Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/204po-YL9cY1IO6qppj6YDejuEA.roa
File: 204po-YL9cY1IO6qppj6YDejuEA.roa (raw, json)
Hash identifier: cVIvzov/e7izXqD663zBbhDeOa8fxfUaA8/oWdm+h50=
Subject key identifier: DB:4E:29:A3:E6:0B:F5:C6:35:20:EE:AA:A6:98:FA:60:37:A3:B8:40
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 018CC794A3697811E86EFC4656BEB6ED166E
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/204po-YL9cY1IO6qppj6YDejuEA.roa
Signing time: Tue 02 Jan 2024 00:30:56 +0000
ROA not before: Tue 02 Jan 2024 00:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206541
IP address blocks: 91.90.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:a3:69:78:11:e8:6e:fc:46:56:be:b6:ed:16:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 00:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db4e29a3e60bf5c63520eeaaa698fa6037a3b840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:38:47:7a:33:4d:86:01:02:91:7e:be:7b:
4a:4c:20:6f:45:b3:8c:ee:6b:09:9e:14:72:65:50:
c8:90:fd:d3:1c:ca:a8:06:13:13:54:1c:08:a8:b5:
6c:63:ee:6f:5e:b1:89:4f:71:b7:02:7b:a1:1b:96:
0b:86:ce:4e:10:ab:e0:d5:8e:78:00:f7:9b:b7:a5:
89:5d:ed:5e:e5:84:ab:46:2c:63:41:fb:0e:30:6a:
8a:0b:53:cb:50:c4:05:e0:56:1b:d7:c3:c5:e3:81:
2a:5a:05:a2:ad:70:c3:a4:84:13:4b:71:48:ff:a9:
33:79:d6:bb:b8:54:38:4e:d7:9d:3c:0e:df:72:90:
d3:eb:7e:3e:6d:d3:4e:41:26:51:f8:a6:a0:d2:62:
f0:12:a6:dd:aa:59:a7:f9:2a:68:23:7a:2b:c0:ef:
b9:d4:f6:c1:20:99:ca:1f:2e:f3:cb:77:1a:31:a4:
d6:44:f7:83:07:50:a3:fe:62:0b:26:f4:57:fe:c2:
2d:a8:f7:3d:28:25:c2:4d:e1:39:81:8c:9c:c9:0e:
3c:01:22:ea:c5:af:55:bc:cc:17:b6:0d:79:89:11:
e9:3c:ea:c9:41:7a:5f:b7:ff:75:2c:7a:e7:b0:8d:
99:24:50:61:07:9c:bf:34:4e:d2:40:6f:ae:e8:e7:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4E:29:A3:E6:0B:F5:C6:35:20:EE:AA:A6:98:FA:60:37:A3:B8:40
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/204po-YL9cY1IO6qppj6YDejuEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.233.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0c:6f:31:3e:dc:0b:50:53:7f:9b:ce:99:70:1f:46:94:9d:
20:6f:08:0c:8f:df:d7:4f:9d:fd:74:4b:90:6a:39:88:95:0f:
a7:c8:cb:0a:24:89:59:3f:52:0a:4f:07:5b:6a:1d:a0:22:4e:
3b:2d:77:43:5e:52:c8:70:71:b6:10:26:6d:28:b6:8c:56:34:
91:0f:a0:7b:5f:ac:98:43:17:df:bc:45:2c:98:c0:2d:3d:ab:
d6:03:e6:d6:77:bd:4b:be:57:af:a4:9a:9e:8d:2d:c4:e2:6c:
c8:93:61:d6:e4:c5:24:fe:ed:89:a8:03:02:f7:f1:81:36:30:
ee:a7:57:12:ca:d8:91:b5:98:38:33:d1:94:d8:ba:88:26:23:
2d:7f:e3:dd:3d:20:17:a3:54:96:71:53:a2:30:28:d9:d5:e7:
03:94:0e:92:d6:fa:0a:85:be:96:3b:7b:c3:b2:36:0f:3a:7d:
c0:d7:18:d1:31:ce:84:32:7b:2b:bb:bb:1a:3c:0b:be:16:b7:
66:71:a2:11:f7:52:56:41:cb:20:b2:96:7a:61:74:f3:88:4f:
3d:1f:f0:d8:9c:0f:82:e7:0c:ac:0b:7e:46:88:49:fe:70:7f:
63:df:5c:37:ae:79:93:63:7d:c9:db:99:cf:c2:37:a8:d7:2c:
1a:a3:bf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:08:24 2024 by rpki-client on console-ams.rpki-client.org