Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/_CYYQMb12A-QUl_0Vvaa4yG0eu0.roa
File: _CYYQMb12A-QUl_0Vvaa4yG0eu0.roa (raw, json)
Hash identifier: rEZP7P75P1yr5gLvpSBxkAaL0nWgWcp6AIpn+E9WamY=
Subject key identifier: FC:26:18:40:C6:F5:D8:0F:90:52:5F:F4:56:F6:9A:E3:21:B4:7A:ED
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 018CC8DF15571DB2341226EF7A0FB34DA083
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/_CYYQMb12A-QUl_0Vvaa4yG0eu0.roa
Signing time: Tue 02 Jan 2024 06:31:52 +0000
ROA not before: Tue 02 Jan 2024 06:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47973
IP address blocks: 91.103.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:15:57:1d:b2:34:12:26:ef:7a:0f:b3:4d:a0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Jan 2 06:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc261840c6f5d80f90525ff456f69ae321b47aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:75:c1:8c:93:72:99:66:fb:de:4b:47:9b:
39:14:d5:1d:93:42:89:a4:1a:41:b3:2d:a4:e2:c0:
e2:55:12:5d:66:72:24:8f:be:fe:9a:b7:ed:8a:62:
dc:af:10:60:29:fd:a6:79:48:71:21:e0:59:11:cf:
b2:48:93:cc:26:bd:29:1a:ae:5a:4a:93:39:ea:04:
f0:07:fb:5c:e2:23:37:cb:ee:6d:7d:2e:58:14:d2:
70:c9:b1:1f:22:29:07:40:be:ca:e3:7c:76:62:e8:
83:f1:36:5f:45:d2:b3:17:b0:bf:ac:20:54:5c:9a:
51:b0:fc:f7:93:ad:c2:65:95:e1:f0:ee:c4:ce:80:
13:f3:eb:72:57:68:bf:26:5e:c1:c6:a8:5f:28:28:
2a:a6:33:bf:ec:a6:b2:5c:2b:b1:f9:78:36:8f:33:
bc:27:c6:bb:43:84:87:86:0a:2e:43:58:b1:09:53:
de:20:fb:60:b1:c9:10:da:24:a4:e5:af:8c:0a:9b:
b0:50:15:da:5c:77:29:4c:cd:4e:25:fc:44:f8:cf:
a9:01:0a:79:bf:e3:84:3d:e3:bc:96:fb:8f:9e:a7:
cf:36:d1:f3:46:6b:c8:6b:0d:1a:94:a2:2d:b0:f4:
0e:38:5d:fc:fa:bc:4c:99:07:ae:1e:64:21:9c:d7:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:26:18:40:C6:F5:D8:0F:90:52:5F:F4:56:F6:9A:E3:21:B4:7A:ED
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/_CYYQMb12A-QUl_0Vvaa4yG0eu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.83.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:19:c5:b4:ce:80:42:2c:b9:b2:8b:ae:ab:55:b0:8d:14:83:
df:c3:81:a6:11:d2:52:62:d0:73:fa:8a:a0:cd:7d:a7:5f:e8:
ee:c8:16:ad:7f:63:28:90:b3:e5:eb:b1:b2:11:50:12:01:6b:
c1:a1:bf:87:ea:80:38:c9:a6:6e:9a:1c:a6:6a:17:f0:4b:61:
f3:40:32:d8:fd:2c:39:5f:c3:a9:dd:07:0a:16:fb:7d:7d:2e:
03:c4:d4:21:19:89:fb:d6:6d:5b:aa:bd:21:08:4a:6a:1e:8c:
45:ab:15:7a:da:ff:a1:2a:61:6a:4d:f5:15:ad:53:80:3a:01:
39:b3:7e:27:05:11:7f:41:73:4b:5b:70:2d:80:fa:6e:61:97:
45:d5:bf:8a:5a:68:b1:13:29:bb:ba:25:8d:91:da:3c:8c:ff:
30:86:a4:ed:a5:1e:1d:89:5c:a8:cb:6e:ee:11:05:b0:eb:df:
e4:0b:25:9f:46:c5:fb:f9:c1:e6:9a:9a:64:03:4e:be:11:b8:
5e:8b:bd:9b:86:85:f3:5f:4e:29:46:75:5f:02:68:86:fb:0e:
01:de:98:3f:40:5d:68:3e:f3:a9:7c:c2:9a:e1:89:b9:15:82:
c1:a8:e8:1d:50:7b:a3:a0:0a:59:55:fa:e5:4b:09:3a:25:5e:
75:47:a4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 16:55:57 2024 by rpki-client on console-fra.rpki-client.org