Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/4QwpueB4zE4bE1C9QEvy7nHwPY8.roa
File: 4QwpueB4zE4bE1C9QEvy7nHwPY8.roa (raw, json)
Hash identifier: LuwJIya6ybtefIA3qCrVTciLtWYZPlKtFwg0TtGAj9w=
Subject key identifier: E1:0C:29:B9:E0:78:CC:4E:1B:13:50:BD:40:4B:F2:EE:71:F0:3D:8F
Certificate issuer: /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Certificate serial: 018CC64B7C984B38E5D2198F8F705CDB1633
Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/4QwpueB4zE4bE1C9QEvy7nHwPY8.roa
Signing time: Mon 01 Jan 2024 18:31:24 +0000
ROA not before: Mon 01 Jan 2024 18:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56676
IP address blocks: 91.237.209.0/24 maxlen: 24
31.130.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:7c:98:4b:38:e5:d2:19:8f:8f:70:5c:db:16:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Validity
Not Before: Jan 1 18:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e10c29b9e078cc4e1b1350bd404bf2ee71f03d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:91:69:b8:3a:60:86:9d:ee:4a:3a:20:4e:
42:5b:c7:90:3e:9a:9c:95:85:c3:5b:bf:8d:12:87:
47:f1:72:e1:8e:c5:2c:02:55:5c:37:e2:18:c4:81:
9a:77:e1:f1:30:fa:77:81:bc:65:5d:92:28:78:bc:
c1:64:f4:0c:0b:31:88:72:37:7c:86:ea:06:12:3e:
18:5e:eb:c3:f2:2c:51:7e:06:a8:50:2c:0e:32:b7:
20:31:e1:0d:13:de:de:c6:44:cc:37:79:df:f1:e7:
30:cf:39:82:82:f7:78:b3:d9:80:b8:39:b4:97:20:
3d:d5:85:8d:3b:60:07:a4:fa:cd:5c:ed:37:15:71:
9c:90:b5:51:3a:57:3c:ef:d6:d1:47:57:59:3d:27:
f8:55:39:96:aa:99:66:f8:21:5b:e2:88:e2:0a:46:
d6:c1:9e:10:cf:2f:84:9c:10:9e:bb:04:4a:7d:35:
38:df:6c:66:68:58:e6:f4:ba:5d:f5:ea:bf:4a:c0:
6b:d0:ac:d6:24:69:c5:fd:55:7d:31:5c:a6:0f:45:
34:28:2a:53:c9:a5:9c:14:b8:a8:1a:3a:41:e2:c4:
83:33:ef:9f:85:91:c6:e8:08:49:42:c3:d7:21:7c:
d5:3f:ed:86:e4:7b:df:c8:e2:bd:cd:36:8c:a3:94:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0C:29:B9:E0:78:CC:4E:1B:13:50:BD:40:4B:F2:EE:71:F0:3D:8F
X509v3 Authority Key Identifier:
keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/4QwpueB4zE4bE1C9QEvy7nHwPY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.120.0/21
91.237.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:a3:f3:d1:9a:67:9d:be:5e:2d:7b:12:30:4a:0d:33:74:16:
b5:05:97:2c:a3:2b:d2:f8:50:bf:49:5a:d8:cf:4d:56:20:48:
2e:c2:f0:a9:9a:c3:2e:43:ef:25:a8:d5:05:e6:dc:c7:20:1a:
cc:73:34:16:ad:c3:32:d9:20:f4:0f:f5:8e:cb:8f:0c:1a:d2:
24:cc:b4:3e:8f:9c:bc:3f:0a:f9:38:1b:2a:4c:30:fd:2c:ad:
2f:f4:32:d0:aa:7c:81:58:36:4c:c4:11:6c:c3:62:6d:dd:ae:
5f:eb:29:19:99:88:87:85:67:05:32:b2:e7:68:ba:fa:84:ac:
54:0f:c0:55:dd:ea:f8:1e:1f:93:13:12:93:e3:68:8f:e9:55:
97:e6:81:6a:b4:b0:44:6f:26:19:be:6b:1e:d2:66:03:06:66:
3a:81:f0:30:30:2d:66:cc:b2:d4:b2:dc:77:06:bd:65:cd:28:
cf:21:4e:e9:4c:4f:62:61:97:5d:de:25:ce:0b:cc:1b:55:3a:
64:3c:ea:37:b0:9c:db:0e:44:3c:bf:20:6e:8d:29:9a:f4:ee:
21:8a:64:bc:c9:78:51:78:be:c9:36:4b:a3:00:92:08:fd:90:
be:a1:c6:cb:d1:ae:d9:33:9a:97:22:5a:3a:52:f4:32:ba:37:
0f:5a:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:32:26 2024 by rpki-client on console-fra.rpki-client.org