Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/IFL0TGYXgkbbSPckGs1dUxM142U.roa
File: IFL0TGYXgkbbSPckGs1dUxM142U.roa (raw, json)
Hash identifier: B8Q0tZHF0UGmuFKGsDbfQFHyRsMwYUfaSy1KhPXJtu0=
Subject key identifier: 20:52:F4:4C:66:17:82:46:DB:48:F7:24:1A:CD:5D:53:13:35:E3:65
Certificate issuer: /CN=c13f17541732f57abff1294c71b533eb56746fd6
Certificate serial: 018CC3494C8478538E8B918CA735398680C9
Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/IFL0TGYXgkbbSPckGs1dUxM142U.roa
Signing time: Mon 01 Jan 2024 04:30:09 +0000
ROA not before: Mon 01 Jan 2024 04:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42473
IP address blocks: 91.208.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4c:84:78:53:8e:8b:91:8c:a7:35:39:86:80:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6
Validity
Not Before: Jan 1 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2052f44c66178246db48f7241acd5d531335e365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0c:9f:c1:7b:75:94:2c:39:a7:d3:f4:e4:8f:
be:ad:6c:bc:d1:bd:2f:fa:08:5e:5c:44:43:ec:13:
06:32:91:91:f4:a4:45:98:48:50:95:a8:6d:09:8c:
81:e3:9f:63:73:c6:44:c6:bf:63:3c:e6:d9:aa:4c:
a0:c2:c5:34:36:08:81:c9:82:7e:b5:5a:65:92:f7:
f5:38:b0:75:20:70:1b:d6:f5:70:fc:06:69:fd:bb:
c1:ea:f3:3b:d8:2f:2d:18:d5:53:3e:49:25:74:af:
67:a8:b8:f9:d6:25:21:dc:4c:8d:52:03:46:60:61:
50:48:2a:c6:e1:04:59:ba:d0:f4:80:35:44:25:aa:
dc:ca:06:db:49:7b:f4:08:d1:38:c8:21:44:9f:be:
a1:c7:2f:e6:69:9f:1b:6b:17:27:af:2a:4a:bc:b0:
9b:77:f8:c0:ad:01:91:dd:15:51:9f:8a:13:8f:e7:
dc:ce:f6:70:3d:ec:83:68:7a:f2:6c:74:ff:8d:ec:
05:e0:92:34:f0:f3:25:30:51:df:db:1d:a0:8c:85:
19:e9:e1:29:72:e2:3e:3f:02:52:26:e7:52:cd:17:
5f:e4:34:11:0a:bf:33:73:32:c5:9c:15:c7:2c:f3:
a7:51:11:6e:c4:53:cd:a1:82:1a:8f:07:76:10:d0:
e1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:52:F4:4C:66:17:82:46:DB:48:F7:24:1A:CD:5D:53:13:35:E3:65
X509v3 Authority Key Identifier:
keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/IFL0TGYXgkbbSPckGs1dUxM142U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.217.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d6:a1:4d:85:f4:5b:1d:6a:1f:c5:5b:60:c3:ca:d1:ef:b2:
d2:4d:c6:d8:a9:d4:fa:88:bb:84:5a:a4:03:ba:b8:b8:91:fc:
22:28:c3:6d:6c:a1:a2:37:eb:b3:86:8b:72:a1:cb:93:65:47:
a4:c2:52:ce:79:3b:e6:23:be:07:8d:27:a2:0f:7f:a4:30:e5:
e7:64:f0:46:6b:79:a8:80:51:76:08:71:d3:18:8f:d9:24:bd:
d9:64:e9:9f:26:29:2f:d2:e4:35:57:7c:d6:f3:80:67:4c:00:
0e:55:e6:c7:e2:53:37:aa:21:e9:ad:ac:db:25:fe:6b:5e:3f:
d3:e3:b5:76:8e:8f:b0:7c:6f:c4:b5:25:18:8e:78:d6:b1:7e:
f2:24:48:c6:1d:e7:95:69:a5:85:03:7f:e9:a0:86:d6:7e:97:
0f:e8:57:d5:ef:31:e0:bd:07:4d:f9:6d:46:c8:63:b9:03:e7:
b2:7c:7a:27:a8:58:58:57:ab:1e:4d:71:78:57:ec:06:23:58:
04:b6:58:ad:4a:c4:42:6f:13:1a:03:57:e3:8f:a0:4d:73:ec:
43:9d:5a:04:19:2e:53:ee:e6:33:25:0f:75:48:f9:27:8a:8c:
d4:13:30:09:a3:20:fb:8b:ae:cf:7d:c3:e8:16:e8:0e:10:3b:
d6:b6:99:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:46:20 2024 by rpki-client on console-ams.rpki-client.org