Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/OXHiPvS6Hd2QdkfEEs7CIYYFocs.roa
File: OXHiPvS6Hd2QdkfEEs7CIYYFocs.roa (raw, json)
Hash identifier: LJC/RrSECoNqowsXs03UcOteY4G71Po9yCm7BzQtUyw=
Subject key identifier: 39:71:E2:3E:F4:BA:1D:DD:90:76:47:C4:12:CE:C2:21:86:05:A1:CB
Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial: 018CC5014D1C306CE73C003D105911AE542F
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/OXHiPvS6Hd2QdkfEEs7CIYYFocs.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48258
IP address blocks: 91.209.53.0/24 maxlen: 24
2001:67c:2488::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4d:1c:30:6c:e7:3c:00:3d:10:59:11:ae:54:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3971e23ef4ba1ddd907647c412cec2218605a1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:6d:d9:c4:36:00:3c:ed:16:7d:cf:2e:f6:
1b:c8:a9:a4:ae:71:b0:cf:69:a1:d4:19:7a:df:78:
93:25:b6:46:7a:65:5d:b9:37:b3:0a:90:5a:b8:aa:
8d:8f:ff:7b:7e:ce:d9:60:9a:e3:f6:3e:bf:df:86:
d5:8d:72:3b:13:b8:c0:01:ab:0f:f6:0b:bf:e1:56:
cc:df:c0:a0:4f:7e:a0:90:44:78:e4:26:1a:1c:35:
5f:e4:da:c9:86:87:c0:46:d0:3c:62:f5:60:a1:06:
60:e2:25:d9:36:4c:f0:8e:28:40:04:f7:fc:69:9e:
6e:12:22:bd:b4:12:2b:2e:ac:fe:1c:6a:5e:d3:bc:
e2:d0:25:3d:22:52:ae:0a:07:74:1b:5d:a0:a0:98:
3e:ba:ee:9a:e2:9b:b2:9c:32:ae:6a:2f:44:25:9b:
84:77:3b:c8:1e:cf:4d:96:dd:30:ef:81:2d:76:f5:
9c:56:cb:26:f9:77:21:07:c8:7a:8d:f6:c2:8b:b5:
10:77:49:84:c2:8f:03:11:67:67:19:12:88:79:09:
87:76:4a:c5:42:95:37:0a:9e:c5:88:05:38:19:d8:
cc:61:cd:fd:61:10:ab:8e:d6:99:65:bb:34:33:87:
51:ce:e7:9a:af:4e:6d:f0:f4:1e:e4:9b:8e:57:7a:
4b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:71:E2:3E:F4:BA:1D:DD:90:76:47:C4:12:CE:C2:21:86:05:A1:CB
X509v3 Authority Key Identifier:
keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/OXHiPvS6Hd2QdkfEEs7CIYYFocs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.53.0/24
IPv6:
2001:67c:2488::/48
Signature Algorithm: sha256WithRSAEncryption
47:68:9f:56:d2:e4:63:5e:46:a0:a6:4d:04:3d:97:20:98:18:
82:7e:83:18:e8:cd:bf:9a:fb:df:b4:cd:3b:4d:89:5f:fc:43:
e3:eb:6e:d3:bd:19:aa:65:ca:41:80:56:99:69:ab:92:d6:4d:
ba:d6:53:54:88:d5:34:fa:f4:39:b4:bf:cf:56:58:36:de:2a:
42:3d:08:ca:e7:0e:39:26:84:4f:31:a1:d8:9e:a7:01:73:57:
ab:64:eb:7e:3e:75:c8:3b:0b:44:d4:ad:12:1f:d4:e4:84:59:
3e:39:cf:ef:9d:72:59:f4:43:47:bc:60:c5:13:f0:57:89:b2:
99:cd:7f:38:fb:a7:1d:19:72:d2:76:4e:ec:bb:78:a0:8c:a5:
a3:45:cc:91:1b:0f:90:b3:52:a7:c0:f6:66:1a:dc:c9:af:9d:
81:b4:e2:44:a6:8b:7f:5b:b1:e7:43:0c:13:1c:42:11:7e:d7:
c8:07:e4:c6:c3:3b:a1:46:c3:54:10:f0:0c:21:0d:03:1e:ef:
5d:b3:44:a7:03:06:38:84:c7:ff:9b:11:17:98:91:68:0a:38:
bf:da:10:d2:0e:6e:79:7a:26:be:ab:64:4e:84:42:a4:fd:a6:
09:62:51:d1:01:3f:22:0a:3c:64:64:b8:96:9b:f2:f8:4e:f2:
2e:b0:15:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:29:00 2024 by rpki-client on console-ams.rpki-client.org