Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/D53uLKyuE4Z45hynwp4tjiVQsWs.roa
File: D53uLKyuE4Z45hynwp4tjiVQsWs.roa (raw, json)
Hash identifier: D/4hUT0r/kIOdkX5b8kUFtMAB2ceBYHvONthwA6MRfM=
Subject key identifier: 0F:9D:EE:2C:AC:AE:13:86:78:E6:1C:A7:C2:9E:2D:8E:25:50:B1:6B
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018EA3A94D959E5A61DC9CFD73004E9194EB
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/D53uLKyuE4Z45hynwp4tjiVQsWs.roa
Signing time: Wed 03 Apr 2024 11:12:45 +0000
ROA not before: Wed 03 Apr 2024 11:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149766
IP address blocks: 91.210.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:a9:4d:95:9e:5a:61:dc:9c:fd:73:00:4e:91:94:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 3 11:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f9dee2cacae138678e61ca7c29e2d8e2550b16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:e9:06:4a:77:3a:aa:c5:75:82:88:3f:01:
71:39:b1:ef:f3:35:2e:30:6c:29:2d:13:6c:bf:ce:
b7:06:d1:2e:1b:3b:42:84:ea:1d:e5:56:30:9b:cd:
7f:0c:20:05:49:3f:20:43:f5:9d:f3:3a:7c:eb:65:
53:0d:80:0b:01:ab:10:f4:4b:fc:6d:3e:e5:26:2d:
a0:cd:cc:19:56:17:dd:cc:f6:a8:a7:be:ea:b6:30:
f2:67:c3:4f:ab:26:6b:af:ca:a1:e9:e3:8f:9f:eb:
24:0f:cd:df:67:42:b3:6b:73:dd:ca:8f:0b:74:33:
61:b7:0e:d6:91:74:c8:d1:78:1c:1c:64:71:2c:02:
b9:e1:a3:3a:55:44:89:c1:08:c3:72:0a:17:55:e9:
1b:80:ec:69:d3:75:17:05:eb:23:60:b5:a2:43:a4:
b2:e5:f8:a0:81:df:99:31:8d:8f:fe:e3:0f:99:d1:
cb:cf:dc:9c:ae:98:5e:7f:cd:f4:49:bb:60:88:84:
2d:24:d3:19:ae:dc:98:21:ae:1f:d0:41:01:39:e2:
10:31:dc:39:b0:c0:e3:d2:be:c0:23:5f:3b:49:fa:
00:81:3a:f1:67:5a:02:34:0a:cc:e8:37:cf:1c:92:
c9:6d:1a:8a:69:ee:9c:6e:1f:67:d3:09:03:fc:f5:
22:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9D:EE:2C:AC:AE:13:86:78:E6:1C:A7:C2:9E:2D:8E:25:50:B1:6B
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/D53uLKyuE4Z45hynwp4tjiVQsWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.146.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9d:bc:c6:9c:00:84:2c:fb:1f:88:cd:a1:62:e7:3a:47:ca:
1c:d1:a0:79:58:9f:d0:3c:9a:df:4e:78:ce:31:21:6e:8d:48:
2e:3c:c4:23:51:d9:1f:ad:69:21:3f:32:f7:30:2d:c5:48:f1:
f4:61:41:ed:f9:5b:37:77:eb:2c:51:89:7f:29:a8:5d:3d:2e:
c4:24:c2:05:e9:3d:4d:d4:91:c8:03:02:19:f7:3c:b9:e0:ae:
8a:68:bb:12:f7:dc:94:06:dd:31:6d:c4:a2:18:ad:ce:82:51:
48:aa:8c:5e:27:60:89:a4:0a:60:89:cf:b5:ed:f7:a6:d3:0d:
9e:39:bf:5f:21:c0:ea:bc:98:61:39:81:31:cb:1a:8a:b8:75:
4a:a2:18:b8:09:15:82:4a:5e:b3:39:de:01:30:01:69:82:2b:
cb:02:35:27:a2:ad:ba:04:b3:d4:0d:ba:d7:ff:31:10:1e:60:
a7:42:17:6d:1e:e9:76:1b:e5:08:83:a4:83:73:85:ea:7b:c1:
cf:46:6d:ab:d2:da:94:10:cb:6f:ee:a3:42:dc:3f:33:c5:b8:
bd:16:7a:80:3c:39:27:1e:70:41:1e:2b:d4:15:8d:11:14:97:
b1:31:d0:44:fd:c3:1d:6e:74:f2:be:a1:c0:f9:84:79:33:b2:
eb:06:26:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:43:37 2024 by rpki-client on console-fra.rpki-client.org