Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/sCX_PXUerIXm7i-udkMy6tFbv6o.roa
File: sCX_PXUerIXm7i-udkMy6tFbv6o.roa (raw, json)
Hash identifier: MIuvUwI/UVSFYtE/Z2i1Qf4bR2ozKJAuzliCTZOcirQ=
Subject key identifier: B0:25:FF:3D:75:1E:AC:85:E6:EE:2F:AE:76:43:32:EA:D1:5B:BF:AA
Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial: 018CC424E4C82708EF3F5433732372844B17
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/sCX_PXUerIXm7i-udkMy6tFbv6o.roa
Signing time: Mon 01 Jan 2024 08:30:01 +0000
ROA not before: Mon 01 Jan 2024 08:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8315
IP address blocks: 185.194.84.0/23 maxlen: 24
91.230.170.0/23 maxlen: 24
91.230.176.0/22 maxlen: 24
91.230.178.0/24 maxlen: 24
194.213.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:e4:c8:27:08:ef:3f:54:33:73:23:72:84:4b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Validity
Not Before: Jan 1 08:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b025ff3d751eac85e6ee2fae764332ead15bbfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:cd:bf:26:ba:81:2f:a3:a4:09:53:4b:96:
e2:92:e1:57:3c:cc:47:01:21:a7:a2:37:97:b6:07:
be:0a:a1:74:48:78:7c:2d:99:ef:e8:dd:01:b1:f8:
68:db:bd:ef:13:80:29:71:38:0e:d2:9f:ff:93:d2:
7b:73:6a:97:8b:e6:ce:3b:3a:6f:b1:06:5c:3b:41:
84:b7:8f:c8:03:24:98:cf:78:21:fb:d0:5c:44:91:
7a:72:6e:1f:a0:35:a9:65:80:9c:36:17:da:dc:f8:
92:23:4e:e8:5b:40:d7:09:2e:7a:f4:ac:db:2e:28:
bc:62:ab:88:cb:7b:07:88:57:1f:53:69:85:35:18:
e5:4e:47:26:c2:81:66:72:1c:54:e9:96:0f:a0:77:
a3:ff:85:40:bd:cc:8c:fb:65:42:1e:f3:83:0e:75:
42:67:13:30:51:55:4b:0d:64:8d:6d:6f:fe:13:51:
00:5d:04:86:c0:21:66:af:c0:fa:19:04:0f:79:c1:
90:30:9c:e0:be:7d:2d:44:79:d4:a2:d4:99:9b:ed:
9c:0f:6b:db:ac:75:7d:db:c2:ba:f9:c0:0a:35:84:
2d:fe:51:ee:c1:79:8c:ad:c1:d3:17:0b:4c:4e:05:
37:ed:d3:b2:29:79:f4:a3:f5:64:dd:2f:e2:21:99:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:25:FF:3D:75:1E:AC:85:E6:EE:2F:AE:76:43:32:EA:D1:5B:BF:AA
X509v3 Authority Key Identifier:
keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/sCX_PXUerIXm7i-udkMy6tFbv6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.170.0/23
91.230.176.0/22
185.194.84.0/23
194.213.114.0/23
Signature Algorithm: sha256WithRSAEncryption
94:7c:12:f4:d4:86:c0:6c:33:db:16:a4:5e:ec:d8:97:8f:3b:
24:c0:fa:a9:4c:f4:e8:52:69:8c:f9:b9:8b:d3:33:0e:14:2f:
3e:99:16:57:21:0c:72:d3:b5:e4:79:26:ed:43:02:c9:f5:93:
ae:95:44:b6:f1:5b:2f:8c:91:0a:d1:1b:8c:19:36:44:b6:c8:
d1:fc:39:a1:6a:3f:de:1d:1b:4f:0f:9d:e5:50:0f:3c:da:82:
bd:a2:bb:d0:d1:76:24:44:37:fc:f0:fe:a4:6d:b6:ce:f8:39:
d1:87:ab:90:f0:2c:3c:1c:5b:7d:22:f2:47:e4:cd:78:e3:f7:
5b:80:73:79:60:57:b4:ce:0b:8a:94:c4:a7:c3:d5:e7:78:95:
3d:9b:52:20:cc:92:c3:37:e5:ad:5b:5f:f2:14:b4:fd:8e:ef:
17:a3:03:37:2d:85:fd:05:0b:af:8c:e8:c9:b1:4f:08:eb:30:
b4:13:84:7e:f3:b6:1f:25:9d:75:21:e5:3a:6b:6a:d3:7c:7f:
28:73:0e:8b:37:b8:31:81:ec:2f:1c:8b:e6:83:46:96:82:41:
6b:45:91:35:15:82:fe:f9:e8:77:22:6e:ad:45:50:57:66:ce:
78:e7:32:87:8e:93:45:8f:6a:45:e8:da:c9:8a:7d:bb:a5:d3:
28:c5:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:40:50 2024 by rpki-client on console-ams.rpki-client.org