Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/yIb3kZzBGvYpqe3snrimIOGeWr0.roa
File: yIb3kZzBGvYpqe3snrimIOGeWr0.roa (raw, json)
Hash identifier: tZn4mic81vjuMKRjTM/nfxTwL9N94y6kKPyIyWF/xLY=
Subject key identifier: C8:86:F7:91:9C:C1:1A:F6:29:A9:ED:EC:9E:B8:A6:20:E1:9E:5A:BD
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 018CC500F16A8FAEA2FF920434345CF67310
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/yIb3kZzBGvYpqe3snrimIOGeWr0.roa
Signing time: Mon 01 Jan 2024 12:30:22 +0000
ROA not before: Mon 01 Jan 2024 12:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50401
IP address blocks: 91.242.192.0/23 maxlen: 23
91.242.194.0/23 maxlen: 23
91.242.196.0/23 maxlen: 23
91.242.198.0/23 maxlen: 23
91.222.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f1:6a:8f:ae:a2:ff:92:04:34:34:5c:f6:73:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Jan 1 12:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c886f7919cc11af629a9edec9eb8a620e19e5abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a7:e6:e6:ce:05:b2:f9:e8:d9:23:88:67:40:
85:47:cf:90:23:29:fa:0f:94:3c:1f:a8:46:df:19:
e9:f7:b0:3e:c9:e4:85:30:34:4d:6d:69:ac:dc:ef:
ce:4e:59:73:2b:71:b3:58:44:fb:c3:14:f1:00:c9:
67:6b:b2:df:31:80:63:f4:3f:53:43:91:da:db:6e:
4a:62:19:27:b6:d6:8c:37:ff:55:24:e0:d3:85:06:
d5:5d:bc:14:c2:80:54:a9:a3:98:35:42:b4:fc:3d:
dd:a4:5e:ab:b5:bc:ad:fa:c9:5a:17:c6:ac:8d:0d:
16:99:ba:df:44:b8:9d:14:42:e9:37:95:5c:9d:4f:
bf:06:ce:5b:15:76:77:1e:67:93:90:16:05:05:03:
d5:60:3b:3a:9a:76:33:d9:a2:73:5a:30:0f:cb:d8:
5a:ee:93:30:42:f1:95:f6:ce:1d:77:2e:1b:9e:25:
44:fa:f2:8e:c8:64:5f:06:53:a3:d2:66:07:b9:71:
d7:00:f4:ec:93:a4:99:ad:18:3b:04:94:17:79:bf:
5f:89:cf:19:b9:69:78:81:d9:7f:7b:9d:b4:fc:fc:
2d:14:0e:d0:f6:f4:4d:5b:74:25:26:32:8d:0a:69:
f4:3c:02:8d:33:6f:d7:0a:57:fc:68:9b:29:3e:b8:
f4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:86:F7:91:9C:C1:1A:F6:29:A9:ED:EC:9E:B8:A6:20:E1:9E:5A:BD
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/yIb3kZzBGvYpqe3snrimIOGeWr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.112.0/22
91.242.192.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:1c:17:79:99:37:d0:d4:be:86:0a:18:a5:0a:9c:1e:34:21:
9e:da:9f:60:81:26:d0:57:4d:2e:8f:b7:05:1a:94:e1:59:0c:
f2:95:35:6e:1b:84:ef:e9:2d:f6:67:45:ce:bd:57:b2:2c:0b:
4c:8a:46:88:55:93:88:9d:ec:d2:ba:29:70:4a:47:c3:8a:df:
ac:f1:48:65:a6:40:c8:13:88:dd:43:80:80:4f:96:d2:0c:44:
1e:21:fb:dc:7a:80:5d:6e:e0:df:a0:b4:2e:97:ee:f6:fc:58:
af:5c:03:04:b8:03:31:b0:6d:27:80:c6:67:3e:5c:34:c6:a3:
dc:51:12:5b:52:13:2a:61:51:1e:23:51:ee:9e:bd:b5:20:91:
20:96:cf:42:7d:42:d9:fe:0a:13:fd:8b:3e:cb:49:49:ad:7e:
5c:18:e4:ea:58:64:5c:4f:78:34:67:9f:ad:42:e9:d3:38:05:
15:71:f4:41:e3:a9:18:69:cd:02:a8:d4:5a:66:d6:86:ec:50:
34:3d:79:b8:29:ae:a3:1c:26:f2:e7:29:82:8d:fe:3c:78:ab:
49:24:70:8b:d7:da:81:e5:0c:ee:c5:2b:9c:05:91:f9:4e:4b:
f8:fc:e3:27:af:73:97:49:50:b7:57:a1:5b:c3:a4:61:f4:fe:
8e:fe:02:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:27:30 2024 by rpki-client on console-ams.rpki-client.org