Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/yNyynBqiRojn-3sX8A0Hah5is7U.roa
File: yNyynBqiRojn-3sX8A0Hah5is7U.roa (raw, json)
Hash identifier: pUlJ14VCe8gZtQm7099OGR0YiynrmFoMFom3k600vIg=
Subject key identifier: C8:DC:B2:9C:1A:A2:46:88:E7:FB:7B:17:F0:0D:07:6A:1E:62:B3:B5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 018F727908C7E5C9F6081C5E4E8BC6552820
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/yNyynBqiRojn-3sX8A0Hah5is7U.roa
Signing time: Mon 13 May 2024 15:01:25 +0000
ROA not before: Mon 13 May 2024 15:01:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 91.208.162.0/24 maxlen: 24
91.208.184.0/24 maxlen: 24
91.208.197.0/24 maxlen: 24
91.208.206.0/24 maxlen: 24
2a0f:5f40::/29 maxlen: 48
2a0f:5f40::/48 maxlen: 48
2a0f:5f40:1::/48 maxlen: 48
2a0f:5f40:1000::/48 maxlen: 48
2a0f:5f47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:79:08:c7:e5:c9:f6:08:1c:5e:4e:8b:c6:55:28:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: May 13 15:01:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8dcb29c1aa24688e7fb7b17f00d076a1e62b3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:98:4f:3b:af:65:f3:c3:2d:a7:1b:15:73:
de:0c:73:f3:90:92:81:c5:85:82:21:83:34:3f:3a:
7f:62:05:37:89:08:33:fb:4d:7d:08:5e:2b:44:10:
e7:ef:45:02:bf:5b:1e:77:20:ec:c0:d4:d3:ec:04:
27:26:a9:79:82:23:94:ec:ed:f3:00:e0:ae:38:90:
f1:57:40:ce:ba:34:17:bb:b9:b6:91:da:33:d7:4a:
22:5d:31:d7:f0:3f:00:1b:51:94:82:63:ae:31:1a:
5b:2f:e3:47:5f:b6:a0:40:9e:41:ed:a1:a1:33:b9:
99:d3:15:ad:c9:96:da:47:5b:32:e2:d5:17:51:ec:
3f:82:29:78:30:a3:71:2d:be:9c:77:2f:99:d9:93:
b9:ee:f2:69:98:3c:7e:73:38:0b:59:51:d1:19:b7:
f5:91:52:66:3d:63:5a:5c:cb:3e:1e:5b:95:ed:ef:
04:69:14:be:88:55:4f:21:23:98:cf:86:cc:b2:9a:
12:d6:e7:6e:e7:5b:5a:3f:d5:f1:e3:9a:5d:05:94:
18:79:91:ae:8f:68:7e:c5:23:e1:93:04:25:a9:3b:
2b:50:57:5f:00:81:d4:8a:65:e3:53:ac:e8:35:8f:
9f:4c:7b:73:83:1f:da:b1:b4:aa:3a:b0:54:6c:4f:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DC:B2:9C:1A:A2:46:88:E7:FB:7B:17:F0:0D:07:6A:1E:62:B3:B5
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/yNyynBqiRojn-3sX8A0Hah5is7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.162.0/24
91.208.184.0/24
91.208.197.0/24
91.208.206.0/24
IPv6:
2a0f:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
8b:a3:9b:b8:81:a2:9f:71:db:10:17:fc:c9:4d:35:89:d7:99:
6a:b5:db:84:3f:3a:e6:68:ce:82:2c:c8:06:5b:ce:f5:32:47:
2f:8b:cc:df:ee:d6:7a:b0:72:e3:8c:3d:63:1d:a6:02:73:a7:
67:1c:44:87:8d:a7:ed:4e:56:72:a1:b7:28:2e:ce:e9:64:7d:
c8:bf:32:a5:f2:51:4d:8d:c8:25:5d:d1:de:02:e6:12:26:a3:
f8:f7:3e:f5:c8:4d:a8:4b:74:d5:d9:ae:26:ab:63:ed:04:dc:
56:a9:ee:55:92:79:c9:d7:b5:0e:88:fe:c6:8d:b3:dd:ee:80:
4f:b1:2e:a8:1a:08:1e:00:bb:44:c7:b6:d5:13:98:83:14:79:
08:6f:a0:a2:e3:af:5e:89:eb:c0:d3:36:75:7b:fd:9e:5c:8b:
fa:42:b0:03:9f:2e:f4:ed:3f:4a:34:f7:4d:3d:ca:74:82:5d:
d8:06:29:8d:d2:84:20:16:7c:38:d8:22:1a:3b:d9:d1:07:90:
eb:a0:b5:29:4f:ec:53:bc:56:9f:e3:bb:24:9a:2f:0c:44:48:
21:c7:84:4d:d9:96:ad:08:50:a6:57:e5:4b:56:c3:42:24:1b:
d2:c6:1a:da:87:27:f6:1a:b7:3e:d6:74:50:b3:7c:8f:62:ff:
ac:5a:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:40:35 2024 by rpki-client on console-fra.rpki-client.org