Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/jXeVqP-xdJ1nPXtypgAoZ8PXf5I.roa
File: jXeVqP-xdJ1nPXtypgAoZ8PXf5I.roa (raw, json)
Hash identifier: kMSy/F9ojBx05Zej19pWd652CTYa37v0YxcPGq9aA0A=
Subject key identifier: 8D:77:95:A8:FF:B1:74:9D:67:3D:7B:72:A6:00:28:67:C3:D7:7F:92
Certificate issuer: /CN=b1b201363ccc556bec88702569d8d381a0e89566
Certificate serial: 018CC7955EF00CB82ACB337A22528AC6D8E1
Authority key identifier: B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/jXeVqP-xdJ1nPXtypgAoZ8PXf5I.roa
Signing time: Tue 02 Jan 2024 00:31:44 +0000
ROA not before: Tue 02 Jan 2024 00:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50945
IP address blocks: 91.216.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5e:f0:0c:b8:2a:cb:33:7a:22:52:8a:c6:d8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b201363ccc556bec88702569d8d381a0e89566
Validity
Not Before: Jan 2 00:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d7795a8ffb1749d673d7b72a6002867c3d77f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:c8:28:1b:94:d6:b8:2d:b8:3c:37:7f:58:
76:09:a8:f3:b3:06:d8:eb:ea:c6:d2:80:34:bf:84:
4b:59:e9:99:46:8a:c0:b5:c7:fe:59:ad:1e:17:a8:
79:5a:88:17:95:d9:11:80:6b:b5:a7:ae:3f:7e:f8:
21:c6:21:91:d7:57:e6:8c:cd:8e:2b:13:5a:7f:a2:
28:fe:58:6e:52:12:11:40:3a:d3:06:68:12:06:7c:
3e:70:0b:1a:d0:29:6d:f9:62:c7:ef:19:dc:57:de:
a2:f9:a8:22:dd:4d:3e:66:69:35:3c:75:bd:de:e9:
2f:1f:3d:fc:4e:40:28:f1:ee:aa:6b:37:16:dc:74:
c6:27:71:1c:87:22:92:bb:7e:bd:74:87:e1:c0:1d:
ed:b6:1a:ca:11:6b:c9:a8:28:78:06:91:18:22:68:
57:9a:22:15:74:74:25:cb:7b:74:8f:91:23:23:a1:
b0:5e:26:af:ec:49:83:ef:a6:51:37:b2:ce:48:80:
5e:91:27:a6:81:19:66:11:22:33:b8:6d:ed:55:58:
00:e8:e8:9b:a3:85:59:ae:47:e3:d3:d6:63:ad:e5:
ce:57:a7:3d:e4:ec:e4:1b:7f:f5:3c:3b:dc:f7:ca:
76:5a:4e:78:06:05:9c:6e:bf:24:75:c3:bf:0e:6e:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:77:95:A8:FF:B1:74:9D:67:3D:7B:72:A6:00:28:67:C3:D7:7F:92
X509v3 Authority Key Identifier:
keyid:B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/jXeVqP-xdJ1nPXtypgAoZ8PXf5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.52.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3c:70:57:6a:06:d6:f6:92:81:43:5b:96:83:30:52:91:42:
7e:ba:d6:de:d2:d6:b6:54:5d:c5:42:b2:af:de:d6:70:02:87:
79:a0:33:4e:03:89:26:a6:ef:be:7f:6f:4b:8a:2a:26:86:a4:
e9:af:b9:2a:ed:95:85:73:d6:ec:2d:62:97:cd:fd:6d:36:44:
aa:c8:f6:41:73:97:b4:81:96:e0:00:92:10:b6:3e:de:7f:d5:
15:44:82:6f:35:e8:77:86:ed:fc:ad:7c:23:84:ba:03:6d:be:
ea:26:9e:73:f5:06:20:50:1a:2c:bd:97:da:e3:17:65:c9:2f:
3a:56:1d:47:ff:c2:44:97:19:73:ee:bc:18:fd:5f:cd:d9:de:
72:26:6b:5f:e5:95:95:d2:2c:10:40:b3:d2:db:69:0b:4d:5d:
00:f7:3b:31:49:83:1e:c2:69:c1:ac:67:95:bd:dc:37:42:b0:
bc:de:3c:ee:e9:5c:28:d7:6b:b3:75:e2:3c:4c:c9:b2:b2:56:
24:5b:96:35:ef:ca:db:dc:1e:1b:81:45:41:19:00:c6:27:32:
c5:d8:37:0e:19:6d:65:76:ea:f4:07:49:81:e9:41:8b:55:d9:
cd:0e:e2:b9:8b:0c:33:94:1e:e9:cd:e9:07:e7:6f:50:b9:69:
f1:ef:32:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:34 2024 by rpki-client on console-ams.rpki-client.org