Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/v6ew1Gij9DKgoMvBzg2sOFsumGI.roa
File: v6ew1Gij9DKgoMvBzg2sOFsumGI.roa (raw, json)
Hash identifier: bWT6wvZZ+siu4wWi/g9VjPR4m42YuxR3yjKw+7m4FE0=
Subject key identifier: BF:A7:B0:D4:68:A3:F4:32:A0:A0:CB:C1:CE:0D:AC:38:5B:2E:98:62
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 018CC3B69B8C7BB4953BD2C2E7E7B213620A
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/v6ew1Gij9DKgoMvBzg2sOFsumGI.roa
Signing time: Mon 01 Jan 2024 06:29:33 +0000
ROA not before: Mon 01 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2687
IP address blocks: 87.237.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:9b:8c:7b:b4:95:3b:d2:c2:e7:e7:b2:13:62:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jan 1 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfa7b0d468a3f432a0a0cbc1ce0dac385b2e9862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:67:f2:6b:dc:90:d8:8e:84:35:04:63:f2:
7f:65:a2:60:08:1c:82:1d:54:0b:46:2c:13:94:e8:
7f:99:c4:42:d4:e4:28:c9:d0:76:32:44:62:7b:d1:
b9:97:ba:24:f6:4e:80:92:bc:64:6d:73:ba:41:24:
6f:1f:76:97:f2:d7:87:bf:8c:4d:9b:57:aa:b5:d5:
5d:5a:87:e9:db:cb:7f:b6:f3:f9:d3:b7:96:c0:09:
6c:5c:7e:ac:fb:a8:36:11:16:0d:a0:1e:17:87:0e:
89:96:c9:cd:58:4e:1b:00:07:14:8d:6d:f1:57:4c:
25:ce:57:1d:ca:03:92:b3:ad:9d:63:13:cc:ca:87:
2a:aa:2c:0f:7e:29:cb:35:f4:35:64:87:23:78:5f:
da:36:ea:2b:11:46:bb:cb:f3:d6:9b:3f:6c:2d:08:
40:c1:d1:db:4a:d7:fc:c9:08:3a:74:cd:32:25:74:
14:1c:8d:5d:a9:60:04:1e:8d:5d:2b:ec:a3:1a:69:
b5:0c:df:85:ad:5e:8a:7b:29:80:3c:89:53:83:84:
f7:59:08:23:07:1d:f3:f3:9f:1a:cb:bd:f3:aa:a1:
cf:7d:b4:dc:e8:d0:2f:f3:42:fd:da:88:d7:a0:fa:
52:fc:6f:88:3c:73:bf:74:89:52:46:21:4f:f8:51:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A7:B0:D4:68:A3:F4:32:A0:A0:CB:C1:CE:0D:AC:38:5B:2E:98:62
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/v6ew1Gij9DKgoMvBzg2sOFsumGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.220.0/24
Signature Algorithm: sha256WithRSAEncryption
90:00:cd:95:2c:07:6b:e7:61:4e:3d:cd:65:44:08:a2:47:77:
17:88:1d:f7:28:13:96:5d:8a:f1:c8:58:b0:76:31:d6:b8:ef:
dc:53:d9:4f:2e:20:b4:eb:e4:95:89:65:78:a3:5e:75:09:3e:
d2:64:ac:5d:7f:27:9f:82:27:af:78:07:a3:d4:35:7d:af:33:
06:a3:09:8c:77:64:7c:7a:67:b4:10:3a:4c:5a:37:3e:37:f5:
62:17:4d:1a:e4:53:b2:a2:a5:5d:6e:a0:69:1c:d0:2c:85:c3:
b6:e5:f8:0c:a6:97:84:22:fa:35:d4:eb:3c:d7:11:79:9b:00:
56:24:63:7c:95:f4:1c:7c:ad:3a:2b:0d:23:66:d2:b9:84:57:
fd:05:29:e2:11:58:e1:75:56:35:da:d3:2f:a1:ab:33:14:53:
ab:f7:7b:09:73:9c:ea:35:c5:20:a8:cd:53:d9:b7:cd:c7:ba:
17:fc:bf:f6:0f:a9:88:47:97:e0:b5:bc:1d:fe:ad:31:f2:54:
83:bf:39:0b:40:a8:f8:3d:16:5a:a3:62:d8:6b:ad:24:77:f3:
f9:63:6a:d0:56:ba:f7:bf:f7:50:46:18:93:f3:ac:84:2c:b4:
fd:7f:dd:54:09:bb:66:40:6a:15:49:85:d5:03:37:3f:f5:66:
8f:5d:24:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 21:18:02 2024 by rpki-client on console-fra.rpki-client.org