Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/rl0vG9MdnfuxwreYZm7FvKbU96E.roa
File: rl0vG9MdnfuxwreYZm7FvKbU96E.roa (raw, json)
Hash identifier: 4hiiVMz/pkZNhAnJ0NSoQTCeM/YZBGOD2iha/5U7JLY=
Subject key identifier: AE:5D:2F:1B:D3:1D:9D:FB:B1:C2:B7:98:66:6E:C5:BC:A6:D4:F7:A1
Certificate issuer: /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial: 018E9A2C672C1593846B42A34210062FC5E1
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/rl0vG9MdnfuxwreYZm7FvKbU96E.roa
Signing time: Mon 01 Apr 2024 14:59:45 +0000
ROA not before: Mon 01 Apr 2024 14:59:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35732
IP address blocks: 91.240.80.0/24 maxlen: 24
91.240.81.0/24 maxlen: 24
91.240.82.0/24 maxlen: 24
91.240.83.0/24 maxlen: 24
194.246.88.0/24 maxlen: 24
194.246.89.0/24 maxlen: 24
194.246.90.0/24 maxlen: 24
194.246.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9a:2c:67:2c:15:93:84:6b:42:a3:42:10:06:2f:c5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
Validity
Not Before: Apr 1 14:59:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae5d2f1bd31d9dfbb1c2b798666ec5bca6d4f7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:74:73:6f:6e:06:56:e2:ba:6b:64:32:02:b3:
9d:98:76:43:24:18:6b:4f:6f:09:78:15:18:7a:a7:
fa:70:4f:2e:99:c9:cc:e8:51:12:6e:8c:bc:07:80:
75:39:4b:f4:e1:25:85:99:61:9f:8b:c4:94:c6:82:
a5:b5:cf:5d:86:1a:77:51:1c:ec:ce:1d:97:2e:14:
9d:fc:7a:30:3f:14:ed:55:69:54:e7:3c:ca:fe:35:
b6:c6:65:bf:5c:07:f7:fb:d8:d7:97:99:a6:2d:80:
ee:42:78:98:46:9d:5e:03:09:64:5a:bf:00:64:fb:
41:12:ae:44:dd:5e:cb:52:4f:d5:f2:ba:5c:3d:94:
87:47:ae:66:49:da:90:4b:7d:ea:8c:20:08:91:0e:
6c:2f:72:1a:97:57:5c:c7:7f:f2:77:1d:bf:25:a6:
f9:d2:6b:86:51:c2:fd:a9:db:6e:f0:4e:b0:35:80:
f5:74:c3:73:f0:e7:e9:6e:47:55:42:ce:55:e8:da:
a9:69:fb:5a:cc:d5:b0:7c:04:ca:8b:1b:90:30:d5:
d8:4a:ae:ee:e5:07:8e:94:29:bd:02:d6:61:d8:5f:
28:7f:be:a6:50:bb:69:70:bc:17:3c:84:d1:02:c2:
12:e5:c8:53:92:8f:da:6d:03:d0:10:60:70:cb:d7:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5D:2F:1B:D3:1D:9D:FB:B1:C2:B7:98:66:6E:C5:BC:A6:D4:F7:A1
X509v3 Authority Key Identifier:
keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/rl0vG9MdnfuxwreYZm7FvKbU96E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.80.0/22
194.246.88.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:91:7b:79:02:7c:18:4d:8a:ab:4e:fa:77:26:aa:be:e4:42:
af:1f:22:df:fc:5d:96:09:e6:e9:dc:ca:9f:06:43:89:ec:66:
11:f1:a3:d4:fe:1b:47:f5:6f:b8:4f:95:fe:db:e1:05:ce:2a:
13:d7:be:9f:af:bd:d1:78:a7:2b:8f:54:99:cd:38:f7:d2:f7:
8c:99:c7:6f:0a:40:0e:0b:36:5e:67:f0:8a:c7:49:f4:cb:42:
03:66:0f:dd:26:d4:dd:73:ec:75:bc:b4:7a:07:26:fc:92:f2:
38:0f:ba:8e:24:ca:a2:0d:e4:d9:6e:c1:e9:e9:ec:cc:e7:6b:
f7:be:7d:de:fd:d5:5e:ae:68:66:a8:4e:f0:dd:92:ce:9f:63:
58:47:a5:eb:86:9a:ec:af:ec:46:4f:97:37:00:8d:5a:96:a5:
73:de:f4:37:99:18:1c:91:e6:0c:08:f0:d5:80:c7:a8:86:40:
b9:a1:cc:63:42:d8:87:b5:82:01:ba:df:a7:50:47:82:81:30:
bd:48:19:87:ea:ee:33:20:74:08:9c:f0:bf:d8:64:d0:34:44:
34:c4:83:6f:d0:c0:31:00:d0:49:69:f8:2d:c4:4f:c1:4e:61:
0a:ec:a2:ca:10:e8:9a:41:9d:88:9d:fd:c8:22:c5:68:77:85:
cc:f3:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:51:06 2024 by rpki-client on console-fra.rpki-client.org