Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/mob8UZ2SSQ7TqH6Ku4D7Z9qyrPU.roa
File: mob8UZ2SSQ7TqH6Ku4D7Z9qyrPU.roa (raw, json)
Hash identifier: w/ukyH9KLBhPF/t77HNpTV7/ZmprkwWr5+3MMytjvGY=
Subject key identifier: 9A:86:FC:51:9D:92:49:0E:D3:A8:7E:8A:BB:80:FB:67:DA:B2:AC:F5
Certificate issuer: /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Certificate serial: 018CC5DBEEBC09C5982F93A2BBC815EE589F
Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/mob8UZ2SSQ7TqH6Ku4D7Z9qyrPU.roa
Signing time: Mon 01 Jan 2024 16:29:34 +0000
ROA not before: Mon 01 Jan 2024 16:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59990
IP address blocks: 91.246.76.0/24 maxlen: 24
91.246.78.0/24 maxlen: 24
91.246.77.0/24 maxlen: 24
91.246.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ee:bc:09:c5:98:2f:93:a2:bb:c8:15:ee:58:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Validity
Not Before: Jan 1 16:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a86fc519d92490ed3a87e8abb80fb67dab2acf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4e:56:ac:a2:38:89:4f:8a:60:ce:a0:9f:cc:
34:7a:1d:35:8a:4a:6e:4e:5b:e4:b4:14:4b:93:42:
4f:0c:49:51:47:53:be:98:73:65:ef:3c:04:1d:3d:
93:64:77:f0:71:d5:c4:d6:e7:43:40:c6:50:79:3d:
fb:ef:85:57:97:dd:7c:65:a0:32:d9:c8:ab:27:71:
47:5c:ed:f1:14:d3:45:95:01:e0:e3:38:a3:67:0f:
61:74:07:73:39:3c:48:95:0a:8f:cb:c8:d5:37:91:
94:e6:5c:f7:4f:2b:f8:b9:06:25:8f:e7:d4:df:94:
71:74:75:f5:df:16:30:87:a6:84:04:6d:de:8e:d9:
02:f2:4a:0f:9b:f3:d9:fd:57:20:1f:7a:a1:52:c2:
9b:d3:91:45:90:81:2e:a0:ef:01:dc:0c:dc:85:84:
ac:ed:34:35:fc:bf:e8:e8:0a:fc:28:ec:e8:df:e9:
90:69:e5:64:b8:db:f8:cf:7f:77:24:5f:c6:51:36:
e9:73:23:06:ca:2a:a1:6d:97:ce:41:6b:08:d7:b2:
77:00:e8:01:b6:c8:dc:96:68:08:b6:bc:81:08:48:
4a:d6:f0:77:80:a1:c4:e6:34:84:55:ec:70:b3:96:
bb:55:b6:e2:77:76:af:23:20:54:38:aa:32:25:88:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:86:FC:51:9D:92:49:0E:D3:A8:7E:8A:BB:80:FB:67:DA:B2:AC:F5
X509v3 Authority Key Identifier:
keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/mob8UZ2SSQ7TqH6Ku4D7Z9qyrPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.76.0/22
Signature Algorithm: sha256WithRSAEncryption
60:bf:cb:a5:0a:4e:5a:92:40:e0:61:88:c5:a7:a4:56:eb:bc:
dd:48:ac:fe:99:8e:e7:65:f0:c2:ee:5a:04:33:1a:86:05:e2:
48:02:97:ac:d6:ff:04:3d:b0:a1:e0:c6:c5:87:52:f7:a9:5e:
e2:1d:65:70:ee:b4:a0:ad:df:54:b9:bf:ec:0c:71:71:bd:ce:
c3:22:61:0d:9d:10:da:99:46:e5:73:02:4e:05:4f:cf:09:5d:
3d:10:fd:02:6b:a8:20:98:5a:ab:cd:c9:03:bf:7e:df:b6:ab:
f1:31:57:cd:7f:d7:d8:b2:2d:9f:ea:4a:ae:76:19:b7:2f:a5:
dd:fb:5f:0d:32:dd:cf:4f:fe:68:9a:07:52:15:74:01:a6:ab:
7c:fb:34:37:9e:b4:bd:63:37:4d:7c:5a:1f:0b:37:92:40:48:
0b:8b:7c:ba:62:54:1b:b5:e8:bd:91:31:4d:d9:04:5c:a0:29:
b7:d9:b5:4d:29:79:6a:09:47:90:fd:4e:c7:08:0b:d6:dc:a8:
d8:c9:32:06:46:3e:86:e3:82:74:e9:47:e9:9a:87:91:76:13:
6d:3a:df:5c:48:2c:95:b5:a8:b0:e3:73:b7:fb:54:61:65:e7:
b4:14:b4:9c:d5:91:f1:50:0d:fc:99:4c:54:59:8b:9b:04:97:
a6:cf:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:01:13 2024 by rpki-client on console-ams.rpki-client.org