Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/IkSVFZmgocaorxCsWenlD1WGnTA.roa
File: IkSVFZmgocaorxCsWenlD1WGnTA.roa (raw, json)
Hash identifier: j2+168lp4Ut4BF+TXDc+80jQafzgYFqC1KIf6LMvNq0=
Subject key identifier: 22:44:95:15:99:A0:A1:C6:A8:AF:10:AC:59:E9:E5:0F:55:86:9D:30
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 018E3C43923987EBFA7E27E6F5A4F3BA96E6
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/IkSVFZmgocaorxCsWenlD1WGnTA.roa
Signing time: Thu 14 Mar 2024 09:20:44 +0000
ROA not before: Thu 14 Mar 2024 09:20:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12731
IP address blocks: 91.216.90.0/24 maxlen: 24
2001:678:2c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3c:43:92:39:87:eb:fa:7e:27:e6:f5:a4:f3:ba:96:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Mar 14 09:20:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2244951599a0a1c6a8af10ac59e9e50f55869d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:f2:85:de:8d:23:91:01:9b:b2:ed:01:1e:
dd:f1:03:14:b2:67:d4:ad:1e:3b:2f:37:f1:f9:17:
cc:2a:f5:79:14:3e:9a:1f:85:f4:03:e8:af:34:1a:
e3:08:02:d6:e0:f6:bc:b7:03:65:e8:15:02:d4:15:
c8:36:f1:6b:d9:83:20:69:d8:cc:a3:b8:3f:80:5b:
fe:df:af:2e:76:a5:8c:e5:44:57:7b:d4:e8:f7:67:
a8:98:96:72:86:d2:38:05:c1:8a:03:63:57:98:b9:
ec:81:4d:d2:41:b6:1a:6a:a2:3f:15:b9:64:d6:0f:
05:52:59:8c:0e:a8:32:bb:64:35:09:3c:a2:de:8e:
2f:ed:03:6d:24:a7:09:6a:27:f9:af:c9:65:ab:b9:
06:02:61:54:c9:87:ff:bc:36:c7:c0:f2:b7:66:fc:
a2:9c:d3:0b:06:8d:27:4c:16:24:12:25:bb:c4:af:
bb:2b:8d:cd:cf:4b:e9:42:03:78:5a:19:d1:78:95:
a6:d9:98:e6:d4:39:ff:15:d1:16:64:eb:e6:c2:36:
1d:ef:92:1a:65:26:4d:fe:38:aa:f0:76:d0:89:d1:
03:31:f7:ee:01:88:11:69:f8:ad:75:89:2a:fd:c2:
21:b2:f2:96:4b:b1:75:a2:13:96:99:fd:72:13:09:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:44:95:15:99:A0:A1:C6:A8:AF:10:AC:59:E9:E5:0F:55:86:9D:30
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/IkSVFZmgocaorxCsWenlD1WGnTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.90.0/24
IPv6:
2001:678:2c4::/48
Signature Algorithm: sha256WithRSAEncryption
4d:91:16:0b:32:03:27:d3:7a:c6:94:1b:22:b4:40:38:24:07:
f9:d0:6e:6b:df:00:08:65:2a:b5:20:1f:a5:f0:6e:49:4c:08:
0c:58:e3:11:d2:8a:56:7a:12:55:6c:2f:e6:84:94:d1:9a:0e:
96:6a:38:75:50:1a:f1:20:b6:8f:9f:c9:5f:bd:30:79:5c:58:
43:7f:c8:1d:c6:ea:9e:e6:b7:6c:39:a3:38:4b:bd:b6:99:cb:
a2:b2:5f:de:d1:ef:0d:eb:59:a7:6b:8d:8c:b8:e7:08:7c:06:
1c:56:fd:49:b1:fb:f2:48:22:43:f5:2c:4f:b3:3d:cc:55:ce:
1d:43:e5:41:9e:16:1d:01:b0:c4:c3:75:95:a3:e2:f0:49:61:
27:65:30:c5:8a:83:ca:75:8b:7b:61:3b:ad:78:30:4b:32:b3:
e7:bf:4e:22:fb:a4:a5:8d:6f:5d:30:ed:67:cb:e7:8c:93:21:
4f:49:0e:5c:fa:71:21:9a:0d:03:1e:59:b1:c5:17:8c:aa:fd:
5c:8f:7e:83:f5:49:8c:21:bc:65:d1:09:ce:b4:56:29:85:03:
ab:6c:da:ed:e0:94:8c:7b:e0:96:1f:44:46:e8:af:94:bd:c4:
e9:d0:97:f3:a7:ba:0d:e7:9f:e7:92:9b:2e:e6:0a:96:09:7f:
2c:ee:3d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:49:28 2024 by rpki-client on console-ams.rpki-client.org