Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/iyyE3UfMRpct-E0oBY9Wh68K3oU.roa
File: iyyE3UfMRpct-E0oBY9Wh68K3oU.roa (raw, json)
Hash identifier: +5DRd5jVXJuHb8Sb2UbybfWLSIQk2Q1ASpsfR8FtVJs=
Subject key identifier: 8B:2C:84:DD:47:CC:46:97:2D:F8:4D:28:05:8F:56:87:AF:0A:DE:85
Certificate issuer: /CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Certificate serial: 018CC56E4CDAA77734A3C021E3B67D488515
Authority key identifier: 48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/iyyE3UfMRpct-E0oBY9Wh68K3oU.roa
Signing time: Mon 01 Jan 2024 14:29:49 +0000
ROA not before: Mon 01 Jan 2024 14:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57302
IP address blocks: 91.216.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:4c:da:a7:77:34:a3:c0:21:e3:b6:7d:48:85:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Validity
Not Before: Jan 1 14:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b2c84dd47cc46972df84d28058f5687af0ade85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:e1:35:70:58:a5:6a:2f:de:7d:1e:d6:2b:
b7:54:ca:04:67:45:db:62:74:f0:a1:82:48:7f:51:
43:d7:2f:90:8b:b2:dc:30:7d:8a:1c:cc:3a:64:8b:
1a:a6:e1:1b:0b:63:3a:82:24:20:a8:66:9d:4a:7a:
97:9c:b8:1e:c2:9f:cb:cf:5e:a8:db:6c:06:0b:bd:
91:e2:a8:01:f7:0b:d3:ae:7b:34:89:ed:5e:91:7e:
6e:c0:8d:7a:5f:67:da:4e:57:79:5e:30:d8:b2:1e:
23:0a:79:85:85:60:89:85:5b:cf:58:c2:96:56:c8:
aa:72:4b:3e:35:97:69:4d:c0:ce:7c:09:de:60:f5:
d7:0b:2e:00:88:d0:b6:e6:2b:c7:fd:ab:6b:cf:c9:
13:a9:8e:a4:b7:6d:a6:4e:b0:7b:d0:66:60:48:f6:
4f:59:01:b4:20:99:c7:8d:b5:e0:c8:c0:da:6f:9d:
43:db:0a:b7:db:e4:f9:53:4e:f1:15:c4:be:f1:06:
26:a0:d1:d2:58:c5:53:c9:4d:93:ad:76:8c:0b:37:
8a:c9:2e:88:20:5f:20:c4:04:01:3a:cb:2f:a5:cd:
48:db:fa:cb:40:f9:6a:e7:25:5f:d7:d6:d8:c5:51:
cb:b5:eb:83:8b:f8:c5:ea:ea:62:37:9b:91:d6:1b:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2C:84:DD:47:CC:46:97:2D:F8:4D:28:05:8F:56:87:AF:0A:DE:85
X509v3 Authority Key Identifier:
keyid:48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/iyyE3UfMRpct-E0oBY9Wh68K3oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.124.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ea:2a:d1:40:9c:43:f1:df:59:64:85:fd:18:4a:43:5b:73:
75:99:fe:ff:34:2a:01:8b:d3:56:9a:6b:34:9a:72:7c:05:4e:
ae:06:8a:54:be:38:20:59:d1:be:79:be:8f:c0:94:40:e2:6f:
23:28:d8:2c:11:87:cf:80:63:ee:96:63:ac:ad:48:72:e6:fe:
10:36:4c:f1:ac:26:d8:56:69:7d:c3:72:38:d7:e2:c3:22:c3:
2d:b2:5e:88:59:3c:3f:0a:b0:82:a4:85:d2:55:af:af:10:0f:
37:9c:60:e4:0f:90:6f:d8:94:2e:d9:2f:48:ca:aa:2c:a8:1d:
0e:af:ce:8a:ce:fa:27:68:3e:5a:d7:c7:71:b1:17:12:22:13:
9d:d9:e2:ba:42:03:ef:03:93:38:4f:74:1e:87:c1:fa:82:bf:
e1:46:37:b0:fd:76:54:49:59:79:1e:c8:b8:9f:ff:65:bb:81:
a0:8c:52:e0:71:6d:19:34:c7:50:83:b3:1a:cd:50:e0:25:18:
d0:f7:be:f3:77:3b:2c:0f:8c:ba:66:87:04:45:c9:49:8b:b0:
d6:a8:c4:a3:b7:a3:f5:4c:a0:90:0a:c9:51:81:01:6d:66:75:
29:ea:05:02:b2:78:2b:1b:b8:29:57:a4:10:5b:6e:5d:bb:26:
74:d9:18:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:01:08 2024 by rpki-client on console-fra.rpki-client.org