Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/0q2D2HrXwTqQRdy5Vh03KzJltas.roa
File: 0q2D2HrXwTqQRdy5Vh03KzJltas.roa (raw, json)
Hash identifier: a1pS8B8IHd8tfgUYpzJHAhGkRYG0CmuAXNkuCvQyrj4=
Subject key identifier: D2:AD:83:D8:7A:D7:C1:3A:90:45:DC:B9:56:1D:37:2B:32:65:B5:AB
Certificate issuer: /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial: 018CC79581744B26D297C095B67776110777
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/0q2D2HrXwTqQRdy5Vh03KzJltas.roa
Signing time: Tue 02 Jan 2024 00:31:53 +0000
ROA not before: Tue 02 Jan 2024 00:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211790
IP address blocks: 91.201.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:81:74:4b:26:d2:97:c0:95:b6:77:76:11:07:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Validity
Not Before: Jan 2 00:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2ad83d87ad7c13a9045dcb9561d372b3265b5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:3b:4f:59:91:c6:c0:6e:c8:28:93:3b:29:
64:ff:d1:66:e8:e8:df:bb:68:3b:a2:dd:d7:d8:9e:
85:67:e1:0f:53:5f:46:f4:9c:16:78:d8:a3:ed:1d:
70:a6:62:1b:bd:7d:45:bd:c1:8e:05:b5:1b:ee:e0:
f5:15:c0:7c:78:e3:c9:98:48:04:c7:31:4e:20:73:
c2:1c:c5:04:bc:1e:70:6f:02:60:8c:7c:e4:87:5e:
ea:7c:8b:16:a4:b4:49:76:c7:b0:20:b5:cc:41:53:
a7:65:5c:80:1c:59:a0:45:6d:ce:e6:d1:e1:f5:67:
6d:c3:c2:1a:30:4b:19:ef:ac:a1:46:8e:a1:3f:4d:
9c:78:34:03:c2:3c:f3:fc:99:51:4c:f7:2a:55:0b:
f5:e5:0d:03:73:d5:6d:8c:44:ce:f5:b1:bd:c4:ed:
e2:23:f3:7c:55:49:f0:02:ed:18:54:ff:be:06:29:
f5:fe:d9:7b:41:0a:00:b7:af:f8:74:9c:52:39:f8:
66:2a:bf:2c:49:55:38:8d:f1:92:94:0e:5d:94:94:
55:48:32:3f:f2:8d:84:65:ed:b0:5d:f1:8b:b2:f7:
04:03:11:d2:1b:04:41:d2:00:b4:6e:22:57:76:84:
8d:02:32:2e:ca:14:00:9f:27:de:c4:72:e9:76:ab:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AD:83:D8:7A:D7:C1:3A:90:45:DC:B9:56:1D:37:2B:32:65:B5:AB
X509v3 Authority Key Identifier:
keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/0q2D2HrXwTqQRdy5Vh03KzJltas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.200.0/24
Signature Algorithm: sha256WithRSAEncryption
da:81:cb:c6:92:dc:e6:67:6a:76:73:e7:4a:3c:aa:96:cc:b9:
d7:e2:c4:af:db:b3:53:83:7c:e5:7f:8a:15:2c:c1:e6:41:4a:
d1:1c:6c:c9:0c:c7:d5:83:19:80:5d:cf:d7:3a:df:ee:a0:8b:
cd:ea:eb:d9:d4:0d:98:14:e5:3e:1a:fc:79:16:08:99:5e:ac:
ed:8b:4e:6c:0e:ec:b2:8f:61:32:a4:24:51:21:88:1c:6e:d9:
65:8a:a3:c4:90:ec:60:27:39:8e:77:00:f9:c0:f3:32:10:ef:
7d:a3:70:22:43:1f:0a:e4:d4:dd:e0:8b:cf:d8:11:98:7f:9f:
d8:f2:65:52:ea:ff:15:e9:c0:c5:22:ab:86:9b:f3:16:8a:99:
6a:4b:c5:df:af:b3:ca:73:0b:5f:59:cf:56:43:de:b7:27:39:
8e:d8:41:c8:8e:35:b6:fb:f1:67:3b:99:d0:3a:27:fc:6d:ff:
29:64:d2:47:91:e5:a2:21:e1:f3:7b:3c:db:f5:4a:8c:02:74:
9c:5d:8f:de:e7:0a:42:0f:03:2e:6c:08:7d:4b:a0:86:53:33:
a1:18:5c:56:2e:e7:0e:56:9e:cc:66:c9:3d:41:bb:4f:c4:53:
d0:a2:2e:45:a2:68:31:0f:75:44:f9:e8:b5:ba:f5:5a:cf:1d:
7a:a6:f6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:20:06 2024 by rpki-client on console-ams.rpki-client.org