Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/b5B4w1b2xL25CByDFdL1VZjHb1o.roa
File: b5B4w1b2xL25CByDFdL1VZjHb1o.roa (raw, json)
Hash identifier: RO9L54RB4Vz32uVQ2Z8Ibg+42Gw260npdHKcKdP8vMs=
Subject key identifier: 6F:90:78:C3:56:F6:C4:BD:B9:08:1C:83:15:D2:F5:55:98:C7:6F:5A
Certificate issuer: /CN=aef20efc0ae4013e6f4867c15f2377b235095b86
Certificate serial: 018CC8DE21D5B578FF774F359E781B299C03
Authority key identifier: AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/b5B4w1b2xL25CByDFdL1VZjHb1o.roa
Signing time: Tue 02 Jan 2024 06:30:49 +0000
ROA not before: Tue 02 Jan 2024 06:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48102
IP address blocks: 91.210.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:21:d5:b5:78:ff:77:4f:35:9e:78:1b:29:9c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef20efc0ae4013e6f4867c15f2377b235095b86
Validity
Not Before: Jan 2 06:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f9078c356f6c4bdb9081c8315d2f55598c76f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:ca:9f:13:2f:a3:80:2f:f7:bd:9f:7a:d5:
4c:d7:15:de:25:19:00:5c:bb:fb:08:55:e6:4e:e0:
66:fb:bf:57:96:89:f4:c9:99:c1:54:92:e0:df:47:
bd:4d:19:52:f5:f6:b1:c4:73:3a:f9:17:c9:f9:e8:
dc:19:f3:68:b5:71:52:e3:be:7a:3d:2e:b4:1c:66:
75:3f:d0:38:ec:b2:d0:31:c9:b8:a7:97:6e:67:a6:
7e:8a:06:d7:be:59:bb:34:50:a8:a9:e2:27:aa:1f:
4d:f4:00:96:75:66:e9:26:a3:ef:df:24:1f:15:83:
61:59:27:4a:64:4c:31:70:61:81:19:6b:4c:0c:65:
a8:a4:c1:7e:97:a4:a0:5b:5b:5c:5e:84:6e:d3:de:
87:1b:f5:c4:bb:80:dc:f8:bb:ae:f8:45:82:38:ce:
66:11:98:fe:4f:af:ae:c6:e7:20:d5:d1:c8:f6:87:
32:5f:0e:fc:66:4e:9b:eb:06:5d:59:6e:ea:34:bd:
9c:4f:2a:ce:1b:7f:c0:49:3a:e9:ee:58:ea:3d:62:
9f:45:42:0e:8f:a0:21:c0:14:ee:a8:17:78:01:f9:
c6:78:65:37:99:b2:46:51:d5:9a:4b:cf:23:84:89:
40:54:b6:4f:62:f1:5b:7c:98:ce:76:98:ec:b5:0a:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:90:78:C3:56:F6:C4:BD:B9:08:1C:83:15:D2:F5:55:98:C7:6F:5A
X509v3 Authority Key Identifier:
keyid:AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/b5B4w1b2xL25CByDFdL1VZjHb1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.4.0/22
Signature Algorithm: sha256WithRSAEncryption
13:f3:32:bd:fd:d8:5d:39:f6:06:e6:be:17:4b:2f:90:fd:ae:
18:c6:5a:73:49:5f:31:65:a3:3c:9e:7c:7c:9f:66:39:6f:80:
50:5d:01:57:93:99:13:1f:09:64:d9:2c:cc:ff:ae:b9:46:51:
de:a8:a9:dc:cd:4b:51:b9:5b:11:fc:af:44:8e:b9:c7:49:8c:
f8:7d:db:ff:6b:c6:34:f9:a8:57:29:c1:44:39:33:1c:ec:b5:
e3:d9:e4:62:4e:1a:1c:ac:41:da:ae:ee:d7:a9:51:0e:55:be:
ca:cb:31:a6:59:7e:38:71:c5:57:50:09:b9:3b:3d:9f:b9:e5:
eb:1c:f2:69:e0:25:2d:9e:d1:17:2d:af:9e:eb:35:9c:e7:70:
b1:76:71:fb:56:ff:f5:4c:7a:25:8e:ef:32:a2:c1:d6:08:45:
51:4f:a3:96:ee:5e:75:0a:c9:07:8c:dd:d8:cc:ca:d1:6c:fd:
ec:e1:31:42:a4:77:a6:ec:04:06:80:0d:ad:b8:61:ad:f8:58:
c8:a5:1a:13:73:a0:55:0e:32:4c:85:d9:a1:35:21:de:39:fc:
c0:bb:a0:10:71:a9:c8:3d:e7:f9:c3:4c:d9:d2:a6:e5:29:77:
74:01:4e:8d:79:4b:ce:13:3b:c5:10:21:d6:4d:ef:04:9d:21:
38:6a:f5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:14:37 2024 by rpki-client on console-ams.rpki-client.org