Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/aLjkyAxMPisUuYCRxYnARfBfL0M.roa
File: aLjkyAxMPisUuYCRxYnARfBfL0M.roa (raw, json)
Hash identifier: 9pi6Ylk00/3KLSmCG+1iIYjFj9v4sRoKnrKayG5PyBM=
Subject key identifier: 68:B8:E4:C8:0C:4C:3E:2B:14:B9:80:91:C5:89:C0:45:F0:5F:2F:43
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 018CC9BBAD3EAD2C985DE1D5F3A37FE6A56B
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/aLjkyAxMPisUuYCRxYnARfBfL0M.roa
Signing time: Tue 02 Jan 2024 10:32:49 +0000
ROA not before: Tue 02 Jan 2024 10:32:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 91.236.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:ad:3e:ad:2c:98:5d:e1:d5:f3:a3:7f:e6:a5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Jan 2 10:32:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68b8e4c80c4c3e2b14b98091c589c045f05f2f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:6f:7d:19:d5:a8:cd:f2:cf:c3:de:70:da:
a5:9b:5c:a4:c7:43:b7:5d:9a:9e:3f:55:e9:77:32:
ff:61:78:c1:e2:6d:a3:cc:f0:1c:13:c4:33:26:e2:
8f:77:35:59:d7:b9:e0:1e:4b:fb:de:d0:91:35:38:
10:71:f6:d1:37:2e:b1:f0:40:cc:36:51:73:f7:d4:
11:46:de:92:aa:78:79:c1:fb:53:e5:20:8f:4f:03:
22:21:47:b3:5b:da:4d:11:50:85:94:13:a9:94:9f:
e2:3b:d9:cd:51:18:00:b3:2f:81:80:f3:e6:4d:19:
d3:9f:5a:68:6f:6f:cf:29:db:db:13:28:2d:bf:44:
28:72:35:28:5c:25:65:a1:70:ca:bc:55:2e:de:9b:
bc:ca:02:20:b3:f3:fc:8c:a6:7b:b2:ff:27:5e:8c:
e0:78:24:15:06:63:f7:08:38:20:8c:91:27:d0:f5:
43:58:67:43:11:03:a3:1c:8b:e9:c9:44:55:db:76:
72:e4:bd:3d:3b:a7:0b:61:57:40:6b:69:02:cc:e1:
44:22:b4:66:db:e6:39:98:b3:bd:8a:00:d5:e0:75:
b1:66:55:ac:de:bf:78:35:5d:be:45:b2:62:0b:47:
42:86:38:34:40:fe:8a:44:c8:08:fa:ea:48:94:d9:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B8:E4:C8:0C:4C:3E:2B:14:B9:80:91:C5:89:C0:45:F0:5F:2F:43
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/aLjkyAxMPisUuYCRxYnARfBfL0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.216.0/23
Signature Algorithm: sha256WithRSAEncryption
35:40:cd:47:08:54:1a:39:dd:48:a1:ea:aa:5f:c9:0e:97:bd:
ff:88:07:dd:b5:87:61:7c:a7:99:41:2a:d6:78:64:fd:84:d2:
4f:2a:46:f3:62:99:27:e8:2a:ba:cc:9d:d6:f5:bd:d9:9b:55:
61:4b:5f:ca:81:cf:3f:ce:a6:61:fc:91:50:77:b5:77:cb:9f:
05:eb:d1:89:64:17:8f:11:a7:9d:22:b0:4c:50:a2:b2:3b:78:
b2:66:64:4c:26:23:c6:30:cd:d8:8e:44:76:6f:91:f4:da:6b:
a8:c5:27:11:8d:a7:55:0b:cf:11:8f:d3:08:5a:a9:c1:de:17:
71:35:04:3d:3e:88:46:8f:84:b1:67:f4:2f:7c:ea:07:8f:7a:
66:5b:e8:b1:07:ec:af:67:46:77:d0:3d:9c:6b:f9:70:25:f3:
44:ff:2c:67:ec:60:af:66:5d:dd:21:89:12:3a:36:d4:a9:5e:
c2:1f:2c:1d:92:6c:0c:ff:d4:9b:b0:d7:b2:8d:6d:ce:c9:57:
79:54:93:49:9d:cf:ef:88:96:02:45:a6:7f:bd:9c:63:96:ab:
b3:9c:23:30:4d:4e:28:d0:31:8b:18:52:ad:03:9d:3f:8b:45:
2c:97:92:d0:4a:2e:9e:a4:43:8c:14:f4:de:12:70:af:8e:20:
07:84:63:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:17:09 2024 by rpki-client on console-ams.rpki-client.org