Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/brJ2I8w2U9LKZ-Ygktsxtno5q2M.roa
File: brJ2I8w2U9LKZ-Ygktsxtno5q2M.roa (raw, json)
Hash identifier: KsEYCfKGO+6c3LfoQ4BbvsLrVpxPjqwUtJGLIVbPEjc=
Subject key identifier: 6E:B2:76:23:CC:36:53:D2:CA:67:E6:20:92:DB:31:B6:7A:39:AB:63
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019141F81B680A607257FBEF6B155D40C0D9
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/brJ2I8w2U9LKZ-Ygktsxtno5q2M.roa
Signing time: Sun 11 Aug 2024 15:04:24 +0000
ROA not before: Sun 11 Aug 2024 15:04:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57230
IP address blocks: 87.236.210.0/24 maxlen: 24
87.236.212.0/24 maxlen: 24
2a03:9383::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:f8:1b:68:0a:60:72:57:fb:ef:6b:15:5d:40:c0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Aug 11 15:04:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6eb27623cc3653d2ca67e62092db31b67a39ab63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:32:63:fd:e6:03:5a:de:63:06:8f:4e:c9:
13:4a:27:c6:60:1e:c8:71:5d:f7:c9:f8:59:5b:3f:
76:3f:cd:13:72:3b:22:8d:a5:9c:cd:39:1a:eb:31:
cd:e4:46:bb:38:af:03:05:6d:65:16:5b:87:53:b4:
e5:6b:25:a0:20:f5:1d:3a:8d:94:e8:47:58:ef:ef:
07:04:b1:cf:1c:c7:ee:da:00:eb:cf:57:f8:eb:dd:
fc:d3:1e:80:72:de:60:56:a0:11:e2:df:13:1c:bd:
80:91:62:0b:af:1b:88:3b:0e:a8:dd:5c:73:9a:a7:
83:98:32:1e:2d:1a:95:a6:12:b2:58:12:c7:2d:ac:
06:c3:23:ca:a7:a5:ac:96:54:79:e4:de:51:93:32:
45:da:c7:35:3b:f9:b7:8d:a5:2e:a5:f9:9a:62:69:
ca:cb:77:9e:92:19:1b:5e:4d:31:d6:3b:c3:63:a4:
da:9b:bb:43:89:03:a5:4a:e7:34:fe:85:f0:f1:e1:
66:02:7d:61:f0:d2:ee:75:72:0f:c7:32:19:ee:a9:
23:0b:cb:53:93:07:1f:e9:0a:ef:07:9b:00:ac:49:
08:c4:b9:2d:69:cf:95:f2:e0:3d:a7:b7:0b:2c:b1:
54:f7:b6:ab:3c:4e:9c:47:98:81:4a:f7:68:49:94:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B2:76:23:CC:36:53:D2:CA:67:E6:20:92:DB:31:B6:7A:39:AB:63
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/brJ2I8w2U9LKZ-Ygktsxtno5q2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.210.0/24
87.236.212.0/24
IPv6:
2a03:9383::/48
Signature Algorithm: sha256WithRSAEncryption
8e:c3:6d:87:9b:74:cd:0e:8d:0e:8a:2c:59:8f:8d:91:4f:f8:
30:4b:dc:71:85:07:3b:18:f2:e6:4c:09:15:a4:c2:1c:b7:1b:
09:a0:16:76:77:e6:b8:2b:46:e7:6f:6b:cf:76:bf:ce:b9:a1:
b4:63:ca:00:26:92:08:b6:f8:6c:14:1d:5c:dc:6c:7a:be:eb:
67:f7:4e:f4:30:e2:c0:fd:67:fa:9e:11:d7:c7:06:e9:5d:17:
ba:e6:f5:ab:5a:a5:42:bf:09:8a:b8:a3:5d:a0:ea:b1:9f:71:
cf:52:eb:88:3b:79:97:a2:d2:ff:ed:8e:90:ac:77:49:a3:3c:
ec:d6:e3:51:94:06:19:12:a7:b8:20:ab:19:50:cf:b1:1a:09:
50:d8:d5:4c:43:f6:11:31:39:ee:f1:69:39:f9:ba:e1:db:15:
fa:59:b8:55:ec:3c:5b:43:6f:7d:08:35:fa:46:fd:71:80:ff:
52:96:6a:4f:e7:83:27:3a:28:4a:b3:d5:06:12:71:ea:0d:11:
09:b3:6b:6b:35:c8:e2:a5:47:db:51:ad:45:1e:db:9c:f8:13:
d6:e3:0e:a2:ab:05:ff:8a:91:76:bd:c5:65:ec:b6:e6:18:56:
60:c1:ca:d6:3c:f5:61:90:3b:6b:af:59:08:be:b8:5a:7f:be:
ab:49:9d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:17:36 2024 by rpki-client on console-ams.rpki-client.org