Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4EZS1zCBgjHhJ_3cchfLonx-Ozg.roa
File: 4EZS1zCBgjHhJ_3cchfLonx-Ozg.roa (raw, json)
Hash identifier: dCqxZ28n9OcswRUaUNH7piz4dmElRAys2lUSpxRO6d8=
Subject key identifier: E0:46:52:D7:30:81:82:31:E1:27:FD:DC:72:17:CB:A2:7C:7E:3B:38
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DC28043B6E5284CFB5F32E06A13C6DE5C
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4EZS1zCBgjHhJ_3cchfLonx-Ozg.roa
Signing time: Mon 19 Feb 2024 17:53:22 +0000
ROA not before: Mon 19 Feb 2024 17:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 91.212.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c2:80:43:b6:e5:28:4c:fb:5f:32:e0:6a:13:c6:de:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 19 17:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e04652d730818231e127fddc7217cba27c7e3b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:12:ad:d2:f1:eb:fc:7d:25:4f:7f:45:13:
8b:98:57:c9:48:cc:73:03:23:84:2c:02:eb:b1:9d:
80:50:ee:cb:3c:59:4b:48:d9:50:88:87:6c:dc:cf:
c7:70:99:a6:30:b0:6b:e5:da:5d:06:c1:23:d2:3b:
27:f8:d3:db:2b:a0:4a:63:f9:15:30:90:eb:e9:6e:
36:d4:45:8e:4f:b3:a4:aa:4f:6d:a9:3e:47:12:1f:
aa:e7:70:27:b3:a9:24:1a:a5:05:1d:a2:09:d6:6a:
76:27:39:59:68:39:9d:18:9c:99:d3:73:20:bc:e5:
6e:72:d1:5b:a8:73:e7:ac:cd:89:22:f4:ee:ef:a2:
47:07:19:e8:ff:5f:35:ba:27:42:a1:d2:d5:eb:96:
ad:12:13:52:a3:e8:0c:cf:f1:0d:02:ff:0f:b4:a3:
fb:b8:b5:05:f5:95:21:ca:27:19:d8:01:0d:2b:11:
d8:91:39:e9:3e:a2:1a:c0:35:a8:ad:78:ce:f1:a9:
87:e9:bf:67:e0:27:c5:d5:0f:21:1b:ac:7f:e5:0e:
c1:fa:86:6d:79:0d:0f:f3:de:a9:4f:b5:93:e7:01:
78:37:c1:22:c7:02:5d:c3:e3:b7:a7:17:c1:8c:e6:
74:ff:43:d2:44:62:b5:2c:6e:96:e4:30:25:6f:b9:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:46:52:D7:30:81:82:31:E1:27:FD:DC:72:17:CB:A2:7C:7E:3B:38
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4EZS1zCBgjHhJ_3cchfLonx-Ozg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.229.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d9:0e:cd:b8:2a:4a:53:c8:82:19:4c:bb:09:11:5f:59:93:
b7:a6:81:89:a6:46:ab:11:a1:53:2b:0d:3d:ff:f4:47:28:cc:
96:a8:e4:28:76:51:e7:7b:95:12:82:5c:f4:ee:7e:ad:3c:e6:
51:02:2f:6d:2a:82:33:93:63:a0:58:7f:5b:f3:d9:ba:09:e5:
98:d2:e1:47:69:97:ac:7f:17:8e:e0:86:e8:96:75:1f:d9:89:
4e:e0:c5:01:30:51:17:3c:96:ce:ad:ed:c4:d2:37:79:09:fb:
16:8b:1a:a2:81:a8:4e:2a:14:a1:0c:bb:bb:7b:37:45:d6:15:
b7:11:d8:c3:96:ee:c6:e8:0b:de:91:04:6a:4d:58:8c:71:c8:
da:17:13:61:dd:58:90:f0:a9:a0:4c:69:6e:61:62:91:e0:4e:
f5:7d:35:1d:4e:d6:7d:e8:8e:ae:31:f1:13:e2:db:6a:94:77:
0a:8c:8f:47:5d:5d:72:9f:fa:42:8a:84:c9:bc:96:48:f8:63:
fd:6c:7e:3d:67:dc:a0:c1:5f:03:6a:7f:e5:4a:34:7c:d7:48:
cc:4f:31:74:49:c1:d1:f6:03:f2:89:42:bf:b3:cb:b2:15:f5:
ce:b8:0b:1e:78:d2:57:2e:e9:7c:30:97:b0:59:5b:a4:6f:e0:
c2:cd:9f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:04:32 2024 by rpki-client on console-ams.rpki-client.org