: Jan 1 16:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5616cab7b9965db2c0d4f060633c06c4a741b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:af:b3:17:16:44:ab:6c:30:61:e2:01:4a:f4:
3a:1c:7f:f2:18:89:3b:ce:f0:9e:bf:3a:87:20:f5:
56:08:aa:b4:11:99:b9:9b:fc:4d:bb:ff:2d:b5:c4:
54:8c:61:94:c9:37:3a:35:7c:0f:f9:48:e3:78:6d:
e8:96:2e:b5:0d:6c:a6:17:9c:88:2d:5d:ed:8c:42:
a0:7c:80:ce:ce:a9:57:be:d3:c8:39:b4:59:d3:b3:
f6:4b:72:a6:d4:da:13:6c:c7:34:b6:44:a3:da:d0:
5b:d7:77:8a:e2:82:88:39:82:d5:fa:76:24:e2:a8:
07:66:87:10:58:26:a4:36:35:c8:47:fb:18:bc:8d:
fe:62:65:13:3b:04:64:1f:e0:43:b9:71:4a:83:b6:
e6:a2:53:8f:e8:14:d8:0a:4d:68:8b:ed:1a:c6:b2:
78:9e:0c:c2:8e:0f:57:2b:f5:99:33:19:a2:6a:86:
f6:87:13:c9:29:96:c1:7c:46:77:0f:a2:7a:28:5c:
71:2f:58:48:33:b6:44:05:98:8d:da:c0:7f:32:9e:
07:e6:47:a8:c0:5e:8a:dd:1a:5d:2b:48:00:8e:8b:
4d:99:53:67:3d:6a:e0:53:6e:f0:6b:cb:83:46:85:
3d:04:96:e0:2a:5c:19:12:56:cf:b9:1b:22:86:b5:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:61:6C:AB:7B:99:65:DB:2C:0D:4F:06:06:33:C0:6C:4A:74:1B:18
X509v3 Authority Key Identifier:
keyid:2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/9WFsq3uZZdssDU8GBjPAbEp0Gxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.68.0/22
195.66.156.0/23
Signature Algorithm: sha256WithRSAEncryption
28:c3:93:ed:92:bf:a2:25:31:a9:f2:25:b4:56:d4:27:72:da:
6d:33:6e:3e:b3:e4:50:f4:25:22:ac:4d:82:8e:95:73:a8:4e:
f5:32:ce:a5:40:4c:d1:7c:99:eb:17:b0:50:bc:9b:5e:3e:0d:
a6:72:ce:8d:a9:cd:cb:8c:b6:7e:05:20:ee:65:28:3f:fb:f1:
61:fc:53:4d:7a:6d:a9:32:04:cb:a7:e0:20:bd:db:6c:9c:d6:
2b:f8:d9:2b:8e:93:73:8a:ff:6f:17:ab:bf:ce:21:94:1b:6f:
60:af:71:2c:7a:22:22:c0:41:63:ea:2b:91:85:f2:f0:ef:22:
c2:2a:8b:74:71:d5:f9:30:31:d2:7d:5d:af:07:de:b1:60:f3:
48:d3:19:da:98:8c:0b:e7:66:67:9f:62:ad:94:a2:5f:99:0c:
4a:3f:f3:7f:c8:c6:99:f9:39:ef:f4:a8:b8:15:a2:49:13:8d:
bf:3e:b7:49:31:f9:93:d3:34:25:06:19:8a:ff:86:1e:03:69:
30:b4:90:96:51:e9:a5:e4:da:70:40:f3:13:6b:fa:27:57:a7:
f4:29:8c:f3:de:ad:11:c8:2f:92:c8:97:09:45:64:5d:80:54:
f2:5d:1e:9d:d6:89:34:32:85:94:39:b1:3f:44:78:af:5f:8a:
e5:3e:70:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:46:54 2024 by rpki-client on console-fra.rpki-client.org