Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/db6lfWJK50CQ5jblq3ccptSf-F4.roa
File: db6lfWJK50CQ5jblq3ccptSf-F4.roa (raw, json)
Hash identifier: e5sO2g1BnK/ZLh9MJbSGjnaRlXeKpy8xiuTfZTWOjlY=
Subject key identifier: 75:BE:A5:7D:62:4A:E7:40:90:E6:36:E5:AB:77:1C:A6:D4:9F:F8:5E
Certificate issuer: /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial: 018CC3B723D29CC62B85DDF24F6E788D50AE
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/db6lfWJK50CQ5jblq3ccptSf-F4.roa
Signing time: Mon 01 Jan 2024 06:30:08 +0000
ROA not before: Mon 01 Jan 2024 06:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200909
IP address blocks: 91.202.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:23:d2:9c:c6:2b:85:dd:f2:4f:6e:78:8d:50:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
Validity
Not Before: Jan 1 06:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75bea57d624ae74090e636e5ab771ca6d49ff85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:28:06:59:cb:d4:36:60:c6:bb:10:a0:f4:
ca:6b:9e:cf:3e:c2:6b:0c:e4:78:5b:e9:ef:6d:71:
7f:b2:3e:af:1d:ca:c1:5d:ac:40:ef:a7:5b:38:3d:
ea:78:14:66:40:42:2e:dd:00:1b:84:dc:f8:f1:22:
73:6d:78:91:eb:f0:67:e6:20:73:cc:20:23:dd:92:
e3:1e:dd:e6:ec:0f:d8:d2:95:82:b6:f8:21:f6:65:
c0:eb:04:e1:bb:08:7b:cb:b5:96:02:e9:2e:cc:90:
72:05:af:17:16:22:7d:24:88:c2:bc:50:f2:fd:d6:
11:be:a9:53:8d:c7:e8:9f:f2:94:19:8c:fc:9b:d9:
ac:40:16:42:5c:62:31:88:19:ad:64:89:b3:bc:83:
18:3c:e3:ce:b2:97:e3:75:60:dc:b7:ee:11:2b:f9:
75:46:46:6b:09:27:81:14:10:1d:2b:86:52:b7:51:
d1:6e:86:58:27:ce:c4:d9:ac:fd:5a:3e:9c:c9:c2:
6e:38:07:bd:e3:24:f7:5b:6b:fe:36:b5:76:b1:62:
b5:9a:d7:db:61:06:92:02:0e:ed:90:43:d3:74:36:
25:ca:8f:5d:89:53:dc:4d:53:07:4c:13:ba:5a:00:
0b:0d:56:a8:7a:1d:7d:9b:91:fa:0f:65:34:f1:ba:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BE:A5:7D:62:4A:E7:40:90:E6:36:E5:AB:77:1C:A6:D4:9F:F8:5E
X509v3 Authority Key Identifier:
keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/db6lfWJK50CQ5jblq3ccptSf-F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:c9:7d:cf:5b:34:de:f8:a6:41:9a:ad:de:85:7a:79:13:0d:
91:7d:2e:0c:a0:4b:e5:92:38:e4:9d:4a:ec:40:f6:5a:de:4e:
dc:3f:57:4d:26:21:e9:cb:c4:ed:f1:5e:75:03:89:a1:ee:27:
c2:ef:70:c2:d8:d1:cf:5c:51:63:44:74:86:14:aa:63:32:c0:
64:68:a9:51:da:39:5b:6a:2b:22:21:8b:48:e2:8b:e7:a1:81:
15:46:0c:76:e2:40:3a:b7:17:b4:79:4e:2c:4e:ac:72:84:3d:
38:7b:56:f7:5a:6e:d8:22:49:2a:53:17:98:a6:18:73:31:77:
b6:fa:4e:e3:33:7a:ea:39:34:b0:e9:56:25:6c:b6:48:10:8b:
8f:a8:58:e8:7c:eb:92:b3:2c:a5:a5:9b:eb:60:eb:c8:1e:15:
38:c3:6d:db:57:92:3c:a7:55:23:31:63:6e:22:6c:eb:27:d1:
51:a4:1c:ae:f0:77:ee:8d:5c:4b:4f:49:53:2e:12:18:02:04:
2d:5e:76:8a:e9:83:52:91:e4:a0:97:fc:48:9f:48:2c:94:33:
b5:4c:2d:15:5b:94:79:86:ea:da:c3:4b:c6:2b:61:15:f1:69:
f9:7d:e6:d4:c4:59:f0:b5:b2:a7:70:61:62:00:44:b5:77:b5:
f6:fb:db:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:01:22 2024 by rpki-client on console-fra.rpki-client.org