Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/IUM674QMOxM_BRXAaj8hviGA7Mg.roa
File: IUM674QMOxM_BRXAaj8hviGA7Mg.roa (raw, json)
Hash identifier: sWbMmjI9npO8CAjRiSOMuBHs3mupFuAv36Hy7Uh5yVM=
Subject key identifier: 21:43:3A:EF:84:0C:3B:13:3F:05:15:C0:6A:3F:21:BE:21:80:EC:C8
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 018CC2DB1E6386386C5C089B21D4DE823426
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/IUM674QMOxM_BRXAaj8hviGA7Mg.roa
Signing time: Mon 01 Jan 2024 02:29:49 +0000
ROA not before: Mon 01 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198090
IP address blocks: 91.231.165.0/24 maxlen: 24
91.231.166.0/24 maxlen: 24
91.231.164.0/24 maxlen: 24
91.231.164.0/22 maxlen: 22
91.231.167.0/24 maxlen: 24
91.199.170.0/24 maxlen: 24
185.114.82.0/24 maxlen: 24
185.114.83.0/24 maxlen: 24
185.114.80.0/24 maxlen: 24
185.114.81.0/24 maxlen: 24
185.114.80.0/22 maxlen: 22
185.30.70.0/24 maxlen: 24
185.30.71.0/24 maxlen: 24
185.30.68.0/24 maxlen: 24
185.30.69.0/24 maxlen: 24
185.30.68.0/22 maxlen: 22
91.237.16.0/23 maxlen: 23
91.237.17.0/24 maxlen: 24
91.237.16.0/24 maxlen: 24
185.246.36.0/22 maxlen: 22
185.246.37.0/24 maxlen: 24
185.246.38.0/24 maxlen: 24
185.246.36.0/24 maxlen: 24
185.246.39.0/24 maxlen: 24
2a06:6d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:1e:63:86:38:6c:5c:08:9b:21:d4:de:82:34:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Jan 1 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21433aef840c3b133f0515c06a3f21be2180ecc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f0:bd:9c:ff:28:a8:fe:42:68:0f:7e:1e:63:
5e:10:ac:59:a1:5c:00:ef:6f:5b:e2:8f:5b:b6:a4:
54:d4:76:69:57:da:c6:67:b0:64:fc:9b:3f:fe:ab:
da:b5:93:c2:09:8b:17:dc:32:eb:6b:c8:0a:a1:76:
09:a0:2e:86:3e:a3:89:7f:4d:a8:2b:25:79:97:a8:
a6:24:e1:c1:f0:fc:56:34:ea:af:ee:33:ae:9f:bf:
d7:e3:fb:cf:d1:f9:4b:2b:8b:ce:a9:1e:42:60:e8:
ce:ff:f9:0a:ed:f4:54:94:e3:d7:b5:e3:e3:78:20:
3d:87:6c:83:7b:4c:b6:a9:17:bf:1b:5e:d1:76:0c:
c7:e2:4e:0c:c1:5d:21:44:c3:e3:6e:9e:44:1f:56:
b2:ae:c0:6b:95:f5:d0:9b:76:1a:21:96:57:3d:b5:
fb:17:14:8c:c9:e1:b2:de:56:d7:e2:7a:e6:a3:5e:
15:48:c6:ac:a8:3b:4f:c0:0b:db:68:92:a5:97:b1:
96:f9:e4:52:4f:38:a9:aa:08:2b:82:08:25:58:d4:
93:28:af:74:78:4c:6f:bf:49:30:fc:a4:2d:80:5d:
43:d1:5d:01:b9:a2:aa:fb:2d:f9:a0:e8:2a:e3:e0:
f2:46:f0:60:e0:d0:e0:9d:73:41:2c:03:a6:90:89:
e0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:43:3A:EF:84:0C:3B:13:3F:05:15:C0:6A:3F:21:BE:21:80:EC:C8
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/IUM674QMOxM_BRXAaj8hviGA7Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.170.0/24
91.231.164.0/22
91.237.16.0/23
185.30.68.0/22
185.114.80.0/22
185.246.36.0/22
IPv6:
2a06:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
16:69:8d:ad:c4:8f:3c:2e:02:f5:7a:85:c1:74:10:c6:48:4e:
34:56:c5:fc:fd:bc:25:46:84:66:f7:5d:1c:a2:90:d6:cc:d1:
9f:5c:4b:ba:db:d7:af:83:49:42:cc:b0:54:d4:e8:9b:b9:68:
0c:ed:8d:b3:0d:07:7f:84:4d:c5:d0:fc:2f:3a:33:e6:78:51:
a5:8b:02:af:e2:f0:7f:3a:e5:ac:54:d4:48:6b:a8:ab:47:70:
b4:68:56:83:9e:1f:21:17:5d:4b:52:ea:08:35:d3:fe:85:d9:
20:7d:e2:83:62:57:49:c7:c3:28:70:7d:9f:86:76:3c:a5:ee:
91:57:19:d4:14:4f:b1:ce:28:6a:e4:09:a7:ea:46:d7:9e:b7:
e6:f8:e5:01:d7:9a:2f:bc:7d:8d:62:59:fe:7b:d5:9f:7d:bf:
72:e6:10:e6:0a:15:98:95:64:a9:ae:57:c4:91:d6:43:9d:d3:
b4:30:14:6f:ca:75:cc:2b:80:ff:ad:5a:19:69:0e:63:f2:da:
a0:ee:f9:86:4e:de:b1:12:a4:83:cb:df:b1:95:a6:1b:fa:13:
0c:d5:d4:cf:2e:20:49:3d:77:fc:f7:c2:40:3f:48:2a:d8:dd:
6d:4b:6a:54:1b:2e:b9:c9:26:af:d2:28:17:f5:ff:a2:14:93:
d7:ad:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 09:35:09 2024 by rpki-client on console-ams.rpki-client.org