Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/RgYAPUWe9bBy29TV4cDINHfpXUw.roa
File: RgYAPUWe9bBy29TV4cDINHfpXUw.roa (raw, json)
Hash identifier: EoceWPDJ/TKFPKgL0MrKuJ9iYpwR9u++aK7v7VJ0h1E=
Subject key identifier: 46:06:00:3D:45:9E:F5:B0:72:DB:D4:D5:E1:C0:C8:34:77:E9:5D:4C
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 0191655CAE7D9AE14BD37FB3A1AF62FA5632
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/RgYAPUWe9bBy29TV4cDINHfpXUw.roa
Signing time: Sun 18 Aug 2024 12:00:58 +0000
ROA not before: Sun 18 Aug 2024 12:00:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202651
IP address blocks: 91.192.4.0/24 maxlen: 24
91.192.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:65:5c:ae:7d:9a:e1:4b:d3:7f:b3:a1:af:62:fa:56:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Aug 18 12:00:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4606003d459ef5b072dbd4d5e1c0c83477e95d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:18:a7:26:7c:a9:71:7c:3a:37:bc:d1:12:
b5:7f:e7:9d:1b:4c:08:c0:d9:f2:a4:36:52:77:42:
3e:8a:dc:99:45:70:44:26:03:e4:7f:48:15:77:b6:
80:a8:a0:b3:76:cd:51:4c:e5:93:86:08:da:c5:0d:
71:48:a2:d3:13:d9:2c:6e:dc:85:f1:f2:02:4a:a0:
20:64:0b:eb:d3:57:f0:9d:be:56:48:a1:74:81:25:
9b:55:37:de:b2:c4:c2:7e:97:bc:13:cb:88:c6:89:
cd:7b:cd:6e:c1:cd:9f:59:9f:9d:56:9b:2d:4c:82:
42:7b:04:3d:f9:b0:0e:71:d6:ce:ee:f0:c7:ed:62:
e4:d2:d6:10:17:b7:fe:9b:2f:01:20:55:e9:49:02:
86:38:05:80:a4:ad:b6:71:5e:a0:db:18:88:db:c9:
9f:83:86:13:84:23:49:1e:d5:79:48:08:4c:a5:b4:
38:0c:a0:a4:49:ea:ac:92:15:11:75:08:8c:25:d5:
3c:c8:24:07:fa:25:b7:32:4c:e3:47:a4:84:0d:1d:
0d:18:3b:99:a6:ae:a2:b7:20:1f:96:d6:74:d1:7c:
aa:72:8e:d0:27:01:26:2f:a8:35:3e:73:76:5b:ea:
a6:9c:5f:a0:b5:5d:e1:cb:93:94:5c:49:e4:05:e1:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:06:00:3D:45:9E:F5:B0:72:DB:D4:D5:E1:C0:C8:34:77:E9:5D:4C
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/RgYAPUWe9bBy29TV4cDINHfpXUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.4.0/24
91.192.6.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:82:31:d4:77:ad:39:3a:e6:9e:13:ff:1c:1f:fe:d9:cf:21:
42:3a:f2:3c:29:6b:27:33:71:ed:0d:3f:8a:d7:e9:77:dc:05:
09:7e:e4:55:16:a0:b6:ea:1c:3e:4a:90:1f:27:ca:59:07:b2:
ed:b1:be:53:8a:f8:e2:a9:fe:6b:c5:30:19:c5:34:e2:c0:c4:
23:38:00:de:49:f2:52:07:dd:d2:a0:10:c2:a9:3e:7d:86:2b:
f4:38:16:1e:e2:ff:ae:02:27:70:c3:93:f4:a1:42:22:65:5e:
8f:9e:ba:32:35:36:f3:1f:7f:3f:7c:9a:92:73:b8:e0:fa:b4:
f2:86:9d:c9:95:92:9c:4a:25:84:33:f7:1a:71:80:3d:f8:dc:
df:d6:1a:5f:ee:ad:3c:b4:e6:79:b4:1d:62:d3:b8:b6:d5:41:
ee:52:b2:28:3f:56:26:7d:e8:b9:38:b7:04:d6:74:3d:c8:84:
fc:1f:4e:5d:91:6e:66:c6:7d:75:ff:42:35:bc:6d:bd:28:c7:
d4:0a:99:a8:93:0c:15:68:61:d2:7b:69:a0:b0:52:d3:35:70:
2d:07:b5:1b:0e:71:44:e9:ea:53:c4:e0:07:18:97:c1:7a:a5:
fb:02:1e:fb:f3:39:c7:3c:81:bb:1a:e6:97:b0:93:2e:76:fd:
f3:4c:c2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:29:21 2024 by rpki-client on console-ams.rpki-client.org