Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/rHHQC0PQAv6t8em46GbZ6W7-lt4.roa
File: rHHQC0PQAv6t8em46GbZ6W7-lt4.roa (raw, json)
Hash identifier: cSziWccW2UbAX78JJMrUlHsKL5/sRyZx5p18j4WNhSo=
Subject key identifier: AC:71:D0:0B:43:D0:02:FE:AD:F1:E9:B8:E8:66:D9:E9:6E:FE:96:DE
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 018CC56DF943A5E599B1C54EB8DD660C6685
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/rHHQC0PQAv6t8em46GbZ6W7-lt4.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42244
IP address blocks: 91.189.82.0/24 maxlen: 24
91.189.84.0/23 maxlen: 23
91.189.80.0/23 maxlen: 23
178.218.210.0/23 maxlen: 23
91.189.86.0/23 maxlen: 23
178.218.208.0/23 maxlen: 23
178.218.212.0/22 maxlen: 22
178.218.218.0/24 maxlen: 24
178.218.216.0/23 maxlen: 23
178.218.222.0/23 maxlen: 23
178.218.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f9:43:a5:e5:99:b1:c5:4e:b8:dd:66:0c:66:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac71d00b43d002feadf1e9b8e866d9e96efe96de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:21:85:80:b4:33:b3:56:26:7b:f7:0f:c4:
ff:34:57:f3:03:e8:87:67:62:02:e8:46:16:7a:c9:
1b:91:d7:ac:6e:49:02:27:36:72:83:fa:b0:53:51:
5e:bd:3a:fb:04:f9:e3:22:86:71:4e:17:e9:ef:00:
fb:6f:e8:33:89:8c:a8:b5:67:25:20:ed:9a:44:a1:
8a:76:16:c7:0b:c5:ac:10:ed:32:13:25:de:c6:30:
f3:94:98:61:99:31:20:08:92:54:5c:b0:be:72:28:
f6:0f:f7:9f:d5:63:e8:6d:4a:18:89:31:b1:1d:e1:
8e:b4:89:a9:a0:32:2a:bd:be:6a:ad:61:7c:20:86:
9c:8e:20:37:38:99:5d:11:71:fc:ea:f6:f9:06:df:
96:2e:ed:10:e1:7e:1c:a7:b1:b7:0a:96:72:7a:cb:
ea:a2:5b:0c:c2:12:a8:f1:61:eb:11:1f:0b:97:ad:
c4:a6:fe:50:60:9d:a9:ba:25:f4:95:fe:c2:94:68:
22:bb:42:54:1b:0d:86:10:92:44:bf:4c:d3:2a:7f:
c8:74:6c:ba:8e:7d:9d:6b:b7:a4:13:90:dc:79:4e:
28:af:9f:8e:dc:20:a9:fd:04:8a:30:28:60:90:43:
31:7e:a3:7f:82:f6:ca:e7:2c:a8:60:02:dd:ea:81:
e4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:71:D0:0B:43:D0:02:FE:AD:F1:E9:B8:E8:66:D9:E9:6E:FE:96:DE
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/rHHQC0PQAv6t8em46GbZ6W7-lt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.80.0-91.189.82.255
91.189.84.0/22
178.218.208.0-178.218.218.255
178.218.220.0/22
Signature Algorithm: sha256WithRSAEncryption
34:d8:50:12:be:6a:cf:1f:83:1e:2a:8e:b0:5d:be:f1:2f:0f:
37:c5:66:9a:8a:d5:38:54:5f:e8:a3:d8:65:24:c1:75:d6:57:
ed:20:07:02:38:71:d1:f5:b4:fd:0c:04:8a:e4:b4:d9:4e:db:
b8:e1:9e:91:d4:7d:a5:7d:58:c4:fe:77:44:eb:a7:f0:48:c6:
1e:44:bf:d4:af:71:92:a7:0b:c8:66:4f:61:b3:22:f4:23:2f:
a5:5d:02:b4:f1:e1:13:e4:f3:3e:ea:14:59:65:af:51:e7:22:
3f:61:ba:f8:96:6d:8e:f9:68:44:ef:2c:7a:c7:c4:48:65:10:
fa:2f:d8:e6:01:61:1e:e1:85:8e:7d:b7:59:08:ff:4f:d6:40:
11:a5:c0:55:ae:17:cd:62:f2:5c:0b:8a:27:0a:00:da:23:a3:
a3:43:5f:36:69:aa:d2:dc:b8:e2:0d:2e:c1:65:36:6e:c9:90:
b4:c3:52:10:62:25:74:f4:ce:1b:b9:7d:55:c7:83:7e:43:5f:
5e:bd:d7:78:69:4e:f7:45:d6:2f:48:de:ea:bc:c5:80:49:1f:
b3:13:15:64:11:e1:7a:29:5e:73:9a:78:2f:18:c3:91:da:f4:
48:9d:26:79:34:9c:97:b1:93:29:ef:07:a8:72:a3:97:ea:47:
36:32:7b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:42:31 2024 by rpki-client on console-fra.rpki-client.org