Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/X9w_c7Pz-xgfKBC1Ef5p17MOXUU.roa
File: X9w_c7Pz-xgfKBC1Ef5p17MOXUU.roa (raw, json)
Hash identifier: 8/KuqScyUR6/k4uJAeQq6kbXtWqZ54/y4HjjTsBUTyM=
Subject key identifier: 5F:DC:3F:73:B3:F3:FB:18:1F:28:10:B5:11:FE:69:D7:B3:0E:5D:45
Certificate issuer: /CN=4155087a81848bf7b37ff8be59751d79440d8116
Certificate serial: 018DF3D94E0C6AAE3A0562C6C345B7C53448
Authority key identifier: 41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/X9w_c7Pz-xgfKBC1Ef5p17MOXUU.roa
Signing time: Thu 29 Feb 2024 07:52:01 +0000
ROA not before: Thu 29 Feb 2024 07:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198098
IP address blocks: 91.231.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f3:d9:4e:0c:6a:ae:3a:05:62:c6:c3:45:b7:c5:34:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4155087a81848bf7b37ff8be59751d79440d8116
Validity
Not Before: Feb 29 07:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fdc3f73b3f3fb181f2810b511fe69d7b30e5d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:84:b1:20:e8:87:f1:88:83:a0:c6:3b:00:
66:d3:86:0d:b0:e5:0e:b4:87:64:c2:58:1b:41:82:
b3:e9:3d:c6:75:ac:27:68:52:83:b9:54:5a:1e:59:
29:de:e6:d6:07:0a:95:b3:18:3e:5b:23:f9:60:9e:
2b:05:38:6e:74:04:bb:51:77:14:3e:5f:50:c7:87:
d0:fc:43:72:65:4d:cf:e5:1d:64:18:ac:fd:bc:bc:
63:b7:10:09:43:45:be:7a:1a:b7:a7:ea:5b:e6:8d:
2f:25:b1:c1:51:5e:98:0f:b8:99:53:30:23:27:06:
7e:d2:12:9d:ac:7b:c8:89:44:eb:f5:f2:49:4c:39:
e5:07:7a:c4:e5:56:37:50:73:b7:cf:9f:20:cf:01:
da:26:4a:ad:8c:f7:40:12:50:9d:4b:4a:5b:bd:3a:
af:f4:c7:50:fb:4c:17:6b:09:c9:f2:5d:71:ab:b0:
e8:1c:29:73:24:0c:ec:09:8e:d2:88:52:af:0d:6b:
a1:96:83:60:42:93:9a:6c:ac:23:b2:bd:32:bf:97:
f9:e5:95:4d:99:9e:e7:5c:a8:e8:52:54:68:cc:a6:
f2:08:6c:ae:d4:79:d4:86:ce:9c:ca:40:e8:f8:b8:
0b:35:44:1f:0d:88:53:2e:46:3f:77:b9:d3:e1:a3:
ab:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DC:3F:73:B3:F3:FB:18:1F:28:10:B5:11:FE:69:D7:B3:0E:5D:45
X509v3 Authority Key Identifier:
keyid:41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/X9w_c7Pz-xgfKBC1Ef5p17MOXUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.118.0/23
Signature Algorithm: sha256WithRSAEncryption
02:96:68:6c:31:75:01:43:4f:c1:33:0c:30:74:78:78:c4:3a:
27:1b:16:3f:b5:f2:26:bb:72:be:83:df:32:2a:13:e8:b3:c0:
a9:98:d1:f1:d2:00:a1:18:c6:d3:10:06:7c:8b:ba:02:3a:dc:
f5:f7:41:ef:6f:1c:64:70:f2:99:05:fd:55:75:c7:2c:7f:49:
e8:55:b2:eb:de:ad:53:a9:95:70:83:d3:14:78:0f:49:18:c8:
20:ed:93:55:8e:ea:c1:43:0b:9a:34:e2:45:3b:82:eb:03:1d:
d9:fe:74:c0:6d:1f:ba:3d:31:36:e2:90:ad:00:d7:3b:f9:bd:
ad:78:c9:c6:e0:d5:7a:a3:15:5e:39:fe:71:a3:52:ab:d9:83:
98:ab:54:63:60:7f:74:92:be:9f:48:b0:ac:bf:6f:d1:e8:ea:
34:0c:35:43:63:08:b2:48:75:2a:1e:32:bf:ea:33:b3:f2:40:
cf:90:7a:69:59:0a:85:ca:d1:38:95:96:09:5b:b6:d3:a2:54:
6b:ae:9a:60:41:60:c1:50:66:99:d0:e9:ca:04:62:80:3a:73:
54:6a:66:e3:a4:4a:32:6a:6b:04:63:97:97:d3:ab:b3:87:60:
fa:e2:5f:f2:05:4e:c4:00:9e:8d:43:b3:8b:28:c0:58:29:d1:
e6:58:14:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:44:13 2024 by rpki-client on console-ams.rpki-client.org