Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/tBHYS9d7WS3V-WqvtqNg2Y1rVgs.roa
File: tBHYS9d7WS3V-WqvtqNg2Y1rVgs.roa (raw, json)
Hash identifier: uSUgmJHVRbJgzYwiNxPx7yi4YphDNmaIEMK5spMRPYk=
Subject key identifier: B4:11:D8:4B:D7:7B:59:2D:D5:F9:6A:AF:B6:A3:60:D9:8D:6B:56:0B
Certificate issuer: /CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Certificate serial: 018CC5DC42AAF860F02A7668F1C3F48C39E7
Authority key identifier: C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/tBHYS9d7WS3V-WqvtqNg2Y1rVgs.roa
Signing time: Mon 01 Jan 2024 16:29:55 +0000
ROA not before: Mon 01 Jan 2024 16:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43771
IP address blocks: 91.198.148.0/24 maxlen: 24
185.202.4.0/23 maxlen: 23
185.202.6.0/24 maxlen: 24
2a0a:cdc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:42:aa:f8:60:f0:2a:76:68:f1:c3:f4:8c:39:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Validity
Not Before: Jan 1 16:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b411d84bd77b592dd5f96aafb6a360d98d6b560b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ad:40:53:1a:f8:30:7c:4b:14:9f:1f:3c:8c:
76:df:2e:94:8d:26:b0:21:1a:14:df:b2:ec:b9:75:
ba:50:10:1a:03:16:66:8a:80:68:ad:40:33:81:cb:
3b:e4:65:b1:06:36:66:08:10:d5:45:85:e7:51:69:
5e:95:8d:8f:63:1a:53:fd:90:dd:e5:b9:40:2e:fc:
7a:65:40:93:f1:4e:a0:cd:7c:1c:13:c7:75:2d:5d:
df:70:41:a0:8a:22:a5:ae:4f:cb:d3:bd:6b:d7:e1:
71:e2:57:a1:3a:6f:b0:c4:c6:ec:22:5b:ac:2d:c9:
d0:6f:04:f0:a0:4e:2d:79:33:11:66:ff:89:b6:3a:
3a:ba:3c:9f:ef:98:38:66:e5:4e:be:af:43:1a:99:
52:e3:79:a8:e0:73:fe:8e:69:66:32:d4:8b:b1:ca:
cc:7e:06:0e:50:52:55:4c:45:4a:89:5e:fc:13:55:
79:7f:c2:bd:42:45:b7:10:5a:eb:9b:b3:86:43:04:
7d:b7:34:70:f1:9d:a9:bf:25:2b:ea:c6:25:23:a6:
f2:c6:8f:3c:51:f9:c3:be:b2:42:d8:9d:00:2b:8a:
32:ec:f2:88:37:93:76:90:00:59:9d:3e:7e:10:7c:
58:39:84:81:00:e2:24:35:9d:0a:c3:d5:de:95:cb:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:11:D8:4B:D7:7B:59:2D:D5:F9:6A:AF:B6:A3:60:D9:8D:6B:56:0B
X509v3 Authority Key Identifier:
keyid:C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/tBHYS9d7WS3V-WqvtqNg2Y1rVgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.148.0/24
185.202.4.0-185.202.6.255
IPv6:
2a0a:cdc0::/32
Signature Algorithm: sha256WithRSAEncryption
af:77:86:e9:f9:c6:55:df:e5:8f:33:98:5a:32:a0:fb:26:c3:
b9:b0:c7:f2:06:af:df:9d:58:26:bd:2c:8f:c3:e3:bb:0c:0f:
6d:c6:17:bd:77:58:83:93:2c:1a:88:ae:37:07:76:b0:f3:20:
3e:22:21:d3:fc:b4:be:ee:89:78:f7:65:2f:87:79:51:b5:95:
f9:3f:9c:93:13:95:58:e6:65:42:0e:bd:de:8a:0b:83:63:b7:
17:17:59:0a:ce:da:6f:30:66:a2:c3:88:ca:22:09:d4:4a:6e:
82:44:26:d3:5a:ab:9b:54:a7:3c:42:0c:65:01:ee:1f:4f:51:
e6:c2:6a:9c:db:73:6d:1a:75:3a:c9:5c:2c:71:7f:80:bb:46:
a7:25:07:c8:44:e1:ba:4b:57:9e:03:cf:32:72:05:ff:91:89:
a5:91:13:a7:cc:b1:1f:5f:64:10:cc:d0:cf:3b:3b:fa:f6:29:
ca:64:55:a5:f3:23:e8:28:c2:d9:8d:92:c9:50:61:8b:d1:e0:
93:d6:48:f3:cb:56:84:43:c1:0c:f9:4c:80:01:56:76:3f:30:
b3:53:19:b1:d4:1f:b2:b6:8d:59:73:8a:c5:9d:ae:8e:65:e2:
1e:69:b4:96:8b:4c:28:56:60:58:7a:06:10:cb:42:20:df:b5:
21:0b:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:44:13 2024 by rpki-client on console-ams.rpki-client.org