Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Av7LHvLCYBH6jbvEx8bu9J27FhY.roa
File: Av7LHvLCYBH6jbvEx8bu9J27FhY.roa (raw, json)
Hash identifier: fQaYbtCrFzMR8xZwIJmBpyBRDjV59zudKDYyk+wEeWc=
Subject key identifier: 02:FE:CB:1E:F2:C2:60:11:FA:8D:BB:C4:C7:C6:EE:F4:9D:BB:16:16
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018DF6B2C9AB6ECB61DD48D864A1B0EB3DBB
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Av7LHvLCYBH6jbvEx8bu9J27FhY.roa
Signing time: Thu 29 Feb 2024 21:08:48 +0000
ROA not before: Thu 29 Feb 2024 21:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216183
IP address blocks: 91.186.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f6:b2:c9:ab:6e:cb:61:dd:48:d8:64:a1:b0:eb:3d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 29 21:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02fecb1ef2c26011fa8dbbc4c7c6eef49dbb1616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:30:16:ab:0a:40:4e:e4:11:67:90:fa:47:60:
01:a1:12:21:69:08:12:43:0b:c5:8d:11:31:45:fb:
0b:da:9a:c4:54:82:40:f5:31:34:90:b0:6f:d6:ee:
d8:2f:4d:c8:f5:d1:8b:f2:0f:6b:7a:b1:73:59:be:
b9:bb:c0:40:15:17:9c:a7:06:c0:d1:00:de:f4:7e:
a1:ce:ca:8e:92:26:dd:9a:69:ee:a3:0b:95:7a:a3:
bc:5c:5d:d8:40:2c:d5:ee:41:c6:9b:c2:ff:3b:6c:
08:be:70:88:fe:19:c5:74:b6:03:fd:c7:ff:96:0c:
3b:a6:22:45:c3:dd:31:de:4a:d7:41:27:ab:aa:88:
7e:9c:6d:ee:fa:91:2e:59:b3:ca:cd:11:ac:f2:8b:
38:66:e6:69:ea:9d:eb:e2:d0:47:77:2c:cc:db:a8:
24:89:43:e6:be:db:97:1f:df:4b:68:1c:d6:d2:d0:
6a:1e:c2:c3:ff:a3:b9:1f:c8:7e:20:b8:ff:38:16:
49:21:1e:43:f9:0a:f0:76:85:2f:62:e4:70:3c:30:
20:1c:7a:6a:f2:c7:d8:9e:c4:d5:e1:e8:e7:c8:b2:
a1:c4:82:28:d4:6f:18:87:70:f1:2d:bb:e0:a8:a1:
bf:79:91:8c:84:12:eb:0d:19:46:96:82:8e:6e:9d:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FE:CB:1E:F2:C2:60:11:FA:8D:BB:C4:C7:C6:EE:F4:9D:BB:16:16
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Av7LHvLCYBH6jbvEx8bu9J27FhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.218.0/23
Signature Algorithm: sha256WithRSAEncryption
11:33:9c:21:86:69:da:2d:13:c1:81:77:79:87:70:cd:10:ab:
88:36:0b:fe:d2:7d:e2:82:b8:18:80:e6:4a:83:07:7a:61:ef:
27:4e:62:be:fb:1d:9b:5b:85:ff:29:40:54:3b:12:ac:dd:6b:
da:9e:88:ef:41:19:2a:b3:cf:73:a1:b7:18:30:2b:3e:aa:4c:
96:23:73:82:e3:3c:3b:bc:b5:8e:c2:c7:1f:60:77:0e:ec:96:
c8:22:f0:b9:7f:d6:b8:bc:6a:e3:ba:f2:80:51:5c:d3:c2:59:
26:a4:01:50:b8:4a:c7:af:f3:8d:b5:94:67:13:f4:46:35:4c:
79:e1:d7:0c:f7:a4:6f:61:e9:9b:73:f8:82:29:7c:bd:df:af:
16:65:6d:c8:9f:6f:bf:42:a9:56:93:42:d2:1f:c7:10:b5:6b:
79:36:83:49:b1:f5:2b:cc:f5:90:63:0d:50:19:50:cb:ca:20:
6b:25:b6:87:79:9c:0a:97:5d:32:eb:0c:b6:6a:84:c1:12:a8:
ce:73:a9:f4:7b:a1:fc:8b:a4:98:8f:5e:3a:7e:b6:d9:7e:41:
bf:6b:bd:a1:b9:29:dc:34:ba:c4:a8:1a:43:b7:f0:c1:0e:67:
11:40:68:55:17:39:35:3f:22:97:9a:18:4a:b5:67:61:6e:dd:
8c:56:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:18:21 2024 by rpki-client on console-ams.rpki-client.org