Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/h82FZjOzmDW1kAQPMRSuOGBBhXI.roa
File: h82FZjOzmDW1kAQPMRSuOGBBhXI.roa (raw, json)
Hash identifier: hEZAbn1iK/oNsvZPyfy4EDvGIOUGaUw05aJufOJ5oOY=
Subject key identifier: 87:CD:85:66:33:B3:98:35:B5:90:04:0F:31:14:AE:38:60:41:85:72
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 01906DBD8F6C2461FB03B8ED715F565AFE5F
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/h82FZjOzmDW1kAQPMRSuOGBBhXI.roa
Signing time: Mon 01 Jul 2024 10:00:57 +0000
ROA not before: Mon 01 Jul 2024 10:00:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211056
IP address blocks: 92.114.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 18:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:bd:8f:6c:24:61:fb:03:b8:ed:71:5f:56:5a:fe:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jul 1 10:00:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87cd856633b39835b590040f3114ae3860418572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:19:f7:64:ec:c9:d3:fa:bf:ff:70:66:bc:
1a:9a:85:af:f2:a0:05:7e:c5:f7:2e:70:23:52:ce:
23:ee:f2:02:64:87:8e:62:db:57:01:e8:b2:b6:e0:
5c:f6:94:48:68:6a:77:6e:47:d4:03:36:56:cd:66:
c9:65:11:38:ba:24:e9:4f:9f:fc:21:d6:f9:0e:c6:
d2:74:52:7b:06:a4:d5:0e:5e:e7:67:7c:69:76:62:
bc:a5:9d:7e:de:33:b5:06:c8:f9:0e:5e:d3:ca:b6:
4b:0b:7b:fa:88:83:21:64:6b:74:62:cd:b3:1c:e2:
81:96:8d:26:8f:2c:ac:25:f8:e8:0d:f9:da:6a:37:
17:f0:a4:d2:93:e3:59:da:9e:85:5a:d0:eb:8f:d0:
7b:fc:4b:a1:ae:7c:ea:fc:df:0b:16:39:72:fa:9e:
58:9a:14:7c:7a:4c:fd:d7:b5:cf:3c:e0:26:11:67:
3b:14:33:27:44:0e:85:fe:42:bf:c5:96:9c:11:ec:
36:61:d0:52:00:8b:ce:ed:d5:9e:2e:ed:2d:10:fd:
23:0c:28:65:e2:cb:49:1e:4d:29:ec:67:3e:3f:20:
86:08:cd:0f:19:f0:98:97:f1:d1:3d:f2:1c:c1:7c:
30:e9:a2:08:8c:aa:06:6f:05:ed:46:51:70:e8:3e:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CD:85:66:33:B3:98:35:B5:90:04:0F:31:14:AE:38:60:41:85:72
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/h82FZjOzmDW1kAQPMRSuOGBBhXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.50.0/24
Signature Algorithm: sha256WithRSAEncryption
93:45:86:1e:0e:88:32:85:18:5e:1d:8b:03:a0:76:86:28:6a:
ca:82:94:25:60:96:f7:bf:0c:59:c1:db:f5:43:07:3d:cf:d4:
1d:09:71:8f:84:cf:9e:00:45:8e:f5:7f:85:30:35:49:58:3e:
6a:48:c8:45:12:ad:2f:18:1d:f3:ff:a2:08:84:45:b5:53:21:
b9:c5:5d:37:69:84:62:31:f0:51:66:74:a8:23:d2:73:d4:c6:
e2:6a:a3:bd:b1:23:ce:cd:3c:f1:0d:71:e7:58:c3:e2:32:45:
62:4c:88:c7:ea:af:82:77:7a:2b:25:7c:45:af:12:fb:5b:1e:
53:94:77:fe:4d:3b:eb:57:09:e1:79:b1:33:fe:79:11:31:b7:
ea:67:b3:ef:d9:82:3f:e0:f9:3f:cc:f5:b5:b7:d2:cf:23:6b:
6f:0b:2c:1a:97:c5:60:a4:1b:95:e7:34:57:da:46:49:28:b5:
af:64:ca:1b:82:65:c5:7c:87:a9:15:48:93:3c:19:bf:5f:66:
51:a1:0c:ce:64:90:02:02:24:64:c1:a3:74:2b:16:c2:ca:d6:
9f:34:85:67:f2:71:f1:1f:a0:e9:d2:83:1e:c7:68:df:bb:97:
28:75:fc:aa:bf:b7:db:e5:de:ac:11:1c:e7:88:6a:60:7f:ef:
3d:b6:7c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 03:48:20 2024 by rpki-client on console.sobornost.net