Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/_s2iGPBHZm3y6H1JqtYYuRUrzJY.roa
File: _s2iGPBHZm3y6H1JqtYYuRUrzJY.roa (raw, json)
Hash identifier: uREoPrfS49NfR1IXCaCeRnpi1/dx3xNsOJ0y+Lh5h8c=
Subject key identifier: FE:CD:A2:18:F0:47:66:6D:F2:E8:7D:49:AA:D6:18:B9:15:2B:CC:96
Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial: 018DA7945A09D1213206F206DFC912D6E85F
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/_s2iGPBHZm3y6H1JqtYYuRUrzJY.roa
Signing time: Wed 14 Feb 2024 12:25:33 +0000
ROA not before: Wed 14 Feb 2024 12:25:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21334
IP address blocks: 91.220.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:94:5a:09:d1:21:32:06:f2:06:df:c9:12:d6:e8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Validity
Not Before: Feb 14 12:25:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fecda218f047666df2e87d49aad618b9152bcc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a5:b9:91:77:83:e9:01:f9:97:d9:fd:f4:01:
00:23:5f:07:95:01:b9:7e:ed:dc:95:aa:d8:a1:97:
d3:b8:27:8d:00:3e:91:26:1e:6a:aa:ce:94:30:9a:
9d:cf:3a:b6:76:c3:7c:a2:53:e1:16:47:20:a0:69:
e2:b9:34:28:01:5a:c0:59:1d:71:d2:d2:bc:90:ca:
97:42:96:94:c0:2e:a6:3b:84:01:e6:f7:af:be:31:
a4:ef:79:21:4c:3e:7f:90:d1:db:8c:40:47:71:f7:
fc:0b:05:7a:aa:34:01:02:c5:5b:ad:97:97:cb:05:
6f:e8:58:8c:57:57:a8:c2:8e:af:f1:a6:c4:c0:2b:
d2:6d:d5:93:37:51:5c:9e:1f:f0:2f:3e:9f:b3:61:
db:0f:42:a1:8d:e0:ae:4a:3e:bc:f3:a6:f1:d9:ab:
1c:f7:a3:32:8f:90:01:fc:9f:8f:e9:c0:17:ee:aa:
1e:f3:05:24:c0:e5:69:cf:cd:59:17:ef:9f:93:e7:
ea:cd:f9:93:2d:e5:28:e7:78:32:27:7e:78:d5:51:
20:3f:33:ec:d1:94:76:b2:02:1a:9f:e7:37:31:15:
47:33:79:60:60:13:46:a7:90:9d:ad:c7:c3:b5:a8:
47:51:01:93:c2:b2:96:de:78:96:4c:46:5e:98:87:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CD:A2:18:F0:47:66:6D:F2:E8:7D:49:AA:D6:18:B9:15:2B:CC:96
X509v3 Authority Key Identifier:
keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/_s2iGPBHZm3y6H1JqtYYuRUrzJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.247.0/24
Signature Algorithm: sha256WithRSAEncryption
90:1c:2a:28:4c:6d:98:44:ca:b7:2d:36:83:53:c4:01:e5:ca:
08:8c:9a:da:16:a9:1d:e7:07:51:58:e3:d9:e3:d3:2d:6c:a3:
2b:e6:4b:42:32:05:8b:63:b3:fd:be:78:1b:f6:8f:15:2b:75:
6a:ee:57:dc:26:60:87:b5:d3:dd:57:2e:38:b3:36:5d:17:0e:
89:58:49:a5:38:fb:cb:5a:aa:93:e8:bd:f7:ec:6d:1b:a8:2c:
fc:96:49:d6:44:ef:24:13:92:2a:4c:30:a2:ec:fe:e2:74:42:
c0:52:36:98:4f:42:f0:c2:57:bf:dd:eb:6f:66:57:dd:0c:f9:
82:15:74:44:ab:7d:80:51:2a:7a:2e:5b:54:eb:05:a7:4f:c8:
47:db:c8:b0:c7:93:84:3f:a5:e4:bc:56:e2:8f:30:16:71:12:
75:6a:14:de:e5:b0:34:08:9b:2d:44:47:eb:fc:74:1b:a9:12:
78:a4:96:59:9b:16:b7:6d:d4:aa:ea:41:ac:3a:f1:a2:95:08:
61:da:1b:80:ba:d1:0b:94:91:40:b2:cf:3f:05:98:2d:cb:d7:
1b:be:b9:4c:f6:6e:bf:ec:a1:be:8c:3e:fd:9f:ad:53:dd:d1:
8a:39:b0:8b:f9:ae:db:21:14:21:54:5c:25:ca:6d:ff:35:eb:
7a:06:93:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:46:35 2024 by rpki-client on console-fra.rpki-client.org