Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/b2aUKLbWISjBGGEOo6QDCAkIk0A.roa
File: b2aUKLbWISjBGGEOo6QDCAkIk0A.roa (raw, json)
Hash identifier: KDhxRFYUzuT5tJqrj4g4aBw2P5gEY/u/qvU+6GNxzyU=
Subject key identifier: 6F:66:94:28:B6:D6:21:28:C1:18:61:0E:A3:A4:03:08:09:08:93:40
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018CC8DEBB14E7821E4EE9D163DC108582A2
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/b2aUKLbWISjBGGEOo6QDCAkIk0A.roa
Signing time: Tue 02 Jan 2024 06:31:29 +0000
ROA not before: Tue 02 Jan 2024 06:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50204
IP address blocks: 91.197.236.0/22 maxlen: 24
195.214.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:bb:14:e7:82:1e:4e:e9:d1:63:dc:10:85:82:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jan 2 06:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f669428b6d62128c118610ea3a4030809089340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:4a:ff:ce:37:b6:31:db:5e:a3:37:2e:95:
bb:25:7a:ee:cc:71:0b:4c:37:76:54:b4:f8:8c:ec:
d6:c2:b9:56:72:79:70:92:31:5c:dd:5e:4e:0f:e2:
c2:ee:fe:9e:85:82:96:b4:46:37:f7:43:5b:7c:5c:
4f:88:a2:be:86:24:2a:3f:f9:56:5f:f4:a4:8f:0d:
9e:f7:ef:44:a7:72:d4:59:e9:30:ec:1e:8c:b6:7d:
05:b4:21:b1:84:3f:82:6a:a8:d7:61:e6:4f:34:57:
be:ff:91:69:0e:ce:8a:58:30:ef:74:5a:20:f9:ab:
8e:79:4c:22:90:8b:aa:17:23:6f:09:d8:4b:29:4b:
f0:cc:e2:54:14:ac:c0:87:fc:da:89:40:27:1d:51:
32:70:a4:cf:e0:a8:20:fa:17:c5:08:52:5a:93:92:
01:56:35:1c:00:32:f5:85:62:9a:65:48:a2:11:c8:
6b:8e:a0:75:20:43:63:cc:2a:54:00:60:0c:58:68:
45:16:4f:dd:9c:09:58:6f:6b:e1:04:57:bb:cb:e7:
f8:9f:ed:9a:8f:16:ef:05:b2:69:5c:8a:38:16:b3:
2e:c1:86:a9:28:51:cc:3b:e6:3a:43:5a:3a:87:9e:
eb:6a:73:40:b9:eb:ee:7c:d7:d4:e4:a3:53:41:29:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:66:94:28:B6:D6:21:28:C1:18:61:0E:A3:A4:03:08:09:08:93:40
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/b2aUKLbWISjBGGEOo6QDCAkIk0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.236.0/22
195.214.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:f1:eb:64:c5:70:f4:93:de:8c:53:82:6c:51:64:83:43:a9:
a5:33:ce:3f:db:10:7e:42:9b:05:50:df:f4:a6:84:84:21:f4:
d8:c6:47:9e:e4:f4:a1:7b:83:2f:3f:9b:cb:5e:99:9b:eb:6c:
2e:2a:bf:2a:49:14:b0:86:c7:81:4e:04:31:77:0a:40:27:5a:
bc:83:71:ef:86:1c:ea:aa:50:c2:18:59:4f:b4:9e:5a:60:d0:
5c:75:c6:a7:39:6c:d5:8e:77:44:4e:94:f9:7e:9e:18:a1:0f:
89:d6:05:a6:38:a3:a1:ee:c8:ec:99:91:24:6b:a9:c9:87:26:
c3:9c:56:2f:04:70:0e:36:b4:17:24:2f:75:a1:40:44:4a:36:
0b:9e:10:32:be:2c:5b:fa:7c:73:37:bf:59:88:3b:a3:05:5f:
ee:b4:14:c9:82:58:44:7e:10:8e:7e:61:78:4d:13:04:f3:d7:
38:50:ba:af:e8:fa:3b:63:f6:55:10:61:84:23:88:4e:c7:41:
c1:bc:84:6a:0f:1e:85:82:48:de:95:47:3a:00:3b:0f:85:4d:
27:f4:15:49:cc:16:6c:37:cc:79:40:a9:0a:66:1a:6f:9a:13:
75:9b:34:f1:ec:3b:e8:e0:5c:4a:21:31:d3:d3:18:8c:00:4f:
cf:37:38:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:19:11 2024 by rpki-client on console-fra.rpki-client.org