Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/zk6INom0RQjSZQGTT9pC2lZUvy8.roa
File: zk6INom0RQjSZQGTT9pC2lZUvy8.roa (raw, json)
Hash identifier: itr3rKEs7G/PSRehNajI89jIMsA/cVWjcGJr3dUsUoQ=
Subject key identifier: CE:4E:88:36:89:B4:45:08:D2:65:01:93:4F:DA:42:DA:56:54:BF:2F
Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial: 018CC94DC25DAC6851031BCFC12A32AB2D19
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/zk6INom0RQjSZQGTT9pC2lZUvy8.roa
Signing time: Tue 02 Jan 2024 08:32:45 +0000
ROA not before: Tue 02 Jan 2024 08:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41751
IP address blocks: 91.206.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:c2:5d:ac:68:51:03:1b:cf:c1:2a:32:ab:2d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Validity
Not Before: Jan 2 08:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce4e883689b44508d26501934fda42da5654bf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7d:77:33:80:06:84:93:16:8e:06:0a:42:29:
ff:d8:ea:f7:b4:c4:1c:90:40:58:60:3b:ec:27:ce:
f0:a3:c4:c9:35:e7:f0:50:28:58:bd:90:9f:47:a2:
b5:21:4f:b5:f8:23:eb:90:ce:00:89:21:ab:41:01:
b8:3b:2f:ba:4d:86:87:c9:36:ce:8e:56:58:3b:03:
7a:d4:22:bf:59:62:5c:35:2e:1a:17:0f:61:62:73:
03:2f:ed:65:e0:f0:d8:88:d6:b2:b7:91:95:ec:cd:
91:4f:af:a2:91:62:cb:19:97:53:1a:2d:3c:03:05:
7b:a1:02:dd:d5:1c:52:2f:eb:b7:b2:72:da:1d:c1:
3d:da:bd:82:75:06:cf:94:91:74:08:ac:01:d6:02:
53:7a:ce:b5:ce:23:43:03:b4:4b:91:2b:02:e8:53:
8e:58:b7:3f:76:d1:e6:fc:3e:2d:69:53:26:9e:91:
47:7e:11:2e:a4:4c:3a:e3:27:0a:c8:0a:c0:0f:07:
c7:0a:3a:43:13:cd:19:21:aa:42:7b:de:9a:81:b7:
80:27:68:60:b8:ec:48:91:9e:65:00:e4:6f:2a:f8:
6e:30:e2:5d:c5:74:cd:08:1d:af:09:45:4d:6f:ca:
ae:b2:ed:7b:a4:1c:e5:cd:fa:50:8b:be:1d:99:ec:
2c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4E:88:36:89:B4:45:08:D2:65:01:93:4F:DA:42:DA:56:54:BF:2F
X509v3 Authority Key Identifier:
keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/zk6INom0RQjSZQGTT9pC2lZUvy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.0.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:e8:7c:db:90:f4:5b:34:5e:26:e5:54:ea:23:8c:9a:e1:e4:
fd:75:67:2e:8a:22:7c:0d:f5:9e:91:63:7f:db:69:c9:17:42:
8c:59:db:6f:22:2d:9d:06:b5:62:59:79:11:c0:61:47:a9:7c:
e5:47:b7:5f:15:52:fc:f4:19:51:26:45:be:ea:24:7f:8d:6b:
bd:ba:d4:2f:6a:ea:b9:1a:99:26:76:fc:35:dd:ea:3b:0b:25:
a6:c2:b4:9b:9c:8c:6a:75:5c:be:c3:81:02:03:89:8c:03:2d:
b6:41:f9:f9:51:6c:18:04:d5:f1:bd:86:3f:fc:63:5f:93:9f:
95:8d:e4:80:09:de:72:7b:b8:3a:03:5a:c8:e4:be:a3:ee:a6:
c1:8a:95:fb:87:36:f1:42:8d:46:2e:7a:a6:c8:54:50:dd:a0:
d5:6b:2f:02:2c:f9:c3:9d:53:e8:12:8f:c1:9d:15:11:a0:df:
3e:a0:e3:c5:fc:64:6e:d9:a6:4b:48:2f:b5:e7:b8:98:79:2a:
e8:19:61:01:a0:a4:ae:ef:89:ba:f7:06:ce:0f:0e:70:f4:c9:
4a:f7:b7:51:8a:b3:6b:c7:6b:dc:11:ed:95:f8:fe:62:3c:3b:
97:1c:a0:3c:6b:dd:12:18:05:42:5c:28:0c:d5:23:d3:e8:f3:
50:1a:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:59:57 2024 by rpki-client on console-fra.rpki-client.org