Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/v8_ABhl7cJFlZkKba01EJXGPaXA.roa
File: v8_ABhl7cJFlZkKba01EJXGPaXA.roa (raw, json)
Hash identifier: vrmDDE66tk9o6hsfW6JzP4JwM1GQqON9lSWpbfUr8O0=
Subject key identifier: BF:CF:C0:06:19:7B:70:91:65:66:42:9B:6B:4D:44:25:71:8F:69:70
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 018CC7940A368A76A1B824F01F860B8D63E2
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/v8_ABhl7cJFlZkKba01EJXGPaXA.roa
Signing time: Tue 02 Jan 2024 00:30:17 +0000
ROA not before: Tue 02 Jan 2024 00:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42927
IP address blocks: 91.198.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:0a:36:8a:76:a1:b8:24:f0:1f:86:0b:8d:63:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Jan 2 00:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfcfc006197b70916566429b6b4d4425718f6970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:ae:0d:78:c0:d7:94:53:14:93:63:a6:9c:
d0:54:c7:ab:d5:d0:15:95:27:92:61:ef:70:75:70:
67:ad:3d:a1:02:e9:e1:36:a1:0d:0e:c2:4f:81:8a:
5e:26:bd:76:3c:07:98:03:ed:ff:24:aa:d2:2d:34:
22:55:a7:24:ff:15:71:fa:ee:74:70:a6:b3:af:a5:
5d:20:ac:ab:4e:e2:81:fd:f9:cf:c2:63:1a:4c:ae:
a2:b1:f7:92:46:6b:da:e5:47:cb:b9:d5:5d:4b:ee:
cc:20:cf:ea:c0:34:9c:45:ef:d6:49:29:11:6b:67:
6b:18:2f:e0:4d:55:88:ae:20:44:45:d1:56:7a:d9:
e4:e7:2d:38:3f:1a:10:c5:d2:cc:f6:e2:74:ba:1f:
eb:66:cb:5a:4a:5e:69:4e:a4:2b:78:d1:73:f3:3e:
41:42:ff:f8:b9:61:83:7f:95:76:d2:97:ce:a4:6e:
3e:0e:dd:7c:7e:2d:26:6a:d6:30:e9:6f:93:2b:19:
b9:42:bf:79:94:8d:a3:9a:95:83:e7:2f:8e:a0:e9:
e7:e2:68:48:f5:78:96:6b:fb:f9:e3:1b:a5:14:11:
25:8e:a9:a8:cb:8b:97:9e:92:f7:fc:15:40:cd:84:
ef:74:2d:67:45:93:7d:f2:1c:a7:42:d2:d6:6f:88:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CF:C0:06:19:7B:70:91:65:66:42:9B:6B:4D:44:25:71:8F:69:70
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/v8_ABhl7cJFlZkKba01EJXGPaXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.137.0/24
Signature Algorithm: sha256WithRSAEncryption
75:12:7b:73:74:88:56:0c:e1:f9:5c:38:e2:60:5a:75:2d:57:
ff:7f:0b:2d:02:76:3d:92:14:8a:84:c7:05:4c:7c:b6:02:02:
6b:2e:ef:2e:49:b5:cf:dc:7f:68:73:78:b0:b6:04:04:27:18:
0a:0f:39:5c:af:8b:3f:54:c6:3d:47:f2:c8:23:f7:6b:b6:7c:
31:96:6e:0b:94:7e:0c:e3:23:70:20:bc:74:7e:16:83:93:0e:
94:69:57:7a:66:94:24:8b:43:f1:2d:68:80:f5:8a:56:bc:a6:
b4:3c:ec:cf:93:8c:82:bc:90:c3:e8:b0:67:0d:83:af:81:79:
a9:4b:4d:6e:f3:95:39:98:b9:7a:20:b9:82:c5:a1:bd:b2:c7:
0e:9d:41:fb:00:d1:1a:b1:08:0f:a8:d8:b4:a7:73:bd:00:d8:
4e:68:15:95:0d:14:c8:a7:78:04:e2:01:88:63:40:6d:54:88:
da:97:9e:da:0a:87:95:fa:cb:b2:0d:97:b2:3c:13:c8:68:ba:
86:31:e0:09:fd:e1:00:fe:50:27:38:5a:55:02:c0:ed:7a:5b:
92:ff:19:64:ed:10:61:b4:31:9a:31:fa:19:8a:76:9a:da:15:
1c:95:fc:46:80:23:fc:d7:d6:50:07:3a:e3:59:94:d0:cb:cb:
32:2c:12:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:12 2024 by rpki-client on console-fra.rpki-client.org