Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/4klEUpU_rwrm60SGTlpVnceuCDQ.roa
File: 4klEUpU_rwrm60SGTlpVnceuCDQ.roa (raw, json)
Hash identifier: Z2oPr0Ydpai/O1LOVH2OHqY+34T/xnl0mgOqPIXuDGc=
Subject key identifier: E2:49:44:52:95:3F:AF:0A:E6:EB:44:86:4E:5A:55:9D:C7:AE:08:34
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 018CC348CB6012E2615F0B68A8D5DE4BBE64
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/4klEUpU_rwrm60SGTlpVnceuCDQ.roa
Signing time: Mon 01 Jan 2024 04:29:36 +0000
ROA not before: Mon 01 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61060
IP address blocks: 91.244.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:cb:60:12:e2:61:5f:0b:68:a8:d5:de:4b:be:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jan 1 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2494452953faf0ae6eb44864e5a559dc7ae0834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6a:49:8c:61:65:2d:0d:db:31:bf:4d:c3:d0:
5d:33:4f:a8:71:81:e5:66:4e:13:62:d0:e7:f5:8a:
b3:3c:46:d0:81:39:69:5e:9a:c7:b5:26:eb:bb:3c:
93:eb:32:26:f6:52:98:ee:f7:4f:90:7a:ba:7a:18:
69:cb:b6:78:b7:30:1f:f8:cf:84:4f:27:7b:8a:20:
ab:b6:89:de:c7:73:19:0d:fa:d0:1a:92:04:a7:94:
98:cb:74:45:fb:00:31:b9:b9:16:51:39:cb:8d:63:
3e:b4:da:8c:e6:5d:1e:b7:65:c0:b7:04:11:55:ea:
41:00:a8:12:66:e2:5c:49:3c:db:41:5b:17:6f:4c:
65:7d:92:fa:86:00:bb:45:d0:20:0f:6b:78:92:33:
3c:d5:50:83:9e:ef:4c:4f:f5:a3:06:52:f3:23:f6:
86:87:7a:66:a4:11:a6:8a:8f:69:3a:ed:64:a2:f7:
e3:b2:cb:53:96:9e:bb:7f:88:10:c4:90:a4:14:5b:
58:27:f3:30:e9:35:69:5e:03:e2:01:60:cf:93:ce:
54:8e:1d:39:2a:52:e0:a4:e0:45:ec:06:63:b2:c3:
07:e9:bb:41:71:59:2b:6d:6b:4c:ca:a5:a6:94:b3:
3a:31:ba:45:5d:d6:85:4f:49:a4:8e:31:b6:9c:80:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:49:44:52:95:3F:AF:0A:E6:EB:44:86:4E:5A:55:9D:C7:AE:08:34
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/4klEUpU_rwrm60SGTlpVnceuCDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.224.0/24
Signature Algorithm: sha256WithRSAEncryption
66:bc:ce:16:ab:0d:77:8c:e0:95:23:15:de:b1:45:01:6c:44:
3f:65:5f:3c:fe:ad:34:25:e6:aa:bf:47:9f:46:9a:4e:5f:bc:
a3:50:6a:17:67:c4:e2:f9:fe:84:35:da:6d:c4:29:f6:8c:df:
b3:05:7f:07:04:df:2a:2a:12:d4:6f:2a:30:80:04:5d:98:74:
8f:e3:32:82:c8:68:d4:2b:56:60:ce:8d:64:8c:f3:f6:d2:bb:
cc:88:44:ac:7b:11:db:bc:15:c2:64:e9:c3:64:6a:65:eb:1d:
fc:74:2f:8b:b6:ef:01:59:06:4e:28:f4:70:49:03:a9:26:ab:
15:b6:e1:ea:04:08:af:b5:ec:c8:36:ba:2d:e0:4f:89:11:80:
d0:e8:42:3f:24:eb:04:41:ea:da:da:97:4b:ac:33:bc:c7:c9:
77:3a:c7:8a:24:1f:76:24:92:d1:af:2c:29:82:57:fc:1c:7d:
a1:c6:82:0f:81:45:b3:ee:32:d9:9c:1c:c9:2a:d7:7d:f1:0b:
eb:0c:41:f6:2e:e1:b5:57:78:bc:27:f5:9f:b2:11:78:f0:aa:
bf:2c:52:46:ff:65:bd:05:76:57:52:34:24:9a:5c:4f:c5:5e:
ab:c2:70:50:ac:de:48:62:32:96:d6:7f:c0:86:69:38:bb:db:
63:1e:d6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:47:52 2024 by rpki-client on console-ams.rpki-client.org