Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/9cHarc6Yj8mBOdxObQCm_KlU9RE.roa
File: 9cHarc6Yj8mBOdxObQCm_KlU9RE.roa (raw, json)
Hash identifier: xonWpNbX4IHYQg5oNLZFcF63tyuWI+Qyy9oyr/k/mos=
Subject key identifier: F5:C1:DA:AD:CE:98:8F:C9:81:39:DC:4E:6D:00:A6:FC:A9:54:F5:11
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 018CCA29D328BBC68F207B468725DB7343AC
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/9cHarc6Yj8mBOdxObQCm_KlU9RE.roa
Signing time: Tue 02 Jan 2024 12:33:07 +0000
ROA not before: Tue 02 Jan 2024 12:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57944
IP address blocks: 91.236.250.0/24 maxlen: 24
91.236.248.0/24 maxlen: 24
91.236.248.0/22 maxlen: 24
91.236.251.0/24 maxlen: 24
2001:67c:440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 13:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d3:28:bb:c6:8f:20:7b:46:87:25:db:73:43:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Jan 2 12:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5c1daadce988fc98139dc4e6d00a6fca954f511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:83:c5:bf:42:88:54:b1:e7:5a:c4:67:74:46:
2d:15:69:e2:fd:84:51:ee:4e:5c:72:5a:44:0b:86:
fa:7e:53:85:6e:cb:a4:27:8e:69:48:46:55:6b:24:
3c:fb:95:7a:0c:4b:26:a9:18:de:6f:f3:6f:50:cc:
89:d1:70:7a:0c:2e:c9:0f:ab:d2:cd:a0:d0:92:60:
62:e9:9e:92:08:57:4c:6c:86:bc:14:0a:52:9c:42:
66:56:92:e3:bb:7c:86:8e:ca:a2:48:c3:06:e6:be:
cd:95:f7:f1:a9:aa:b8:b2:61:01:0d:aa:fc:7e:83:
9f:20:cd:91:3b:6f:15:29:4a:c4:b0:c6:c4:4b:f6:
15:1d:fb:e8:90:9d:90:3f:61:52:af:0c:3d:39:73:
2f:b6:dc:2b:86:fd:d3:a8:51:83:a9:74:9e:70:a7:
c3:f3:b8:89:ca:e2:d8:3d:1f:da:8f:da:26:cd:45:
fc:e6:0c:54:80:2f:96:e7:5a:f8:d2:77:30:f1:b1:
35:6b:22:59:84:63:1e:fb:c5:3d:72:b5:69:9d:3d:
b4:d9:74:5b:11:86:80:0c:83:d2:4f:01:f4:4e:da:
bd:ae:d3:03:ff:ff:04:dd:be:7d:15:c1:e1:39:74:
e3:05:be:2a:f3:f9:6e:34:99:64:96:e5:29:1e:60:
3e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C1:DA:AD:CE:98:8F:C9:81:39:DC:4E:6D:00:A6:FC:A9:54:F5:11
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/9cHarc6Yj8mBOdxObQCm_KlU9RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.248.0/22
IPv6:
2001:67c:440::/48
Signature Algorithm: sha256WithRSAEncryption
b5:ba:d6:fd:5b:81:3a:4f:02:dc:66:1f:be:9b:c8:78:f6:a7:
4e:47:68:a3:75:2d:4e:f6:65:2b:e3:46:76:08:5a:60:c6:36:
e3:ce:89:8b:44:04:3d:8a:26:b3:78:fc:1c:51:11:c7:fa:2d:
b5:8b:58:2b:48:50:02:94:8c:a7:13:35:61:0e:a4:3e:d5:64:
79:6e:c3:c0:a9:c5:27:43:b4:d9:6b:28:6b:f7:e1:b2:ad:2f:
73:d6:5c:40:7d:dd:e7:3f:5f:1f:2b:28:bd:78:84:f3:80:45:
cb:4b:1e:58:56:bb:56:9a:2a:00:78:1f:4a:92:ef:86:b3:7d:
7a:2a:a0:84:9d:e6:27:5f:76:34:59:5a:b3:f3:2b:4d:20:e4:
13:e1:df:e4:24:c3:b5:e1:c7:6d:b4:ac:79:cc:24:e7:98:d9:
fc:74:5b:17:2f:75:a8:ba:04:88:b7:23:0f:80:97:43:43:56:
65:13:ee:eb:02:3d:f7:5d:8c:46:fe:e3:e3:90:f8:59:75:97:
70:be:b1:45:d3:8d:0e:00:33:d8:9c:bf:0f:09:e4:20:72:25:
7b:b6:b3:a8:ff:0f:6d:9e:db:a1:0e:72:34:06:e6:5d:3f:e1:
96:f1:c0:52:b5:da:4b:c1:8e:73:f0:1f:d2:3b:be:05:a5:e1:
0a:9e:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:52:59 2024 by rpki-client on console-ams.rpki-client.org