Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/gmBqK3Kel1oLrN4YGMJcb1cSnmc.roa
File: gmBqK3Kel1oLrN4YGMJcb1cSnmc.roa (raw, json)
Hash identifier: WUH+WD+6WOq6g3VtmKffDKwqYmvbI1C8K3xkG2tg+KE=
Subject key identifier: 82:60:6A:2B:72:9E:97:5A:0B:AC:DE:18:18:C2:5C:6F:57:12:9E:67
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 018CC5DC7EDFF13E88A190001A3582A31BD0
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/gmBqK3Kel1oLrN4YGMJcb1cSnmc.roa
Signing time: Mon 01 Jan 2024 16:30:11 +0000
ROA not before: Mon 01 Jan 2024 16:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199851
IP address blocks: 91.220.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:7e:df:f1:3e:88:a1:90:00:1a:35:82:a3:1b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Jan 1 16:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82606a2b729e975a0bacde1818c25c6f57129e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7d:13:ba:15:82:1c:52:2b:29:54:14:ff:ce:
85:a4:45:55:b5:e2:b1:e8:0c:b4:59:25:db:49:8e:
99:5e:b8:1a:4b:f9:3d:75:ac:cf:d9:e7:08:fc:4e:
00:cc:40:28:d7:c5:18:84:da:bd:38:45:ec:72:33:
a0:e6:b8:97:a0:ee:10:13:57:9d:dc:4c:e6:9b:22:
b7:59:8d:02:39:57:82:16:41:07:0b:3d:64:71:39:
54:1d:28:97:ec:7f:8f:6e:9c:1e:2d:d2:d0:5b:22:
1a:af:59:62:8e:92:1f:9d:5b:ae:e7:ae:0f:72:65:
1b:4a:59:c8:c8:66:81:98:76:d8:88:34:26:d7:5c:
7b:ad:5c:b9:35:f4:31:12:5e:d0:62:27:32:9b:16:
76:d6:be:ef:25:bf:34:de:a3:f6:f1:11:0b:da:e3:
5e:f7:63:6d:97:7f:2d:9e:a9:0f:b5:ce:fd:d3:e8:
e2:a8:91:f6:f2:33:cc:59:3e:bb:3d:bb:22:f3:2c:
9c:e6:4d:1f:93:ec:04:e7:df:18:5e:5b:8e:e5:0a:
96:c7:63:51:72:71:02:13:ec:e3:9c:47:20:c5:ea:
28:d2:58:75:e7:8c:52:61:d1:6a:17:6b:c4:24:39:
4f:d5:a0:52:09:ea:9f:d2:c1:77:0f:c8:41:7c:c6:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:60:6A:2B:72:9E:97:5A:0B:AC:DE:18:18:C2:5C:6F:57:12:9E:67
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/gmBqK3Kel1oLrN4YGMJcb1cSnmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:79:85:b0:b7:30:b2:b2:74:10:f4:8d:f8:20:3f:fc:ca:d5:
da:7b:cf:34:41:d1:dc:38:65:5a:d3:2c:5b:11:21:51:9f:1a:
50:ac:0b:f7:16:ff:8d:3d:a3:f4:11:42:42:8b:f5:e6:df:c8:
bd:91:4f:7e:5d:20:d3:4e:2b:dd:be:e3:ff:45:9b:c6:0b:43:
67:88:e5:b5:17:43:20:39:e6:c8:ae:b7:b5:2f:e0:dc:3d:03:
36:02:57:c7:68:f4:ba:2f:67:24:f6:90:bd:b7:a1:99:f0:13:
73:c7:c0:36:02:b2:65:76:f3:54:6a:f6:2a:12:9a:b1:af:45:
c4:b9:8f:64:0a:9c:c8:f3:02:05:e1:29:21:90:92:2a:bb:52:
6d:b5:c6:89:81:6e:e4:ba:e7:a0:51:a9:ec:3a:50:35:30:31:
6f:a5:82:db:a6:6c:79:24:52:bf:cb:f4:77:4f:46:22:b3:c0:
89:59:df:59:1b:df:6c:15:42:e2:e8:c3:c9:a0:77:87:73:c2:
33:77:1e:8f:b3:01:5c:25:26:c0:61:6f:68:cb:bd:d6:d2:c4:
90:3d:0d:ef:80:2b:34:ae:4d:9b:e2:83:75:f1:bc:52:12:81:
5a:1a:ba:01:05:db:f3:6f:9c:0c:d6:c4:f8:66:7d:1c:37:61:
1d:27:f1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:52:37 2024 by rpki-client on console-fra.rpki-client.org