Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/0mJtl2TslcGXCBQlBsdoXI1dp8E.roa
File: 0mJtl2TslcGXCBQlBsdoXI1dp8E.roa (raw, json)
Hash identifier: 4KF6XfQJi+NdI1NTZitW9n9CcXvLf3tozeFtW54w/sg=
Subject key identifier: D2:62:6D:97:64:EC:95:C1:97:08:14:25:06:C7:68:5C:8D:5D:A7:C1
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 018E4181BD4A48F3E55A73B6D5712A0F86DD
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/0mJtl2TslcGXCBQlBsdoXI1dp8E.roa
Signing time: Fri 15 Mar 2024 09:46:45 +0000
ROA not before: Fri 15 Mar 2024 09:46:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50684
IP address blocks: 91.148.232.0/22 maxlen: 24
91.148.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:81:bd:4a:48:f3:e5:5a:73:b6:d5:71:2a:0f:86:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Mar 15 09:46:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2626d9764ec95c19708142506c7685c8d5da7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:41:00:26:75:ed:1d:8c:0c:8d:3e:32:b0:
d8:78:09:ac:1b:ce:87:1f:60:2b:79:b5:61:e0:7c:
90:ac:a2:45:19:6b:a7:ba:fc:de:30:36:95:dd:e6:
da:44:c8:77:78:90:0e:d4:f7:e8:94:a5:f1:85:46:
cf:46:bf:27:cd:82:7a:d2:e6:32:d7:e5:fa:b5:65:
1a:5b:08:e9:2f:5a:39:0d:84:b9:9a:09:09:61:c7:
d0:f8:10:b8:f9:f8:bd:c6:b5:73:14:46:be:12:17:
5b:90:33:42:5e:11:2f:d2:e3:0c:41:cd:15:32:f8:
92:19:61:10:23:de:c0:f2:fe:27:1a:25:65:7b:84:
0d:ec:6c:63:33:2c:fd:88:73:83:fc:15:36:92:df:
19:41:84:10:ac:c6:78:98:b1:45:37:aa:64:34:3a:
03:7a:cf:30:44:c4:8b:8f:db:88:1a:df:25:ee:a9:
3c:57:e9:c9:58:f5:6e:c1:e9:2d:4b:3c:9d:29:82:
5b:3a:39:37:ff:1f:67:7c:30:70:47:25:dd:3d:08:
a1:f6:cd:e7:3d:cf:29:93:b5:bc:91:63:8d:f6:a6:
6f:11:93:7c:d8:1d:ba:50:02:46:71:22:d0:6e:1a:
b6:17:c9:20:ab:b0:16:26:4a:4d:1b:2b:17:e6:42:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:62:6D:97:64:EC:95:C1:97:08:14:25:06:C7:68:5C:8D:5D:A7:C1
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/0mJtl2TslcGXCBQlBsdoXI1dp8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.232.0/21
Signature Algorithm: sha256WithRSAEncryption
c6:66:da:de:83:21:c4:a5:89:08:87:8f:1c:a9:88:20:0c:ac:
a1:55:9c:0c:58:b4:4a:08:bb:f3:c4:d5:fc:a0:70:6f:2a:d1:
97:31:d3:39:49:8c:85:52:fe:b7:5d:0b:4a:8b:83:4d:c5:2b:
95:23:e8:36:b8:7f:a7:83:90:c1:8e:6b:9c:b8:f6:4b:f5:52:
52:4c:a2:b1:88:94:e6:c9:eb:5f:cc:2d:7f:62:d6:da:c5:1a:
79:71:99:6c:9d:cc:cf:bd:0e:9c:f1:a9:21:b1:ba:97:4d:f8:
26:ec:d7:8b:cf:f5:3f:77:a7:d3:6d:ef:91:87:bc:5c:13:63:
14:58:2b:be:29:59:c5:6c:dc:fc:39:91:eb:08:0d:35:c9:97:
64:17:58:c9:f0:17:7f:0e:0a:a0:b8:a5:bd:27:14:39:1b:38:
f9:d8:b0:6a:b5:af:b3:cc:a6:00:04:54:8b:e5:f7:a3:8d:a5:
8c:54:78:63:0a:ae:c8:f7:0a:c2:0b:49:d0:a6:71:23:37:7d:
a6:1a:13:56:38:ea:48:3e:ba:0f:8e:45:bf:7b:96:c6:61:21:
86:eb:77:18:c3:33:2c:c7:51:a0:f4:47:a3:e9:e6:67:19:a7:
0f:fd:e1:59:07:af:c5:e3:75:6c:62:43:7e:fc:13:fa:d8:14:
4f:0c:31:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:45:15 2024 by rpki-client on console-fra.rpki-client.org