Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/Ioyw5xiFwKI97ZOpjAdcNbj45X8.roa
File: Ioyw5xiFwKI97ZOpjAdcNbj45X8.roa (raw, json)
Hash identifier: H9urIGWKpT82qo8X+Cd3B/L1EyAP0RsRyicHUuIG0oQ=
Subject key identifier: 22:8C:B0:E7:18:85:C0:A2:3D:ED:93:A9:8C:07:5C:35:B8:F8:E5:7F
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 018CC3B6E9D99771025B37D9FE4F792785E3
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/Ioyw5xiFwKI97ZOpjAdcNbj45X8.roa
Signing time: Mon 01 Jan 2024 06:29:53 +0000
ROA not before: Mon 01 Jan 2024 06:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6696
IP address blocks: 91.216.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e9:d9:97:71:02:5b:37:d9:fe:4f:79:27:85:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Jan 1 06:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=228cb0e71885c0a23ded93a98c075c35b8f8e57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:54:d3:cb:58:7e:83:1b:e9:5a:5b:09:58:
cf:16:d5:50:ba:81:3c:58:12:45:f5:8b:b1:75:33:
73:2f:8a:34:1d:32:d6:36:c2:19:7c:b6:74:61:76:
39:0e:6e:72:12:a2:23:49:32:79:c4:64:da:07:d0:
0b:00:32:01:cb:a0:f8:0e:f0:91:f8:8c:9d:a9:8e:
3c:6f:e6:aa:a1:2d:ee:58:36:a3:f6:82:db:63:f9:
da:a8:26:0a:e8:13:24:3c:ff:e8:fc:bb:da:a4:99:
e8:20:09:bf:07:95:98:5b:e8:49:ff:39:0f:0f:9d:
25:ea:86:eb:e6:61:6e:8a:b7:42:8d:47:bc:e5:6c:
f1:a4:92:ed:6f:98:fa:02:e8:17:84:c9:2d:32:ac:
d1:46:cf:85:4d:d8:c1:59:c7:1a:1a:1f:7c:10:7a:
ad:d8:6a:90:5d:ec:7b:8b:79:c5:bd:17:46:48:43:
1a:0f:58:1f:fe:95:9d:40:39:46:fa:c3:b9:d5:e7:
00:da:89:9e:93:e8:43:f5:89:38:22:94:f3:81:68:
be:9c:5c:db:b4:bf:53:4d:eb:75:bd:7f:38:c9:d5:
3b:b7:37:ac:6a:02:02:56:17:05:d9:5a:7e:29:c7:
92:28:58:49:6b:a4:8b:9f:e1:ef:99:47:f9:ae:5c:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8C:B0:E7:18:85:C0:A2:3D:ED:93:A9:8C:07:5C:35:B8:F8:E5:7F
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/Ioyw5xiFwKI97ZOpjAdcNbj45X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.145.0/24
Signature Algorithm: sha256WithRSAEncryption
43:61:6c:ec:5b:6a:0c:b7:72:c0:3f:4d:64:50:fb:f5:a9:d1:
08:ba:4c:38:41:fd:ab:1a:3a:58:54:2c:dd:16:1e:e0:66:44:
1e:35:9d:95:66:2d:3d:b7:3a:50:8f:e8:64:b8:18:93:05:5d:
04:ff:1c:29:a8:59:f3:7f:2b:7c:75:44:19:e3:d6:1a:ef:80:
03:2d:47:e5:29:b7:60:1e:8d:65:20:18:2c:9d:cf:26:47:34:
0b:6e:d3:07:04:0f:e0:8a:55:32:a6:4b:68:05:7c:33:77:f1:
ae:de:26:37:de:03:71:ce:e3:16:f3:c5:6d:50:a9:6e:6a:27:
3f:16:76:38:e0:55:76:35:9f:ae:3c:0a:00:e6:1f:2d:8f:1e:
48:b5:fa:db:02:50:1d:35:e4:2d:55:56:05:97:a7:73:09:8a:
3d:be:9b:60:73:7b:a2:c4:fd:92:d3:1e:a0:25:aa:d0:08:5b:
c6:b6:99:ae:66:aa:26:90:5c:bd:79:e9:e2:16:c3:4d:c1:80:
08:9c:4c:45:3a:5e:71:00:83:f0:a3:8f:06:b6:d4:d0:64:9a:
02:5a:fb:cf:48:32:c2:c6:df:23:8b:29:8b:2e:42:3e:aa:70:
fd:1f:89:c9:f1:bd:61:bb:41:cf:1d:23:45:f0:71:b5:fd:c7:
b7:58:48:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:46:48 2024 by rpki-client on console-fra.rpki-client.org