Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/ks6QKpubsw0WwceKutFI1bEnnJ0.roa
File: ks6QKpubsw0WwceKutFI1bEnnJ0.roa (raw, json)
Hash identifier: qSmT0U60trdFL6qfVbb+Aww5YObQVulxjFOf9eYHZG8=
Subject key identifier: 92:CE:90:2A:9B:9B:B3:0D:16:C1:C7:8A:BA:D1:48:D5:B1:27:9C:9D
Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Certificate serial: 018CC6B80636E8AE29CE8B805BE27E6C6CB3
Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/ks6QKpubsw0WwceKutFI1bEnnJ0.roa
Signing time: Mon 01 Jan 2024 20:29:58 +0000
ROA not before: Mon 01 Jan 2024 20:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59452
IP address blocks: 91.241.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:06:36:e8:ae:29:ce:8b:80:5b:e2:7e:6c:6c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Validity
Not Before: Jan 1 20:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92ce902a9b9bb30d16c1c78abad148d5b1279c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:a6:1b:3c:1a:dd:e2:94:ed:69:d5:f7:7f:
b9:0a:bc:75:b1:c6:7c:c0:a0:56:48:44:47:13:4c:
61:33:b6:85:51:5a:d7:6d:76:26:c8:11:94:53:82:
d1:98:81:5c:c6:c0:1c:bc:b7:e9:a1:45:32:34:34:
32:63:1d:23:9c:74:21:9b:dd:79:e9:fb:ed:85:f2:
aa:59:74:ba:24:41:9a:a0:d5:ca:af:48:97:3c:05:
f3:5a:d3:d6:24:76:29:52:b5:7d:b1:8f:e6:fc:ee:
74:65:bc:41:92:36:86:89:66:a5:12:6e:79:9a:e5:
da:ae:9b:3b:4b:f9:f9:a2:ff:cc:b4:95:8d:93:e9:
26:18:18:91:b3:62:a1:62:f9:8d:f1:a2:a9:12:fe:
96:2e:cc:21:7d:0d:e2:bd:13:53:1a:8b:5f:ad:2a:
4e:45:1e:0d:90:91:c4:d1:08:36:5e:4a:60:ee:15:
71:f2:6a:11:69:ac:a3:3c:b6:47:51:37:15:b5:ce:
94:52:31:86:f7:65:da:35:77:49:a8:60:e7:8c:4c:
6f:60:73:64:24:5c:dc:8a:20:f1:b2:1a:75:b3:dc:
f4:02:a5:e7:79:fc:82:88:31:80:68:c1:48:d8:e5:
e5:53:fc:e2:27:c5:6b:f8:71:41:83:7c:fd:c2:e7:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CE:90:2A:9B:9B:B3:0D:16:C1:C7:8A:BA:D1:48:D5:B1:27:9C:9D
X509v3 Authority Key Identifier:
keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/ks6QKpubsw0WwceKutFI1bEnnJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:82:e4:52:f2:52:25:ce:3a:5d:b7:7c:01:1f:1f:03:b6:3d:
49:34:d4:db:a1:f4:9f:17:55:bd:d8:f8:5a:ec:f2:d4:c9:ac:
6b:8b:42:8a:36:d6:d8:d6:8d:e6:a5:79:d6:43:80:ac:ad:36:
dd:45:94:3e:06:64:53:0e:fe:ca:d9:0f:6d:c1:ad:5a:da:d6:
72:62:20:55:32:ee:ac:8e:ca:40:ab:e6:96:7d:9c:93:a9:0b:
2c:8e:22:e0:20:7b:11:df:ea:1d:1d:bf:58:32:a9:80:ce:5f:
69:59:84:02:68:9e:5f:9e:d0:b0:09:2d:8e:14:91:de:d3:14:
f5:79:f1:57:e5:cc:cb:3f:b2:0e:9e:89:3b:ca:25:d5:75:5b:
ef:e5:75:92:cd:16:b0:cc:ed:58:cc:04:22:e2:b3:de:f0:80:
b7:ee:a3:9d:37:d3:ff:85:e0:a1:68:b4:b0:81:29:c2:0b:30:
f6:b4:f1:f5:57:c7:f6:20:e9:b4:d3:74:33:a2:f1:cd:c2:99:
e1:6e:68:67:d5:46:b4:5b:fb:a6:dc:dc:c5:f1:50:7b:12:23:
c7:34:31:7e:87:14:07:b5:3d:fb:24:26:d0:c1:99:cd:01:9e:
56:3a:7a:52:5a:d3:69:1d:fe:0b:dc:20:27:08:2d:2a:e5:3c:
68:0c:1c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:38:28 2024 by rpki-client on console-ams.rpki-client.org