Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/CI-QSCwceAsre8uMpax2d1qWCLQ.roa
File: CI-QSCwceAsre8uMpax2d1qWCLQ.roa (raw, json)
Hash identifier: HxqqVkSEukc685uygSCdYQhIIYjRE0gIU0FakPx8fDQ=
Subject key identifier: 08:8F:90:48:2C:1C:78:0B:2B:7B:CB:8C:A5:AC:76:77:5A:96:08:B4
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 018CC94D5B81EA236904DC47514504ECD985
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/CI-QSCwceAsre8uMpax2d1qWCLQ.roa
Signing time: Tue 02 Jan 2024 08:32:19 +0000
ROA not before: Tue 02 Jan 2024 08:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 91.210.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:5b:81:ea:23:69:04:dc:47:51:45:04:ec:d9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Jan 2 08:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=088f90482c1c780b2b7bcb8ca5ac76775a9608b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a7:90:16:67:c3:62:6b:da:86:f8:0a:9f:1a:
0c:c3:17:c3:c2:9f:97:44:cf:98:1c:b0:39:f8:a0:
e2:1b:70:aa:ae:6e:93:6d:bf:76:90:94:f0:a9:b2:
a3:c6:9a:fb:6e:7d:98:fd:0a:d2:13:cc:eb:68:c9:
b9:c2:50:d3:f2:e3:78:ab:c3:93:f2:f7:35:4c:24:
4f:f5:52:93:9a:3d:d5:50:9a:33:62:6b:06:d1:20:
ed:67:dc:a2:b7:32:a8:0c:ad:48:4c:ef:67:e9:0d:
2e:91:32:33:81:31:f1:11:b4:44:53:8b:a5:88:75:
74:b8:59:16:c0:ce:46:58:40:da:f2:3a:7b:58:12:
eb:cb:74:b4:4f:2a:ba:f7:63:d3:47:83:18:9b:29:
d7:3b:43:96:26:ad:c9:da:59:25:49:3b:05:9d:de:
b0:26:a2:2f:64:a2:ed:79:cc:ee:48:51:b7:2d:91:
03:4c:a2:77:e9:b5:e9:0d:c4:a5:a2:e3:b0:fc:ce:
b5:1a:25:3e:0a:e9:67:cb:ef:27:10:39:fd:af:f9:
87:ac:cd:6e:05:c6:be:07:70:c7:2f:c3:bf:03:df:
1c:24:3e:89:fa:f5:6b:b9:ce:4e:3e:29:6a:04:42:
91:80:35:8c:58:c5:ae:f0:71:8b:fe:49:6a:7a:1e:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8F:90:48:2C:1C:78:0B:2B:7B:CB:8C:A5:AC:76:77:5A:96:08:B4
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/CI-QSCwceAsre8uMpax2d1qWCLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.120.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:50:6d:f8:b7:c7:b3:18:2c:2d:e7:a9:bc:9f:af:b7:96:75:
61:19:a7:dd:ff:9d:47:b1:0f:d7:3e:25:36:25:d8:60:17:8d:
ea:52:3b:44:f0:72:f2:0f:52:d0:d6:38:08:5b:b4:ed:c2:63:
e6:0c:5f:ae:6f:e0:a0:4a:b4:47:2f:f3:62:ef:55:35:90:33:
11:66:e0:36:5e:e2:2f:5a:54:cc:ff:c6:0d:de:b3:ff:22:8a:
39:b5:f0:6d:6e:21:32:5a:93:08:05:3a:08:99:04:39:21:ba:
73:97:19:f2:0c:80:73:7a:3e:4e:3c:c1:c4:a6:4b:82:3c:3b:
20:14:1b:41:cf:8a:9b:30:48:cc:17:92:e5:c0:7c:3c:86:33:
13:cf:21:bb:da:c4:aa:16:14:9d:f2:15:b7:af:ba:de:0d:eb:
bf:37:5c:d9:4b:6b:3b:a0:3a:8c:1d:50:e1:4d:d2:e0:5b:d2:
ac:dc:2d:8a:75:14:54:58:24:96:8e:f3:2a:8a:60:c7:e2:7e:
2e:cc:0c:53:cb:29:1d:b2:e2:2d:55:9a:41:47:84:1f:23:81:
d7:8f:92:e2:d2:b5:59:60:3a:03:0d:6e:d2:39:4a:98:8a:46:
37:8a:64:f5:9d:33:f5:21:4e:0e:58:4c:97:f6:d3:74:b0:7e:
b6:ea:e3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 11:47:46 2024 by rpki-client on console-ams.rpki-client.org