Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/4eUF8UOZX5FMNqdUI28BW7117IU.roa
File: 4eUF8UOZX5FMNqdUI28BW7117IU.roa (raw, json)
Hash identifier: ldb9vL8gVRh/junCrsg7RSQ8N/KcrR63tXvc8ZfPcmU=
Subject key identifier: E1:E5:05:F1:43:99:5F:91:4C:36:A7:54:23:6F:01:5B:BD:75:EC:85
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 018FD341489933FEBBAE376A3DFBBEF87311
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/4eUF8UOZX5FMNqdUI28BW7117IU.roa
Signing time: Sat 01 Jun 2024 10:03:42 +0000
ROA not before: Sat 01 Jun 2024 10:03:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59117
IP address blocks: 91.192.107.0/24 maxlen: 24
91.193.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d3:41:48:99:33:fe:bb:ae:37:6a:3d:fb:be:f8:73:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Jun 1 10:03:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1e505f143995f914c36a754236f015bbd75ec85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:ea:c0:d9:cf:87:68:fb:33:dc:a5:4c:e8:
ed:db:aa:08:4d:c9:45:36:f7:4c:4a:82:67:3a:f7:
76:28:65:c6:54:b2:90:f1:90:11:b3:f7:93:bc:07:
e7:02:e0:c2:53:80:50:1f:da:e2:6f:a9:71:88:5a:
1d:d1:25:a8:b4:e5:6d:e4:5a:d5:e6:56:ce:71:c2:
6e:13:ec:ed:e1:a1:aa:da:66:17:90:09:8e:c0:6a:
12:c8:fc:4f:a0:6e:ab:2e:73:78:35:c9:b7:fe:04:
4d:5c:b2:1f:b6:2e:2c:83:49:60:63:10:08:f6:93:
1d:97:0c:eb:09:23:e3:72:44:19:6b:54:22:99:09:
da:d3:06:8c:87:ca:03:bd:7f:0d:68:89:4a:90:38:
d0:15:8f:5d:f5:bb:1e:6a:bd:c2:34:6e:f3:d4:98:
89:32:80:4a:ea:ca:01:33:8a:65:7e:7a:56:76:ba:
d7:d3:f4:b6:31:cd:8c:f0:f0:79:06:53:59:f3:b8:
d0:68:b0:96:a9:30:3f:9c:d3:da:c5:8e:f5:b1:35:
fe:14:db:ec:83:02:c0:08:e3:b9:76:8a:c3:f8:c0:
6b:91:ba:50:fe:3d:02:42:ab:1e:9e:65:ea:d8:73:
69:50:d3:99:37:e7:71:79:d5:9d:89:80:aa:78:6f:
c5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E5:05:F1:43:99:5F:91:4C:36:A7:54:23:6F:01:5B:BD:75:EC:85
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/4eUF8UOZX5FMNqdUI28BW7117IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.107.0/24
91.193.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:19:57:3f:03:62:9e:64:fe:3b:8b:61:aa:ee:66:92:31:28:
da:7a:30:21:1d:23:be:ab:11:73:3d:77:8e:12:3f:38:f1:04:
85:a9:15:82:ac:d2:d6:55:b9:59:e6:a1:09:f3:9b:cc:a7:89:
a9:26:37:0f:0a:1c:c4:63:5e:72:7d:68:f6:81:70:64:43:54:
b1:75:5f:fa:18:de:50:55:05:c5:bb:f1:1d:f8:6e:bc:d3:ce:
13:f0:a2:d1:1e:62:99:37:2e:f3:f7:b3:b3:e7:9c:28:1a:37:
fa:7a:21:a5:59:ce:79:89:dd:7f:1b:99:3e:47:02:9e:ef:37:
06:a9:8e:69:68:95:8d:11:17:18:42:e1:2b:30:c5:86:17:c4:
3f:12:1c:6e:00:f3:60:94:46:12:26:8a:02:34:61:a5:15:ae:
47:bf:db:8d:3d:05:30:83:a5:43:70:5c:61:cd:be:db:e6:75:
42:a6:de:9b:48:a9:7d:72:3e:e7:15:bc:06:28:f5:c2:4a:50:
98:34:cb:e4:52:91:f4:85:aa:e5:4d:ca:37:9d:cc:c2:0a:72:
87:01:8f:ea:5c:66:10:f4:9b:3b:d5:6f:85:9f:ef:2e:15:9d:
11:c2:29:ee:f4:2b:33:cd:2f:e9:bb:3e:31:18:32:66:ca:16:
2a:1d:7a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 06:17:00 2024 by rpki-client on console-ams.rpki-client.org