Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/yi41anCc4buv-D5jvcJSEndneNw.roa
File: yi41anCc4buv-D5jvcJSEndneNw.roa (raw, json)
Hash identifier: p5xSyylM8b/eS2Zgsmr8jY9ELUZ5W+NoXk9eHLSQ6sY=
Subject key identifier: CA:2E:35:6A:70:9C:E1:BB:AF:F8:3E:63:BD:C2:52:12:77:67:78:DC
Certificate issuer: /CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Certificate serial: 018E2F56DC84DF72486D80A9F04C4ECD4201
Authority key identifier: 3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/yi41anCc4buv-D5jvcJSEndneNw.roa
Signing time: Mon 11 Mar 2024 21:06:45 +0000
ROA not before: Mon 11 Mar 2024 21:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211585
IP address blocks: 91.208.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2f:56:dc:84:df:72:48:6d:80:a9:f0:4c:4e:cd:42:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Validity
Not Before: Mar 11 21:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca2e356a709ce1bbaff83e63bdc25212776778dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:4d:b7:d7:b2:7d:d0:5a:64:8f:ca:ba:5a:
f6:03:87:5e:0c:31:0d:8e:46:0b:bf:ec:ef:1d:97:
30:1f:27:dd:5f:8a:5d:fb:09:9c:74:6b:19:8d:d6:
74:f5:eb:95:37:8e:dd:fd:12:e0:eb:12:69:7e:3a:
f5:ac:30:61:6d:a2:d5:94:53:fe:f0:c1:90:e4:c5:
b4:52:23:6a:2d:bc:d6:eb:ed:0d:70:1f:23:a0:fc:
d8:ba:f7:f4:8b:e5:53:f6:e2:51:1d:b2:ff:9f:46:
db:16:66:ba:32:42:22:d5:eb:c8:4f:00:23:87:49:
64:c3:40:7d:0c:7e:43:ed:f6:1f:f0:6d:b4:93:35:
67:d0:55:d6:94:8d:8f:88:31:13:4c:80:03:4f:83:
51:63:8b:48:01:97:6e:b9:e1:14:ef:76:ad:90:da:
cb:2f:25:b0:59:e2:e9:66:2c:9f:5b:33:e5:e4:86:
b3:bb:83:b4:cc:d4:31:06:1d:92:91:64:86:b0:71:
37:22:87:0c:9b:42:2b:cf:6c:bd:a6:fe:51:57:3c:
9d:2c:e8:99:98:52:53:80:3d:d8:2e:9f:b2:a9:b5:
d8:c2:e4:37:3b:f5:b0:09:cc:c0:7b:2b:94:37:01:
76:41:ee:a6:dc:26:83:c0:d7:50:0b:b2:c1:ad:88:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2E:35:6A:70:9C:E1:BB:AF:F8:3E:63:BD:C2:52:12:77:67:78:DC
X509v3 Authority Key Identifier:
keyid:3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/yi41anCc4buv-D5jvcJSEndneNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.204.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:40:35:e2:23:45:e4:62:49:88:fe:54:c9:0f:33:24:93:7a:
31:f1:dc:f4:20:59:07:91:ca:f4:54:22:c1:19:11:28:2a:f5:
c7:a4:89:5d:d0:88:02:63:ef:33:0f:69:31:2f:86:6e:a0:2b:
33:27:f6:26:6e:11:3b:0b:67:48:d8:8a:4b:6e:30:ec:74:bf:
4d:91:99:c7:0c:98:4d:91:92:0f:fd:f8:ca:3a:d6:51:f3:a9:
eb:82:62:41:6d:3e:d8:03:dc:b2:35:21:57:d8:ce:fb:40:67:
1b:8a:01:ed:56:cb:6c:f1:04:a8:aa:b0:93:16:20:21:82:3e:
19:db:56:18:cc:ef:19:86:ee:4e:39:fb:37:9a:75:92:23:41:
be:c4:07:f9:56:50:12:5f:bf:1c:01:01:c1:6f:c5:b2:95:0c:
26:1f:ad:b3:7a:b5:89:ae:08:9e:6b:8c:f0:b1:f3:16:da:1a:
99:ca:16:f9:72:aa:45:b9:bb:1f:3e:d4:79:37:92:5e:b4:cc:
f6:38:dd:59:09:65:39:c5:dc:5c:e4:c5:ae:20:57:49:1e:51:
05:fe:f4:e5:7e:ab:f6:6d:be:a4:4b:c2:3c:3c:ec:7c:83:78:
9d:54:f3:ad:22:01:12:6b:5b:ea:d8:67:89:d0:62:e9:06:0c:
e7:ba:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:46:36 2024 by rpki-client on console-fra.rpki-client.org