Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/4fjv0-CH9yyODA5BafOaU9ML3y4.roa
File: 4fjv0-CH9yyODA5BafOaU9ML3y4.roa (raw, json)
Hash identifier: GQmVNi9CXj8GQqnH68LXDMZ50UNvBTYVxOjzTLTnys0=
Subject key identifier: E1:F8:EF:D3:E0:87:F7:2C:8E:0C:0E:41:69:F3:9A:53:D3:0B:DF:2E
Certificate issuer: /CN=582ac3589fc539ab852690f85d9f3f7f234ec39b
Certificate serial: 018CCA998F20F4E93B62F2D1BB622E9D5710
Authority key identifier: 58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/4fjv0-CH9yyODA5BafOaU9ML3y4.roa
Signing time: Tue 02 Jan 2024 14:35:10 +0000
ROA not before: Tue 02 Jan 2024 14:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5610
IP address blocks: 91.191.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:8f:20:f4:e9:3b:62:f2:d1:bb:62:2e:9d:57:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582ac3589fc539ab852690f85d9f3f7f234ec39b
Validity
Not Before: Jan 2 14:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1f8efd3e087f72c8e0c0e4169f39a53d30bdf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:c3:cd:9c:cd:36:61:2d:7b:a5:0d:39:ad:
37:c2:21:82:5d:28:cf:53:69:d1:c6:2a:39:f1:b8:
cd:af:ac:f9:b4:cd:07:8a:1d:7a:a8:10:39:1a:9f:
5e:db:df:91:2d:8f:0c:5c:f4:95:9b:24:8e:2f:9e:
2c:7f:87:57:c6:d1:7e:e9:fb:c3:16:9e:a7:73:34:
40:12:49:b9:91:b3:84:a1:14:48:4f:f9:99:a4:b1:
45:b6:77:c1:ac:b8:b6:5a:d5:bc:02:11:eb:00:8d:
51:82:ae:a0:55:f9:6c:5d:9d:cc:5f:55:9a:30:f9:
15:14:04:07:fb:65:75:fc:af:de:53:bf:e4:ed:01:
ca:95:1d:71:7e:63:10:02:a3:fb:42:2b:c0:64:fb:
a4:8c:34:4f:04:ad:95:e1:a9:39:d3:40:bd:6a:22:
c0:9b:ef:19:8f:aa:0f:f7:3e:3d:0f:5b:0d:27:84:
91:74:06:0d:a2:24:7c:41:db:67:f3:b8:b8:80:46:
7f:ff:c7:1e:a2:a4:50:e4:30:4b:54:e4:c1:b1:9a:
2d:88:a4:02:dd:06:f1:be:66:cb:f6:b4:2e:32:71:
7c:d4:75:f8:d9:5e:ed:7c:c7:f9:0a:1f:43:11:e4:
f3:ba:c5:73:4f:d2:96:c9:e6:17:2d:7d:7b:7a:9d:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F8:EF:D3:E0:87:F7:2C:8E:0C:0E:41:69:F3:9A:53:D3:0B:DF:2E
X509v3 Authority Key Identifier:
keyid:58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/4fjv0-CH9yyODA5BafOaU9ML3y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.191.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1b:1e:90:05:e0:04:06:c8:23:c9:ca:2a:1e:f0:c1:7a:94:c1:
d1:98:8a:03:92:1b:e2:2e:99:1c:1b:a6:32:f2:e9:56:7e:e5:
4c:5d:8d:69:ed:b4:9f:5c:ea:53:e2:e5:e6:20:ec:54:9b:bc:
52:f6:f1:72:81:9e:93:0c:c2:2a:cd:51:93:d9:98:d8:57:84:
a3:d5:21:f3:b3:cd:23:00:ac:09:9b:16:9d:d9:c4:90:31:10:
5b:ba:ad:c8:1d:12:0f:f9:29:0e:37:c4:ee:73:cf:aa:38:4b:
7a:d9:ca:03:94:b0:e8:5e:17:61:e9:4e:79:5e:8f:18:be:e5:
1c:fe:39:8a:3e:c7:6c:66:28:e2:c0:f6:ff:90:ee:ca:96:f7:
8f:93:e0:14:37:7e:d9:1f:b5:2d:64:08:61:45:fe:49:d6:27:
f0:c8:79:4e:0f:c0:48:dc:04:21:c9:25:c9:dc:00:f7:d1:97:
aa:cf:89:5d:2c:8d:97:f9:a4:6a:2d:c1:3a:04:6f:d6:a9:69:
47:d1:ce:58:3b:47:93:71:37:64:84:b0:a2:f7:2b:69:6d:bf:
49:d1:6c:63:70:3b:69:60:4c:77:2d:29:d2:99:07:de:8d:59:
df:a4:b9:8a:e7:96:94:20:44:b4:52:54:b7:f2:36:d2:5e:fe:
c6:76:eb:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKmY8g9Ok7YvLRu2IunVcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmFjMzU4OWZjNTM5YWI4NTI2OTBmODVkOWYzZjdmMjM0
ZWMzOWIwHhcNMjQwMTAyMTQzNTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWY4ZWZkM2UwODdmNzJjOGUwYzBlNDE2OWYzOWE1M2QzMGJkZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/fDzZzNNmEte6UNOa03wiGCXSjP
U2nRxio58bjNr6z5tM0Hih16qBA5Gp9e29+RLY8MXPSVmySOL54sf4dXxtF+6fvD
Fp6nczRAEkm5kbOEoRRIT/mZpLFFtnfBrLi2WtW8AhHrAI1Rgq6gVflsXZ3MX1Wa
MPkVFAQH+2V1/K/eU7/k7QHKlR1xfmMQAqP7QivAZPukjDRPBK2V4ak500C9aiLA
m+8Zj6oP9z49D1sNJ4SRdAYNoiR8Qdtn87i4gEZ//8ceoqRQ5DBLVOTBsZotiKQC
3QbxvmbL9rQuMnF81HX42V7tfMf5Ch9DEeTzusVzT9KWyeYXLX17ep0F3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOH479Pgh/csjgwOQWnzmlPTC98uMB8GA1UdIwQY
MBaAFFgqw1ifxTmrhSaQ+F2fP38jTsObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0NyRFdKX0ZPYXVGSnBENFhaOF9meU5PdzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wMDE1ZDMtMWIyMS00ZTU1LTg1MGIt
Njc0MzI4ZDUyYmQ3LzEvNGZqdjAtQ0g5eXlPREE1QmFmT2FVOU1MM3k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wMDE1ZDMtMWIyMS00ZTU1LTg1MGItNjc0MzI4ZDUyYmQ3
LzEvV0NyRFdKX0ZPYXVGSnBENFhaOF9meU5PdzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGW79AMA0G
CSqGSIb3DQEBCwUAA4IBAQAbHpAF4AQGyCPJyioe8MF6lMHRmIoDkhviLpkcG6Yy
8ulWfuVMXY1p7bSfXOpT4uXmIOxUm7xS9vFygZ6TDMIqzVGT2ZjYV4Sj1SHzs80j
AKwJmxad2cSQMRBbuq3IHRIP+SkON8Tuc8+qOEt62coDlLDoXhdh6U55Xo8YvuUc
/jmKPsdsZijiwPb/kO7KlvePk+AUN37ZH7UtZAhhRf5J1ifwyHlOD8BI3AQhySXJ
3AD30Zeqz4ldLI2X+aRqLcE6BG/WqWlH0c5YO0eTcTdkhLCi9ytpbb9J0WxjcDtp
YEx3LSnSmQfejVnfpLmK55aUIES0UlS38jbSXv7Gduua
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:33:38 2024 by rpki-client on console-fra.rpki-client.org