Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/Fbi8kZllSD_nSwhddZPVvpPKt3I.roa
File: Fbi8kZllSD_nSwhddZPVvpPKt3I.roa (raw, json)
Hash identifier: lwoMkjfh5hLTxaC269Xsn3APoXzMjIbn7M9rxlyuS+E=
Subject key identifier: 15:B8:BC:91:99:65:48:3F:E7:4B:08:5D:75:93:D5:BE:93:CA:B7:72
Certificate issuer: /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial: 018D6891175D47EECBE919132583077E590B
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/Fbi8kZllSD_nSwhddZPVvpPKt3I.roa
Signing time: Fri 02 Feb 2024 06:45:55 +0000
ROA not before: Fri 02 Feb 2024 06:45:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48687
IP address blocks: 91.221.136.0/23 maxlen: 23
91.240.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:68:91:17:5d:47:ee:cb:e9:19:13:25:83:07:7e:59:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Validity
Not Before: Feb 2 06:45:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15b8bc919965483fe74b085d7593d5be93cab772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b9:7a:e2:c2:d5:8c:24:1a:75:cd:a4:49:8d:
4e:a1:9b:aa:d9:e0:3f:9b:8b:a9:2f:c4:7a:14:b9:
a8:fe:bb:25:5c:5e:98:d9:46:17:ad:5a:ee:ff:6d:
36:de:9d:cb:19:57:85:52:a5:39:8e:d4:45:bf:af:
05:26:98:b4:1e:1c:11:16:05:95:3f:81:01:9b:2a:
cd:4c:5f:d1:ea:ac:59:9c:39:77:17:d5:e7:8f:1e:
52:b9:19:a0:61:4e:55:cc:5d:b0:db:7b:f3:b1:4a:
79:03:ba:58:83:60:6b:0f:87:48:e9:88:9f:80:2c:
33:cc:d9:1b:b2:e5:0d:a3:93:e2:18:db:7b:1a:f6:
e6:7e:55:87:92:c7:7a:06:91:68:cc:a7:1f:a2:ea:
07:ed:11:56:8d:08:01:64:ab:84:88:cb:67:b4:ef:
3f:6a:46:df:13:51:70:bd:0f:6f:e1:c2:4d:49:09:
97:d1:20:e9:73:4f:f0:b1:c4:96:82:b2:e4:0a:dd:
e3:bf:fd:e8:fe:8f:0b:18:06:b9:d3:de:fa:37:8e:
af:84:6a:2f:8b:30:a0:0a:01:c9:a5:fd:89:2c:65:
36:b3:af:4c:41:57:50:79:5b:13:92:14:06:38:98:
e2:4a:08:64:c9:b7:28:18:c6:ca:c9:c2:c5:f6:fd:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B8:BC:91:99:65:48:3F:E7:4B:08:5D:75:93:D5:BE:93:CA:B7:72
X509v3 Authority Key Identifier:
keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/Fbi8kZllSD_nSwhddZPVvpPKt3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.136.0/23
91.240.190.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:70:66:3d:a6:09:a8:59:b9:7a:2b:b7:58:02:84:93:98:5d:
e3:93:df:9b:bd:88:32:21:41:2b:04:1a:3f:9e:b0:4a:f7:88:
10:fd:78:0c:d6:19:64:0a:f7:76:aa:08:e8:1f:e7:7f:86:48:
39:e3:8d:21:fc:10:5e:ea:88:52:eb:a7:7d:87:41:bf:8a:bb:
6b:a5:8b:14:f2:1c:7e:62:96:4e:c1:b8:46:8e:64:30:19:08:
b6:d0:6e:88:a4:f6:6f:a6:d7:01:c0:8c:a3:53:e1:b3:0f:e5:
0b:e5:b8:77:01:4b:ba:9d:e1:97:a2:8e:e3:82:8b:c3:d3:55:
96:03:44:26:d6:28:96:a4:81:38:a3:f8:68:c2:f4:66:61:af:
56:77:a1:62:4c:c8:98:85:3f:32:76:1d:d5:cd:68:2e:b4:33:
cf:65:46:57:81:1b:4c:ac:e9:11:86:55:f7:97:15:9d:8b:fb:
57:87:87:15:55:b0:a5:ba:70:c4:cb:36:6a:3c:b7:e7:0c:0a:
3e:34:42:d0:b5:aa:b7:9f:16:ad:f8:16:a8:be:74:2c:f9:81:
b1:2d:b7:c6:3e:97:a0:1a:5b:dd:d8:0b:de:58:68:29:49:57:
b1:d9:f9:ab:7f:d1:ac:2d:4e:3c:cd:9d:e6:4b:8c:ce:dc:90:
f7:fd:5c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:30:36 2024 by rpki-client on console-fra.rpki-client.org