Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/j85bv2xY0RdudiXwAD63IPhEVIo.roa
File: j85bv2xY0RdudiXwAD63IPhEVIo.roa (raw, json)
Hash identifier: DJl+6q12Xnm0qOgmJkPa55MrJcUNiRRi6v9ReUBM19Q=
Subject key identifier: 8F:CE:5B:BF:6C:58:D1:17:6E:76:25:F0:00:3E:B7:20:F8:44:54:8A
Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial: 018CC9BC15AB63055DBD00B8AFF92A089254
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/j85bv2xY0RdudiXwAD63IPhEVIo.roa
Signing time: Tue 02 Jan 2024 10:33:15 +0000
ROA not before: Tue 02 Jan 2024 10:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199381
IP address blocks: 91.223.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:15:ab:63:05:5d:bd:00:b8:af:f9:2a:08:92:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Validity
Not Before: Jan 2 10:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fce5bbf6c58d1176e7625f0003eb720f844548a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ca:cf:5d:0d:bc:93:24:4a:80:81:a2:07:ba:
0f:74:9c:3e:e4:e7:86:4d:36:7f:17:cb:0b:b9:03:
86:b8:2b:46:50:06:29:59:80:98:7c:72:aa:d7:06:
f8:21:5c:ef:56:cd:65:ce:47:17:6f:72:8a:ff:ac:
b0:db:82:05:f6:66:26:d0:50:e6:97:5e:39:c1:b4:
1f:30:e0:56:e0:06:d0:a9:d3:96:b3:21:30:0c:45:
77:4c:d4:3a:fa:d6:e7:e5:c9:52:c6:7a:0c:79:9b:
a9:7b:6e:a8:10:6a:c3:c7:ff:98:d8:d1:09:6a:8d:
fc:48:9b:c9:50:ac:b2:9a:9d:b6:c3:cd:cb:03:6f:
ea:bf:1c:28:29:0c:25:d7:23:3b:c8:96:15:ac:c2:
6e:b9:96:b6:3e:1c:b5:13:bb:5d:03:3f:05:3b:fd:
e2:f0:1f:30:62:53:f1:47:a6:6e:1b:0f:96:de:70:
80:17:ea:b2:27:f2:51:03:9e:72:e6:35:fa:06:16:
2b:6d:01:bd:b5:8a:90:d0:6a:38:1e:90:4b:d1:a2:
db:55:34:07:0d:1b:a9:22:2f:17:c4:f9:5f:f1:26:
24:81:d1:bf:39:96:65:8b:56:62:89:9b:39:54:a0:
28:6d:56:e0:d4:b4:76:4d:e9:a3:1c:26:c3:e4:ee:
d6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CE:5B:BF:6C:58:D1:17:6E:76:25:F0:00:3E:B7:20:F8:44:54:8A
X509v3 Authority Key Identifier:
keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/j85bv2xY0RdudiXwAD63IPhEVIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.57.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:79:18:53:23:12:62:00:ea:4a:29:45:a2:34:9c:0a:af:da:
23:74:ff:53:41:bb:0e:96:07:da:4c:74:b2:0e:9a:c4:80:34:
69:57:21:10:a2:d6:c0:41:99:a4:6f:df:08:89:32:5c:df:a9:
63:a0:d5:2f:81:1d:1c:90:ab:e2:62:76:4c:f7:1b:67:23:fc:
d5:f0:00:2f:e4:3f:22:f9:32:ba:bd:43:d3:98:a4:5c:e7:a9:
1f:f4:b5:93:b1:61:4b:19:82:15:69:3e:48:fd:d6:c7:43:1c:
8c:d6:73:37:91:8c:f5:25:7e:bf:ef:2b:2b:63:bb:cd:1b:85:
a2:e9:5e:b7:5e:47:75:a7:24:53:2a:f0:1a:93:33:6c:ed:e0:
f7:5f:05:d7:88:c9:03:2f:f5:43:56:80:7d:22:f1:02:45:17:
a6:fa:0b:42:05:58:7d:65:0b:b7:94:d2:c3:e4:9e:26:92:52:
4e:de:73:47:90:93:ca:ff:d7:4a:f9:54:ba:e4:a4:e3:ba:41:
b5:bd:04:48:bb:f0:92:67:61:af:76:56:4e:45:3a:c5:eb:5c:
7f:68:e0:cf:05:87:34:59:01:de:88:53:e1:ce:b9:53:a9:b2:
db:5b:d2:72:ee:21:e8:68:c6:88:16:75:b4:78:dd:2a:b5:50:
49:38:d6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:25:58 2024 by rpki-client on console-ams.rpki-client.org