Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/73Frd6Nk-nyS_SxjtuD1d6GgeFo.roa
File: 73Frd6Nk-nyS_SxjtuD1d6GgeFo.roa (raw, json)
Hash identifier: BbbQ914VnONli+eJ+bVJRtkkvZHNZyNxe/ZdW1Jq8t8=
Subject key identifier: EF:71:6B:77:A3:64:FA:7C:92:FD:2C:63:B6:E0:F5:77:A1:A0:78:5A
Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569
Certificate serial: 018CC7951B5BC2CDE8E5D4E3E58FD2B71083
Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/73Frd6Nk-nyS_SxjtuD1d6GgeFo.roa
Signing time: Tue 02 Jan 2024 00:31:26 +0000
ROA not before: Tue 02 Jan 2024 00:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49957
IP address blocks: 91.206.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1b:5b:c2:cd:e8:e5:d4:e3:e5:8f:d2:b7:10:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569
Validity
Not Before: Jan 2 00:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef716b77a364fa7c92fd2c63b6e0f577a1a0785a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b1:da:f4:1a:4c:4e:ee:45:f4:3d:01:97:ac:
ef:f8:c6:81:73:21:a9:84:1d:54:d7:2d:81:3d:5b:
64:16:55:09:10:4b:c8:e5:47:55:3d:1b:f4:b2:d2:
51:57:77:d6:93:85:62:2c:25:b6:a0:1e:84:04:17:
27:c5:01:18:81:6a:ee:14:81:d6:fa:fc:55:b7:6a:
12:f9:d4:2d:8b:8c:a7:c1:0e:33:c5:20:10:50:24:
d5:8f:e9:ec:d6:07:72:1c:67:00:2c:ab:01:99:d8:
b4:38:98:12:f4:5e:0d:1f:da:19:15:ce:7a:e8:41:
39:14:ea:c9:0c:61:1e:d5:82:19:be:4b:e3:58:6b:
74:ef:f6:39:87:8f:19:8c:aa:93:24:e8:8f:f9:a0:
d8:22:fb:87:c5:c8:66:d0:64:2f:90:4d:9d:61:b8:
58:4c:cc:7b:a7:e2:2e:ed:09:f8:40:1f:cd:94:0f:
38:f5:34:57:d1:c2:7e:86:85:49:9a:6b:de:38:ac:
85:93:0d:89:31:6f:2d:86:df:0f:5e:80:05:d8:81:
c5:7d:df:34:f5:ff:70:e3:d7:af:75:f4:71:4a:f3:
e2:e9:09:32:14:62:b2:42:31:b2:d6:db:45:db:d9:
9d:18:b3:66:ad:e2:1a:35:82:23:e0:3f:b1:77:e2:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:71:6B:77:A3:64:FA:7C:92:FD:2C:63:B6:E0:F5:77:A1:A0:78:5A
X509v3 Authority Key Identifier:
keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/73Frd6Nk-nyS_SxjtuD1d6GgeFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.184.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:7e:b6:4b:b5:7c:c3:97:4d:c7:e4:a3:5b:98:50:d7:92:e0:
16:9d:0c:0a:ea:7c:ce:93:47:51:b4:45:64:df:46:ef:d3:9c:
c0:b3:4f:71:63:0b:1e:6a:2d:65:ac:c0:c5:9b:d6:d8:19:3a:
d9:bd:e5:76:bd:33:b1:78:07:8f:64:c3:b1:ee:fe:88:d9:e1:
92:33:bb:4b:db:45:ea:b5:f4:92:27:3d:70:ce:48:59:bf:ab:
f7:0c:ab:cc:ea:1d:3e:3d:1d:b5:b6:e9:80:24:19:45:14:a6:
71:91:7c:76:bf:da:54:fa:6a:e3:d2:05:e8:3e:c4:44:09:5f:
64:ba:0f:06:42:50:80:ad:bd:96:64:ca:ac:2a:a8:29:63:5d:
36:3f:eb:45:f8:87:47:aa:01:6f:4c:d4:d8:ea:a3:8b:14:c1:
28:11:e8:5a:ff:0b:82:59:7d:31:7b:aa:21:65:4b:df:92:57:
07:5a:d6:c3:2b:7c:43:0b:e7:4c:57:70:02:39:f4:8f:10:0c:
99:1f:69:a3:4c:4d:ef:86:f8:c1:8b:ac:e1:96:60:ab:ff:96:
ad:b4:04:69:a8:0c:fc:d7:ef:58:7a:d1:27:ba:10:e9:36:f3:
3f:45:57:b1:8b:9e:6a:78:ff:91:c4:66:97:da:8b:7d:60:3d:
60:65:0c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:07:36 2024 by rpki-client on console-fra.rpki-client.org