Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/AQsEHnFCH5rVPWcKh2RBIVIA01Q.roa
File: AQsEHnFCH5rVPWcKh2RBIVIA01Q.roa (raw, json)
Hash identifier: 4390srgu6UL/kkGnudRxQh09f3MbGXUhbfEY8FI2pjw=
Subject key identifier: 01:0B:04:1E:71:42:1F:9A:D5:3D:67:0A:87:64:41:21:52:00:D3:54
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018CC795903111416F3266487BE7115F345B
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/AQsEHnFCH5rVPWcKh2RBIVIA01Q.roa
Signing time: Tue 02 Jan 2024 00:31:56 +0000
ROA not before: Tue 02 Jan 2024 00:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 91.151.93.0/24 maxlen: 32
91.151.90.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:90:31:11:41:6f:32:66:48:7b:e7:11:5f:34:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 2 00:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=010b041e71421f9ad53d670a876441215200d354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:21:92:6b:45:1a:ad:4e:b0:a0:78:00:fd:
46:d8:ba:1e:4e:80:9b:05:db:27:98:c1:04:c8:9a:
90:92:c2:20:bf:1b:35:8f:8a:a9:d5:c7:d6:91:9b:
9e:57:3b:1a:7a:6a:04:1e:3e:fe:44:00:8d:93:e2:
25:c5:5b:22:d4:29:bf:33:72:4f:df:eb:3b:c8:71:
e3:5d:39:29:0a:6f:98:53:e3:b7:e5:02:1b:13:52:
c3:86:b0:29:0a:97:4f:82:72:3f:a8:2c:3c:e1:ca:
a7:ab:a9:22:8a:a9:57:4e:20:35:64:06:bb:f8:7c:
23:47:52:87:df:ac:7c:f9:53:d0:4e:e5:00:13:94:
2e:1f:8b:4a:73:ec:9a:6d:d1:bb:63:05:88:4e:16:
91:f4:0d:15:cc:0e:e6:84:09:02:9e:8f:80:83:50:
34:e6:cf:2d:ec:22:89:1b:43:3f:b8:c3:a7:bd:bc:
1e:cb:ca:d9:c0:cb:cc:5e:60:fc:2f:d4:c9:8b:2d:
76:57:fd:36:54:ca:53:36:12:5b:f6:e6:62:99:a5:
2b:75:0f:7b:8e:38:4e:ff:8f:52:9a:83:fa:a0:a1:
9c:41:b1:97:c9:2c:9d:e4:52:0b:b2:fe:7c:af:06:
29:de:11:7f:7c:1d:27:fd:0c:70:f0:2a:72:61:02:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0B:04:1E:71:42:1F:9A:D5:3D:67:0A:87:64:41:21:52:00:D3:54
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/AQsEHnFCH5rVPWcKh2RBIVIA01Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.90.0/24
91.151.93.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5e:0b:2e:ed:8c:57:13:de:fd:1d:b5:32:09:7c:fd:76:9e:
b5:bc:bb:37:ed:2b:1c:3f:af:96:d9:98:96:ce:93:58:2a:a5:
21:83:9c:40:d7:8d:20:fa:39:db:b1:b5:6d:38:f6:a5:af:e8:
48:78:08:fd:d8:b0:4d:3f:d7:6c:d9:4f:59:61:4d:49:98:ae:
6a:ce:e7:5e:69:17:04:ce:1e:8a:c0:11:45:0a:40:ba:db:68:
cc:87:16:e1:f0:eb:81:60:5b:0a:cd:96:f6:76:83:13:58:be:
b1:9c:03:ae:4e:00:0c:15:3d:e9:68:9b:e1:cf:9e:a4:23:94:
12:28:21:df:d2:14:f8:01:d6:c5:36:d1:ca:eb:f8:e9:e5:cc:
f8:df:a4:6d:46:3e:2e:80:41:c8:66:f8:25:6c:b9:85:bc:99:
08:5a:ca:7d:5c:db:0a:fd:2f:7d:c5:da:bf:0a:ca:eb:6c:fe:
b7:f9:bf:55:0c:9a:a6:a6:8e:fb:ff:f6:20:8f:95:ec:08:d0:
8b:f5:66:f4:d9:94:0e:6a:e5:5c:16:36:f0:d6:74:ec:19:2f:
57:85:e2:b1:1f:48:c8:02:8a:57:1c:f1:72:45:70:b8:82:15:
76:e2:78:12:72:fc:00:a8:7d:c8:54:0b:73:eb:fa:eb:ad:b9:
c8:1e:04:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:43 2024 by rpki-client on console-fra.rpki-client.org