Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/StH2yvw0lLDeFZ-6QmuNhu2r8kM.roa
File: StH2yvw0lLDeFZ-6QmuNhu2r8kM.roa (raw, json)
Hash identifier: 2E4POhDUwK3EIVYFGTmOlqxJJs1cTT5GTTbBK8MqL+4=
Subject key identifier: 4A:D1:F6:CA:FC:34:94:B0:DE:15:9F:BA:42:6B:8D:86:ED:AB:F2:43
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 0192F5FCD90C059DDBC830100F43C4B06A52
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/StH2yvw0lLDeFZ-6QmuNhu2r8kM.roa
Signing time: Mon 04 Nov 2024 07:04:01 +0000
ROA not before: Mon 04 Nov 2024 07:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20057
IP address blocks: 91.236.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f5:fc:d9:0c:05:9d:db:c8:30:10:0f:43:c4:b0:6a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Nov 4 07:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ad1f6cafc3494b0de159fba426b8d86edabf243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c5:37:48:a8:10:5b:d9:70:f0:5a:5e:a4:a6:
c2:4a:d9:85:b3:a2:c5:80:df:c3:3c:4a:98:0e:ae:
a1:bb:7a:ec:4c:3d:1d:54:86:cb:4c:c9:da:aa:b7:
d4:4e:eb:04:5e:9e:ec:14:0e:8b:59:e8:8a:b9:0d:
0f:be:38:bf:15:5a:28:8c:d5:40:aa:5c:0d:14:0a:
25:49:4f:b4:9e:17:f5:60:23:ad:ed:19:02:50:b2:
98:18:ea:0f:09:83:94:d3:2b:db:86:fb:36:d9:fb:
2b:ae:2a:fd:6d:ca:4a:44:4f:cd:b7:be:2a:d4:d4:
1f:3a:4f:da:35:f5:67:a2:aa:01:f2:a8:ea:a9:5c:
ea:c9:02:4b:fe:c8:0a:03:68:a9:ae:a5:97:fa:33:
60:c6:ff:6d:33:62:0e:8e:1e:81:51:e1:41:82:57:
fe:c0:ac:7f:4a:57:90:77:2d:89:61:6d:95:4b:d2:
a0:e3:99:7a:b8:11:78:d3:7e:7e:0b:7e:0e:ec:a7:
8f:b3:99:de:4a:9e:9a:52:ed:bc:fa:3b:26:39:f6:
aa:4c:56:43:f3:18:8f:43:15:13:55:0c:0b:d5:f7:
04:6d:91:35:1d:3d:0e:ec:c6:77:48:56:0d:23:f8:
ed:f1:ee:7e:20:b3:5d:d0:ca:f8:ea:22:b6:b5:f8:
3b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D1:F6:CA:FC:34:94:B0:DE:15:9F:BA:42:6B:8D:86:ED:AB:F2:43
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/StH2yvw0lLDeFZ-6QmuNhu2r8kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.118.0/23
Signature Algorithm: sha256WithRSAEncryption
57:89:71:22:ff:c2:64:29:28:bd:0d:d5:51:cf:49:f6:04:a1:
12:4f:61:2c:7f:c6:18:bd:15:cc:de:a2:0a:8a:18:00:25:d0:
4f:5a:21:69:fd:e1:11:cd:e4:f3:09:1e:f5:0c:8a:e8:d5:58:
ab:bd:5b:23:eb:bb:43:a4:e8:3c:65:99:d9:98:aa:07:50:9f:
e9:11:b5:72:d3:4c:fc:24:40:76:fe:0c:3b:79:11:19:e7:a6:
c2:12:c7:1e:35:36:03:83:57:70:79:8c:a4:ba:34:5b:31:68:
ba:4d:40:2c:3e:b5:96:ad:7d:68:10:3e:d0:1e:03:32:05:4a:
fd:f7:d3:0e:72:07:d1:ff:bf:13:d0:dd:8f:3c:16:66:b1:b4:
88:6e:8f:a2:de:93:73:4a:a9:56:0f:40:87:b6:bc:31:92:eb:
4e:b7:36:1f:6f:c3:8e:8c:1f:0c:3e:51:88:55:cf:12:23:7c:
78:0c:11:af:28:f6:ae:2c:7e:54:91:1c:26:e6:83:2b:1d:77:
f4:a4:c8:cc:b6:21:f9:86:d7:b1:71:e1:63:f6:bf:9a:e9:b5:
a2:c1:37:7a:b9:96:e7:54:af:84:43:8a:29:a4:86:66:84:37:
18:e3:56:fe:1f:5f:ba:92:7e:21:56:97:7f:96:8f:69:40:e0:
b9:d2:ed:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:47 2024 by rpki-client on console-ams.rpki-client.org