Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/8mgyKL5JdoezY5GwhUoH5TtVQ6Y.roa
File: 8mgyKL5JdoezY5GwhUoH5TtVQ6Y.roa (raw, json)
Hash identifier: rXB6GN58t8t0MO4+LXQp+0ETWMNh+LdAWiBythcI/iw=
Subject key identifier: F2:68:32:28:BE:49:76:87:B3:63:91:B0:85:4A:07:E5:3B:55:43:A6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 018D4C435D294480A114CEB83B725E64E338
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/8mgyKL5JdoezY5GwhUoH5TtVQ6Y.roa
Signing time: Sat 27 Jan 2024 18:51:39 +0000
ROA not before: Sat 27 Jan 2024 18:51:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215882
IP address blocks: 91.219.23.0/24 maxlen: 24
91.219.23.32/27 maxlen: 27
146.19.59.0/24 maxlen: 24
146.19.59.0/25 maxlen: 25
146.19.59.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4c:43:5d:29:44:80:a1:14:ce:b8:3b:72:5e:64:e3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Jan 27 18:51:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2683228be497687b36391b0854a07e53b5543a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:97:96:d2:a0:28:05:26:67:73:2a:95:2a:
50:61:9b:82:47:fb:b0:1f:f1:31:aa:a7:01:b8:49:
6b:80:75:e7:82:23:9f:c4:12:af:d6:60:fd:99:5c:
76:f8:e8:f9:29:f8:73:9b:16:66:2f:22:4e:c0:2d:
91:8f:f2:95:6a:28:55:bb:ed:ff:57:ae:2b:11:6a:
a5:c9:c2:25:ed:54:8d:be:c9:ef:0a:24:29:a1:3d:
94:38:01:df:24:9b:6f:7f:eb:dd:fa:ae:36:c7:70:
ac:74:d2:60:bd:84:6b:ef:5e:10:ed:65:5d:09:55:
02:74:b6:20:29:df:fe:6a:ff:be:50:44:85:31:90:
24:14:86:dd:61:3c:2d:7b:ef:48:9b:c7:74:bb:eb:
67:db:37:9e:c5:5b:96:fc:70:af:4f:b5:2b:a8:01:
31:e1:92:f9:b5:fb:b9:81:04:5d:59:ba:82:de:be:
57:55:c1:b1:ea:00:c3:06:da:38:fc:65:40:41:15:
68:e7:f1:72:60:42:aa:89:ac:26:13:6a:13:bf:57:
c8:88:6e:43:3a:9c:1f:35:b7:f8:2d:05:8e:8f:e2:
6d:62:ec:b1:99:3b:ef:66:27:d7:36:99:45:75:07:
e9:b9:d0:24:44:2e:b5:31:6d:b2:4c:d3:5a:dc:38:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:68:32:28:BE:49:76:87:B3:63:91:B0:85:4A:07:E5:3B:55:43:A6
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/8mgyKL5JdoezY5GwhUoH5TtVQ6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.23.0/24
146.19.59.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8a:b5:6e:54:fd:86:de:92:0d:af:23:48:cd:80:25:70:26:
1c:2c:62:81:07:0d:b6:f4:e2:e1:db:a9:ef:9a:35:98:86:73:
cd:b0:1c:65:aa:33:b3:ca:90:7f:da:ca:52:21:b3:67:60:3f:
f4:ca:72:42:5b:0d:55:24:55:88:38:a6:27:df:4b:14:76:e5:
ee:97:6a:8b:e8:37:99:77:39:c2:22:54:ec:ba:da:19:c4:dd:
80:97:1b:c6:5f:cb:40:c8:ab:11:53:a3:90:a0:ce:7f:3f:d4:
f7:a3:0a:c2:05:29:ae:49:f4:c0:9f:08:72:15:0e:85:5c:3c:
30:25:e8:74:b7:0b:8d:f2:57:da:de:c4:c0:ee:b7:66:1d:3f:
07:a1:0d:15:e0:1b:d2:60:42:2e:f4:1d:ad:90:78:d8:26:72:
e0:63:e4:e6:59:b7:7f:16:57:69:91:ef:82:8b:27:7d:77:83:
51:a5:ec:00:3c:7d:5c:31:03:c0:f5:0b:92:2c:eb:db:17:65:
d0:94:7d:9e:12:cb:6e:8e:7b:9d:ca:ab:46:2b:95:e5:b9:1a:
17:a1:cc:c7:e9:f3:b9:9d:d9:d3:c1:43:f1:92:41:8a:b0:98:
fc:f6:d0:d4:90:14:5f:bc:dc:e8:3c:34:2e:27:97:26:ec:b3:
06:00:bd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:30:33 2024 by rpki-client on console-fra.rpki-client.org