Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/lVVchs12xJ05lpxK5TODIlvsFsU.roa
File: lVVchs12xJ05lpxK5TODIlvsFsU.roa (raw, json)
Hash identifier: Cn6tOyiXlSdkMA7RUJXAD0u+Qn0nGrtXiS6scNDP8H0=
Subject key identifier: 95:55:5C:86:CD:76:C4:9D:39:96:9C:4A:E5:33:83:22:5B:EC:16:C5
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018CC500AE521E842619F47B228A36E88C05
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/lVVchs12xJ05lpxK5TODIlvsFsU.roa
Signing time: Mon 01 Jan 2024 12:30:05 +0000
ROA not before: Mon 01 Jan 2024 12:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 91.190.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ae:52:1e:84:26:19:f4:7b:22:8a:36:e8:8c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 1 12:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95555c86cd76c49d39969c4ae53383225bec16c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:ad:05:ae:0c:83:50:16:af:fb:09:d3:dc:
59:29:bf:e9:2f:2c:f8:8b:fd:79:d7:06:6d:a6:a7:
28:3c:9b:b7:90:44:4a:85:40:61:f5:6f:12:87:8a:
ca:c8:e3:71:d6:ab:71:82:a7:55:3d:e8:8f:c2:f7:
4e:7d:97:3f:9b:41:f5:96:b0:ef:a8:68:cf:d7:b6:
c0:b7:b6:5a:5e:71:8c:cb:86:08:3d:b1:fd:1c:3d:
e0:ea:89:0d:34:04:9a:f5:9e:ab:5c:90:e9:a8:fb:
a3:97:3c:1d:56:e2:db:69:4d:52:b7:6f:8e:c9:a2:
23:7d:58:30:64:42:af:32:7c:f4:6e:8b:63:86:e0:
44:72:43:5c:c5:8b:1b:64:67:e4:be:a5:64:3e:d5:
83:f9:42:af:77:4c:33:dd:3f:66:a1:b7:4c:cb:45:
87:27:52:e9:74:cf:98:8c:5d:bd:cc:a2:6e:e7:6e:
01:e6:b6:7d:7c:a6:67:44:d3:09:07:b4:a4:b2:02:
aa:5c:43:92:91:02:9b:4f:8e:61:cb:4f:c3:43:0c:
86:c5:0f:90:e8:9c:d6:bf:1e:c5:35:17:df:c7:f3:
40:32:70:30:af:5e:a7:7a:23:b0:1b:93:77:2f:54:
77:06:42:45:99:0d:e6:89:8e:b5:73:7b:ba:ba:ff:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:55:5C:86:CD:76:C4:9D:39:96:9C:4A:E5:33:83:22:5B:EC:16:C5
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/lVVchs12xJ05lpxK5TODIlvsFsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.190.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:31:68:88:19:f7:43:73:52:b9:bf:22:60:d7:8d:c8:95:aa:
85:d6:a3:4f:f8:f1:06:2d:d2:14:8f:56:23:07:c8:d7:ac:4c:
98:d4:18:80:50:ff:8f:40:7e:d9:9a:3c:af:19:65:42:13:13:
4f:8f:74:01:63:79:ba:9a:5a:93:52:8f:3c:d4:c4:b2:7e:a7:
d6:87:c4:8b:f0:a2:e5:e0:4b:15:1f:db:bb:fa:ab:f9:71:4d:
f8:e3:ce:e1:1d:df:79:3f:e2:e2:95:d0:ce:3d:66:c5:24:26:
29:1a:9f:05:d9:f0:2d:0e:5e:ef:b0:79:0c:20:e4:35:6c:2c:
aa:15:92:b0:93:d0:b0:39:87:1d:72:ef:dc:d6:5b:9b:b1:64:
9f:af:cb:65:c8:e4:e4:0d:16:ef:86:d0:dd:f2:f6:b7:20:71:
fa:59:3c:0c:14:1e:0f:dd:70:af:94:f8:a5:7f:f9:82:c7:53:
b0:bd:ea:69:0e:ff:cd:8b:e1:31:7b:7a:78:b4:6f:02:ca:e2:
e9:a0:98:50:e6:6f:30:b1:d4:bd:34:10:98:6d:2e:9a:61:90:
07:52:ac:f6:7b:15:50:f2:3e:01:5b:4a:fa:09:15:4f:de:2a:
e3:8b:26:34:f7:11:15:4f:9f:c9:ef:c2:60:45:b9:b7:85:24:
55:bd:e3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:53:12 2024 by rpki-client on console-fra.rpki-client.org