Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/F4pdNaotv_8lGx5c5G5QFj5WrTQ.roa
File: F4pdNaotv_8lGx5c5G5QFj5WrTQ.roa (raw, json)
Hash identifier: yA0a2pHWLjjxNlMJVIw/vWwevRX1Z7qmEcYNnQafYlo=
Subject key identifier: 17:8A:5D:35:AA:2D:BF:FF:25:1B:1E:5C:E4:6E:50:16:3E:56:AD:34
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 01903B3FC953A439F8B7FA8D81F86C69F16D
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/F4pdNaotv_8lGx5c5G5QFj5WrTQ.roa
Signing time: Fri 21 Jun 2024 14:42:34 +0000
ROA not before: Fri 21 Jun 2024 14:42:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 91.228.132.0/23 maxlen: 24
91.229.46.0/23 maxlen: 24
185.80.198.0/23 maxlen: 24
185.147.176.0/22 maxlen: 24
188.209.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:3f:c9:53:a4:39:f8:b7:fa:8d:81:f8:6c:69:f1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Jun 21 14:42:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=178a5d35aa2dbfff251b1e5ce46e50163e56ad34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:c0:6c:a8:eb:8b:a6:6e:46:86:fe:b2:6a:
3c:68:62:bf:3f:30:42:42:e5:a6:95:15:bf:8c:d6:
9c:e9:07:67:41:96:61:09:f1:22:de:ea:82:81:f1:
d7:23:7b:a8:52:c6:58:f3:ad:59:34:17:24:65:de:
77:36:0d:41:43:8c:bc:c4:ef:9c:07:82:64:06:8a:
1a:e4:fc:99:aa:54:41:14:61:7f:b2:fb:84:51:19:
cb:50:c1:11:5a:11:47:62:97:13:71:a4:b1:ee:c5:
4d:66:6f:88:3f:cc:1b:a9:06:25:e2:f7:1c:8c:7a:
ac:da:f5:9b:8b:29:1a:34:d9:f9:52:6d:8f:4d:a0:
16:84:41:11:ed:ac:00:dc:ad:8f:ab:ff:de:af:33:
71:38:3c:34:77:94:94:27:34:05:dd:14:68:bb:57:
c7:51:87:2f:0d:b7:59:9b:85:6a:1a:d9:f1:18:08:
ab:e2:4a:c8:da:4f:a7:f2:d8:e5:d2:c9:99:37:6d:
2d:e7:08:34:de:15:07:1d:05:e4:5b:ca:96:ac:ee:
74:00:72:15:eb:29:60:18:6b:67:ff:40:48:7d:41:
43:93:64:21:32:57:d7:cc:05:12:7e:6a:d2:78:19:
2e:a1:1f:f5:d7:61:75:2e:60:67:e5:c6:cd:50:84:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8A:5D:35:AA:2D:BF:FF:25:1B:1E:5C:E4:6E:50:16:3E:56:AD:34
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/F4pdNaotv_8lGx5c5G5QFj5WrTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.132.0/23
91.229.46.0/23
185.80.198.0/23
185.147.176.0/22
188.209.116.0/22
Signature Algorithm: sha256WithRSAEncryption
96:80:cc:fd:af:8d:33:4c:c5:7f:b9:0d:66:c0:d5:ab:72:51:
2a:41:7f:fe:19:c0:22:ae:46:97:b2:7c:a2:5c:8e:97:15:04:
40:4b:c7:87:2e:75:23:5e:38:51:73:86:1c:49:98:71:59:d9:
90:a1:78:28:90:80:89:5a:af:61:7f:f2:18:f2:dc:d6:2f:25:
9e:f4:3d:6c:24:f7:2f:52:aa:3d:d0:99:e7:ec:2e:8f:3e:e6:
94:59:db:62:26:f9:9b:e0:b4:e2:0b:14:d2:08:c4:ff:29:63:
57:d1:99:e3:72:a1:a5:6f:04:ab:be:1e:8e:72:98:27:31:df:
0a:2c:20:b9:0a:14:04:c9:2b:fc:2e:18:5a:56:3b:df:c7:59:
c5:68:47:62:2d:07:ba:51:db:6e:0f:2d:f0:6e:32:a6:ae:df:
81:48:94:9a:0d:3e:b9:3d:c4:e1:a6:63:8b:76:84:8d:2f:27:
13:74:ac:71:fd:4b:a7:62:f5:21:97:73:d1:37:2f:8d:7f:e2:
06:68:8d:ca:8f:65:2e:43:80:e5:18:c2:c3:d5:d6:b3:9f:d6:
59:4a:6b:c5:1e:87:2c:6a:8c:b6:6b:93:ea:25:80:25:1f:88:
5f:a5:6c:47:0f:2a:23:19:d7:e2:24:3c:8d:fa:64:e2:ab:ee:
f3:a1:00:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:12 2024 by rpki-client on console-ams.rpki-client.org