Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/0ENZgtloNsItLMv-0ohLJXkH4FU.roa
File: 0ENZgtloNsItLMv-0ohLJXkH4FU.roa (raw, json)
Hash identifier: HRJXJv+RP5Y5gK4WwoYh2rlTOq3f0Vgu33byzehSXjk=
Subject key identifier: D0:43:59:82:D9:68:36:C2:2D:2C:CB:FE:D2:88:4B:25:79:07:E0:55
Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial: 018CC26D4C5CBF6CF311D4B347E11D302680
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/0ENZgtloNsItLMv-0ohLJXkH4FU.roa
Signing time: Mon 01 Jan 2024 00:29:51 +0000
ROA not before: Mon 01 Jan 2024 00:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.235.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4c:5c:bf:6c:f3:11:d4:b3:47:e1:1d:30:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Validity
Not Before: Jan 1 00:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0435982d96836c22d2ccbfed2884b257907e055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:61:33:8d:ef:dd:59:ec:46:49:69:cb:2a:
44:36:4e:d2:a7:2e:25:e5:57:21:c7:54:e8:3b:4d:
cc:04:2d:74:34:f1:7f:53:3b:cb:58:d1:60:f8:3a:
e4:af:d2:e6:14:70:1f:77:07:b4:8b:8e:7e:67:56:
a8:c3:c7:1b:9d:82:02:4a:4c:ab:7a:75:03:8f:d9:
e9:b0:74:78:20:25:4d:dc:a5:b4:d7:96:aa:ab:84:
d5:26:d5:4b:60:21:4d:da:bb:95:73:75:d6:d4:bf:
93:3a:f3:5b:29:e2:82:fa:d0:0f:14:5d:3c:14:00:
9c:7b:00:4e:de:fe:cd:db:1e:05:d6:8e:0b:f8:7f:
e0:e7:ec:68:54:38:c5:ef:ef:20:4e:b2:1b:59:df:
7f:5e:87:1f:c4:60:3d:07:9a:77:4e:42:50:b2:27:
24:8c:1b:be:3c:1e:3f:ab:cf:e5:0d:82:87:db:8c:
bb:a0:dc:64:db:2b:0d:3c:da:eb:af:13:64:78:4c:
f4:0a:e8:c5:15:b6:9d:73:3b:9c:4a:b0:bd:db:0b:
8f:69:91:cc:ec:45:e3:f6:ce:f3:97:b2:ac:0e:23:
86:7e:cf:d4:fa:88:4b:ce:5d:16:33:38:19:95:ce:
fe:00:91:31:20:01:25:83:dd:a4:67:36:9a:fa:e9:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:43:59:82:D9:68:36:C2:2D:2C:CB:FE:D2:88:4B:25:79:07:E0:55
X509v3 Authority Key Identifier:
keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/0ENZgtloNsItLMv-0ohLJXkH4FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:6c:4c:7c:b8:05:a7:49:10:70:05:64:81:fb:bb:d0:7f:c6:
8b:7b:43:52:fc:64:5d:f1:bd:90:8a:fc:d4:36:e2:26:a7:e8:
1c:8b:a2:9e:09:8c:42:d3:48:37:70:7b:08:33:1f:8b:2b:7b:
60:12:90:df:f6:ba:76:63:df:41:1a:e6:2b:54:13:da:57:b2:
c5:ec:73:81:98:66:fc:20:45:98:45:67:a0:48:9b:af:9d:af:
f7:85:28:d5:23:86:72:61:96:c1:ef:09:8e:4e:50:39:7e:c4:
c4:57:7d:ed:8b:bc:e7:1b:2c:81:35:3e:b7:02:e8:ec:23:59:
70:a8:18:aa:5d:2c:d1:8d:ca:64:43:fd:76:1c:55:51:88:7e:
64:99:8f:6b:b8:af:79:9f:88:f2:34:4c:90:e7:84:4c:dc:df:
69:19:25:86:af:6c:45:17:6c:48:81:56:3e:a3:3e:35:61:18:
41:f3:b4:be:9e:77:dd:00:7b:42:04:87:18:e8:45:ef:9b:0c:
5e:59:c0:5e:5c:cb:b7:c6:64:e2:cc:4b:e7:32:61:88:88:66:
dc:30:98:90:40:a0:85:d3:ec:d3:24:6c:b8:f7:08:4a:29:2e:
a3:96:d7:13:20:a1:d3:4f:c6:d6:08:3f:4e:1e:75:52:dd:35:
5f:cd:27:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:37:30 2024 by rpki-client on console-ams.rpki-client.org