Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/izM1rOi_GZnNmtA2DQoewbCOrkw.roa
File: izM1rOi_GZnNmtA2DQoewbCOrkw.roa (raw, json)
Hash identifier: c5WRxRQB47Jrl0S6gaSWb94bnoXn68di3nb/jsDE+as=
Subject key identifier: 8B:33:35:AC:E8:BF:19:99:CD:9A:D0:36:0D:0A:1E:C1:B0:8E:AE:4C
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 018CC6B7795A0B6C923FE70001179594FD49
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/izM1rOi_GZnNmtA2DQoewbCOrkw.roa
Signing time: Mon 01 Jan 2024 20:29:22 +0000
ROA not before: Mon 01 Jan 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197138
IP address blocks: 91.188.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 04:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:79:5a:0b:6c:92:3f:e7:00:01:17:95:94:fd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b3335ace8bf1999cd9ad0360d0a1ec1b08eae4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:14:03:13:e0:d8:6b:a5:16:f4:90:5f:3b:
f1:18:1a:45:f8:ab:cf:c8:d6:a9:89:7f:61:a0:5a:
c5:98:c2:15:2e:14:78:7c:79:52:f1:2e:a7:68:13:
f3:a1:96:1f:db:40:e9:a5:88:dd:77:71:83:c4:01:
54:e5:fe:8e:00:f7:3d:3e:77:64:17:45:a0:9b:21:
4b:4a:3a:e0:16:3a:ad:79:32:dc:26:f8:8a:69:85:
ff:47:56:c3:b4:83:30:27:cb:42:a7:a7:59:4f:a8:
6f:35:49:ec:62:57:2c:ee:e3:da:b8:30:ea:c7:1d:
ca:f7:5d:ae:9d:06:09:ce:10:24:cb:09:fc:7b:38:
7d:20:f1:26:85:c6:48:7b:de:5a:a7:3d:b4:68:b1:
40:4f:a0:7e:6d:87:87:b4:2d:85:4a:7c:a9:b7:4e:
72:9c:9f:7c:ee:ac:38:f5:f0:03:bf:5b:f6:6a:59:
27:b6:d8:3d:9d:76:4c:c6:60:9f:2b:89:c2:8a:ec:
a1:9a:86:c7:a2:42:dc:4a:71:c8:67:d7:99:df:77:
69:e6:5b:0e:11:3d:1c:ed:1a:d0:4b:c5:af:81:29:
f7:0a:56:e1:d9:cb:a7:6c:d1:83:a9:c6:7d:66:ec:
bd:97:e5:da:6d:8b:b8:d8:be:ed:ee:f2:69:6c:1b:
2d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:33:35:AC:E8:BF:19:99:CD:9A:D0:36:0D:0A:1E:C1:B0:8E:AE:4C
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/izM1rOi_GZnNmtA2DQoewbCOrkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.77.0/24
Signature Algorithm: sha256WithRSAEncryption
78:3a:0d:00:6a:99:97:74:60:23:d8:41:14:7a:a6:9d:2c:4b:
54:00:da:bc:ce:9f:ab:54:e9:44:1e:3a:5b:e9:19:18:ba:1b:
58:8e:9e:12:19:b2:c8:f7:9a:cc:16:28:dc:8c:13:6d:f7:29:
0c:98:eb:3a:27:35:b9:04:57:3b:7f:02:f3:58:14:f4:4d:55:
79:56:6f:e8:ec:f7:c4:e8:c7:9b:44:cc:98:e9:6e:8a:31:e4:
1c:06:24:ea:34:d7:b8:d6:5c:bb:ac:e3:ff:fd:7e:3d:f6:4b:
83:e8:09:fc:e1:ae:31:18:66:df:54:c7:1a:70:e0:81:36:f3:
0d:07:e2:2b:9f:92:7e:4d:f2:c9:b0:00:29:67:4c:81:e7:f1:
df:9b:24:4f:20:a7:bf:bc:21:ac:4e:c0:81:6a:00:4a:d6:87:
1e:d7:78:8c:c4:51:97:4e:3b:08:18:1e:89:67:f9:4b:18:6a:
37:7d:f4:89:41:79:1b:99:a2:16:65:85:5f:fd:eb:e8:91:6d:
f4:7f:cd:0a:c2:05:01:13:23:e8:a8:00:5d:d7:63:0b:fa:9d:
3f:42:43:c4:8b:39:4a:a3:c0:4a:2f:67:82:35:68:be:a7:af:
f4:5e:a2:f5:07:7f:e2:fe:19:d4:e3:ad:e5:74:83:8c:d9:4b:
e6:bd:9d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:31:08 2024 by rpki-client on console-ams.rpki-client.org