Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/AjGTryNj-8j4IogwY7E1CLy0Kiw.roa
File: AjGTryNj-8j4IogwY7E1CLy0Kiw.roa (raw, json)
Hash identifier: H3ya6HTHuYjghJlnX1xPZ+T5CkgJlfETNZ7lo/kFAa8=
Subject key identifier: 02:31:93:AF:23:63:FB:C8:F8:22:88:30:63:B1:35:08:BC:B4:2A:2C
Certificate issuer: /CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Certificate serial: 018CC5011546DD88C2016C4E7148C15436CD
Authority key identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/AjGTryNj-8j4IogwY7E1CLy0Kiw.roa
Signing time: Mon 01 Jan 2024 12:30:31 +0000
ROA not before: Mon 01 Jan 2024 12:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48480
IP address blocks: 91.211.48.0/22 maxlen: 32
193.107.96.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:15:46:dd:88:c2:01:6c:4e:71:48:c1:54:36:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Validity
Not Before: Jan 1 12:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=023193af2363fbc8f822883063b13508bcb42a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6d:79:07:c7:85:96:53:45:e7:eb:a2:93:e7:
2e:cc:ae:3b:68:0f:16:e3:da:71:5f:27:1e:4c:13:
4a:ec:83:dd:4f:ea:c4:09:da:0c:ab:93:62:98:bf:
0d:c8:66:6d:c9:e4:87:04:27:eb:c7:94:a2:84:bd:
6e:14:12:78:6c:d7:51:21:cf:0f:7b:db:26:79:ba:
7a:11:54:9c:f8:8a:2f:af:16:55:95:d3:32:9f:8b:
d4:76:55:dd:a2:31:93:e9:dd:46:95:cc:6d:75:ec:
3f:54:e5:ae:db:77:b3:74:52:ac:f3:5c:f8:b0:36:
93:6c:e3:d6:a7:72:f0:72:17:7b:9b:e7:05:18:a2:
29:7b:c8:78:a1:75:2e:7e:df:ff:8e:d6:04:9c:69:
07:3a:97:67:6a:ce:07:98:ed:44:6f:c0:b7:94:2d:
a0:13:71:84:62:d1:e8:84:af:ba:62:60:88:ac:6f:
78:45:ee:ab:38:60:f6:b3:ff:f6:de:a0:34:81:7c:
c8:d8:ce:6c:a6:26:fe:f5:cf:c4:61:90:a0:62:83:
b0:e7:ce:71:ca:27:47:c2:0d:10:9c:e9:ff:86:4f:
eb:c7:af:30:2b:88:ba:80:54:08:d5:3e:df:da:41:
37:3f:27:18:29:66:83:97:c6:7a:5e:e4:87:7d:51:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:31:93:AF:23:63:FB:C8:F8:22:88:30:63:B1:35:08:BC:B4:2A:2C
X509v3 Authority Key Identifier:
keyid:90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/AjGTryNj-8j4IogwY7E1CLy0Kiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.48.0/22
193.107.96.0/22
Signature Algorithm: sha256WithRSAEncryption
78:9f:9e:21:27:42:7d:9b:a1:bc:39:7d:b6:7c:e9:b9:ad:de:
aa:fe:93:4e:33:54:d3:be:b7:e3:2c:d4:23:ab:05:47:50:eb:
cd:ff:d3:c9:cc:2b:59:86:28:af:a3:d7:9e:38:31:df:49:dd:
fd:3c:83:04:1b:ce:70:b1:4d:83:2e:68:ad:e7:fe:29:3d:4a:
f2:5d:65:1e:bd:64:2f:40:e7:48:47:a7:ae:4c:05:63:37:5d:
31:cd:ee:f5:c8:5c:8f:ce:4e:d6:db:01:7b:cb:00:0c:e2:58:
06:27:f1:bb:e4:96:53:f0:70:f0:11:99:b0:87:45:25:b5:b4:
b0:2f:f2:d0:38:30:d6:02:51:aa:96:db:55:3b:51:d3:1e:28:
e9:76:46:6c:c5:8d:76:0c:a6:31:49:a4:43:de:43:14:3c:c1:
3b:93:e7:1e:7f:76:15:c8:c3:f9:82:d1:68:b0:de:70:bf:d2:
1d:40:df:0d:84:46:e8:a7:6a:51:68:a9:ac:ca:d0:95:2b:49:
05:fd:f6:d7:97:9a:b6:14:09:63:5c:bb:f6:c6:ff:fb:04:0c:
ce:0f:d3:2a:c6:db:99:de:b8:83:41:9b:08:c8:8d:39:d8:30:
d0:c0:b9:9b:aa:b8:5e:fa:48:42:ff:60:23:7f:cd:47:72:af:
3a:89:b7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:02:16 2024 by rpki-client on console-ams.rpki-client.org