Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/hIMYdWhe3ROv0UEqQ83M9X0QCRE.roa
File: hIMYdWhe3ROv0UEqQ83M9X0QCRE.roa (raw, json)
Hash identifier: fnvfALqo+7s4SC6pBlCPjPB0WIB77fAtUaCZ0zulUy8=
Subject key identifier: 84:83:18:75:68:5E:DD:13:AF:D1:41:2A:43:CD:CC:F5:7D:10:09:11
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 01914C3D1F4013D48FA195F81FEC1D45003B
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/hIMYdWhe3ROv0UEqQ83M9X0QCRE.roa
Signing time: Tue 13 Aug 2024 14:55:59 +0000
ROA not before: Tue 13 Aug 2024 14:55:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 91.103.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:3d:1f:40:13:d4:8f:a1:95:f8:1f:ec:1d:45:00:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Aug 13 14:55:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84831875685edd13afd1412a43cdccf57d100911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:87:3a:7b:b0:6c:5c:a6:dd:3f:e9:3e:d8:
1a:df:e3:90:b8:67:71:f1:c2:05:0d:d9:d6:6a:b3:
43:cb:e6:4f:f0:e3:43:0a:c2:44:74:33:ab:db:04:
d1:0f:38:ef:89:07:12:33:12:81:72:e2:5a:55:0f:
a9:0c:31:5c:fe:12:1a:c4:27:c5:5f:48:14:67:35:
a4:a4:36:8d:09:91:de:30:f7:b2:24:85:e7:53:4c:
1e:c7:ee:d0:45:e9:cf:c8:29:0c:5e:58:0a:12:fd:
74:ce:c9:6f:7c:57:35:76:b0:9e:a8:d0:f6:98:9d:
9c:44:99:4e:6a:5a:e0:1e:26:48:2f:9a:31:4a:45:
ea:e8:6b:2e:a3:fd:62:67:16:1a:53:69:89:3d:fb:
19:77:ac:15:ab:d9:e7:50:f2:e9:af:75:e4:3d:42:
29:2f:36:a4:d5:06:6d:1b:ac:0c:a2:c2:42:83:e1:
d6:cf:4a:20:aa:db:25:87:79:10:22:57:1d:ad:3e:
dd:41:86:2c:a5:4d:0d:79:55:44:ee:3b:45:91:1a:
f6:e4:25:c6:31:c6:5d:6f:25:d2:42:af:f5:52:69:
56:70:c9:84:fb:de:22:d7:c9:25:28:2a:07:71:31:
79:0c:9b:6f:05:56:02:7c:e4:86:8d:50:85:66:ec:
84:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:83:18:75:68:5E:DD:13:AF:D1:41:2A:43:CD:CC:F5:7D:10:09:11
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/hIMYdWhe3ROv0UEqQ83M9X0QCRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.140.0/24
Signature Algorithm: sha256WithRSAEncryption
44:37:3a:8b:47:9e:20:f0:f4:78:9c:c1:cd:e5:a3:6a:75:a8:
37:99:d3:43:fc:fe:42:69:68:be:77:22:75:23:ae:34:66:c5:
6f:fc:09:2f:10:b5:e7:89:48:2c:5e:e1:46:d4:3e:2a:61:8d:
39:23:07:33:e6:cd:c7:12:20:ea:30:5b:11:8a:5b:2d:b8:bb:
54:0d:09:27:9e:47:b0:41:0a:bb:fa:35:c3:06:70:91:cf:9d:
35:0c:bf:68:53:69:57:4e:b4:4c:c8:71:c3:09:50:13:7f:67:
16:42:da:27:28:7c:91:98:39:87:a1:80:f5:77:58:26:f8:3e:
4e:54:e6:24:c9:eb:e9:44:6a:69:e3:fd:9d:0c:4a:db:4e:d5:
94:8e:7b:d9:87:45:43:17:14:21:e7:a8:f2:ce:e4:be:cf:e3:
fa:b5:26:f0:b9:4c:a5:d6:24:36:fa:c1:28:48:00:0d:0e:8e:
8a:a6:9c:39:40:08:93:db:86:33:a0:f2:a3:73:82:b2:d1:bc:
f0:20:4b:fa:2a:aa:6a:1b:53:8a:7c:90:6d:0e:69:45:17:b8:
a0:c3:71:fa:e8:49:f3:fe:33:9f:20:8e:63:38:2c:6a:cb:bc:
77:5b:ec:ec:14:0f:70:0b:1a:63:61:48:72:6e:71:b3:e7:48:
75:42:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:15:06 2024 by rpki-client on console-fra.rpki-client.org