Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/jESDyVr8DzeDvON45At5wf8f8fw.roa
File: jESDyVr8DzeDvON45At5wf8f8fw.roa (raw, json)
Hash identifier: /FOy1Mx+6LyZc3+m7YcWacSpFZZ1lpVDFD4xVOa5YlY=
Subject key identifier: 8C:44:83:C9:5A:FC:0F:37:83:BC:E3:78:E4:0B:79:C1:FF:1F:F1:FC
Certificate issuer: /CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Certificate serial: 018CC26D14BA8E0EE11BF3E76D55B8BEA89D
Authority key identifier: 1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/jESDyVr8DzeDvON45At5wf8f8fw.roa
Signing time: Mon 01 Jan 2024 00:29:37 +0000
ROA not before: Mon 01 Jan 2024 00:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58310
IP address blocks: 91.109.224.0/23 maxlen: 23
91.109.226.0/23 maxlen: 23
185.173.72.0/24 maxlen: 24
185.173.73.0/24 maxlen: 24
185.173.72.0/22 maxlen: 22
185.173.72.0/23 maxlen: 23
185.173.74.0/23 maxlen: 23
91.109.230.0/23 maxlen: 23
91.109.228.0/23 maxlen: 23
2a0b:3901::/48 maxlen: 48
2a0b:3901::/47 maxlen: 47
2a0b:3901:1::/48 maxlen: 48
2a0b:3900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:14:ba:8e:0e:e1:1b:f3:e7:6d:55:b8:be:a8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Validity
Not Before: Jan 1 00:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c4483c95afc0f3783bce378e40b79c1ff1ff1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:a8:d3:08:a9:bc:a6:c5:4a:4e:ce:56:93:
a5:ef:e5:6c:0e:50:f4:63:c9:cb:a5:45:a0:98:15:
11:be:01:ce:43:e3:31:43:6a:10:53:89:23:9f:fd:
d7:9f:7e:1b:45:b8:2c:d5:15:c6:53:ac:78:fe:b3:
42:3a:9e:38:18:ac:22:75:8e:b4:5e:05:9c:19:f4:
aa:3e:b5:63:83:87:00:dc:c8:0a:64:95:d5:6d:52:
8f:3e:6d:a9:c3:8c:a2:e8:23:d0:e5:75:d1:68:94:
8e:73:5c:dc:91:d8:c3:48:59:df:42:dd:00:36:d7:
36:84:d4:07:9b:db:40:e4:58:c6:b6:7d:16:b3:e7:
4d:b6:84:ae:49:84:9a:7a:97:38:34:11:24:42:c6:
67:56:42:d2:13:72:3b:a0:28:bb:be:9d:c4:36:07:
b3:5d:83:6c:07:87:1a:e5:ae:7a:b0:70:da:af:3b:
a6:89:8c:dd:9e:c1:56:84:f2:07:84:c3:ea:2d:11:
b6:62:dd:b4:d6:0d:3a:ab:5a:81:c0:a7:89:a4:e9:
b2:39:d8:ad:e7:af:fa:bc:e0:45:39:25:07:a1:22:
e0:51:7d:19:8f:25:7b:c0:98:55:1e:85:01:be:96:
6c:d1:a3:17:e9:7d:1a:a1:fa:29:dc:7a:1f:b1:91:
47:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:44:83:C9:5A:FC:0F:37:83:BC:E3:78:E4:0B:79:C1:FF:1F:F1:FC
X509v3 Authority Key Identifier:
keyid:1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/jESDyVr8DzeDvON45At5wf8f8fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.224.0/21
185.173.72.0/22
IPv6:
2a0b:3900::/29
Signature Algorithm: sha256WithRSAEncryption
39:f3:59:75:4a:94:8a:ef:a6:fd:31:ec:7f:d9:87:8f:2d:6a:
3a:ac:93:ef:ff:87:28:20:4c:a2:bc:49:1f:5d:06:5e:07:83:
bd:00:3a:08:9d:35:0d:87:4f:e5:b3:80:56:a7:11:1f:c7:71:
d6:9a:e9:29:af:50:03:b9:ca:23:24:4f:70:b3:1e:fc:17:db:
db:14:db:8d:8d:fd:2d:00:9a:c1:e3:db:09:29:00:e9:ac:2d:
00:89:25:12:92:15:1a:b8:71:6b:c7:11:6c:2d:0c:df:29:db:
1c:ef:dd:b7:f1:95:ef:c4:b6:b9:a6:21:44:2e:dd:e6:3a:e2:
b1:a9:16:2b:30:21:59:36:eb:b3:1d:45:f5:b8:36:e5:db:b0:
aa:27:bb:5a:c5:3e:37:dc:f7:33:35:73:22:4d:71:6f:d8:af:
13:87:b0:77:be:af:36:71:46:cd:cb:73:4b:1b:84:dd:aa:ae:
10:80:59:54:ac:49:06:e5:86:ca:16:89:d1:1c:a4:a2:e6:88:
3c:cc:b1:a9:30:6f:9b:e4:30:4a:14:a7:84:c8:a8:49:2f:77:
58:2e:5a:94:1b:a9:b7:ca:5f:c8:d6:ba:38:92:11:59:7b:96:
86:8f:89:a4:11:a9:bc:9e:34:bb:01:55:54:cf:31:bd:8a:79:
c0:55:51:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:09:29 2024 by rpki-client on console-fra.rpki-client.org