Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/pPI6fzprB5YmsTIFYekS4DNS1E8.roa
File: pPI6fzprB5YmsTIFYekS4DNS1E8.roa (raw, json)
Hash identifier: HigY8qqvhQY4n8vNDQ/jqgLDViAxkcanHGlh9/Tqb+k=
Subject key identifier: A4:F2:3A:7F:3A:6B:07:96:26:B1:32:05:61:E9:12:E0:33:52:D4:4F
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018CC6B8CAB3EFA20A5989C5F1C29909F235
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/pPI6fzprB5YmsTIFYekS4DNS1E8.roa
Signing time: Mon 01 Jan 2024 20:30:48 +0000
ROA not before: Mon 01 Jan 2024 20:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212249
IP address blocks: 141.98.113.0/24 maxlen: 24
141.98.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:ca:b3:ef:a2:0a:59:89:c5:f1:c2:99:09:f2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 20:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4f23a7f3a6b079626b1320561e912e03352d44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d7:e2:4f:9f:bb:1a:01:c0:99:64:67:b5:6e:
c6:c1:d1:ea:96:2d:06:08:fa:c5:c6:5a:9b:06:78:
5b:a0:01:c1:bb:18:1a:3d:a7:f9:de:b2:9b:32:7e:
b0:be:58:7c:84:f4:cd:01:ed:01:8d:66:e8:ef:8c:
26:49:46:f5:d4:9d:ac:ea:01:ab:58:6c:c2:30:a1:
2b:9e:cf:a3:d3:26:f9:9b:94:a0:96:47:e2:d7:4e:
5f:48:fa:4d:76:d2:87:0f:8e:72:61:10:21:1e:a6:
ef:c3:d2:a7:b0:f3:d2:1c:20:3e:44:38:71:89:9b:
61:ac:77:e2:93:e8:a6:df:21:b6:93:65:7a:4b:60:
c3:7d:e6:1e:52:fc:6e:bd:3d:2c:80:e7:11:ec:62:
da:d5:55:02:29:8c:1c:68:df:9d:69:a6:12:02:b2:
1c:0c:c5:76:65:5c:27:b1:2f:41:b6:6e:17:c8:fb:
3b:ca:24:a0:ed:d3:d7:d9:e0:cf:ed:f5:41:42:cc:
b9:07:c0:24:26:bf:02:6b:5e:12:32:5c:ac:bf:f3:
c2:87:0b:6b:24:49:4b:cb:03:5f:2b:0f:bf:41:71:
9b:2d:a9:1c:0d:7f:54:13:3e:b8:28:a5:24:d7:eb:
17:fd:fc:91:44:01:34:31:cf:df:ca:e1:83:45:80:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F2:3A:7F:3A:6B:07:96:26:B1:32:05:61:E9:12:E0:33:52:D4:4F
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/pPI6fzprB5YmsTIFYekS4DNS1E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.113.0-141.98.114.255
Signature Algorithm: sha256WithRSAEncryption
91:70:ee:27:66:11:87:a3:80:7a:f0:17:53:01:c6:f6:1f:19:
db:ac:46:51:fb:d1:ea:5e:7b:18:c6:62:74:e1:8a:51:bd:96:
a8:dd:1f:a0:41:53:54:f9:e9:66:e9:ac:67:5a:d7:79:77:ec:
0d:3a:9f:34:bf:f3:8b:fb:33:a1:35:73:6e:13:1d:6f:d7:17:
66:e0:27:5b:d8:e1:48:72:6f:2a:eb:e4:f5:a5:a2:69:5e:6c:
21:cd:fc:05:e6:37:10:f5:4a:34:da:77:11:8a:a9:fc:24:8c:
92:4e:38:4e:9e:29:70:20:b9:8b:f9:09:03:b4:ec:64:47:f5:
3d:2d:fd:f3:83:b2:ea:f4:c7:23:38:02:df:02:4f:7a:ae:86:
33:6b:2b:61:45:8e:33:19:82:27:b6:ac:55:cd:74:4b:7c:16:
bd:d4:92:b4:48:ca:ee:c4:0f:83:a3:2c:4e:32:37:42:90:75:
37:b4:05:08:e3:ee:74:dc:5c:ca:52:a5:0d:fb:8f:de:ed:90:
f0:be:79:f2:94:0f:a7:21:f3:6e:68:5d:1d:67:5a:cc:3d:d3:
0d:3d:71:70:d9:da:99:8e:8c:5c:40:db:b0:67:05:b6:19:6f:
11:ca:ab:27:7c:9b:a0:84:b0:c4:d2:d9:48:a7:39:47:bc:4e:
76:1c:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:09:32 2024 by rpki-client on console-fra.rpki-client.org