Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/u3o4_Ycc8dCMt45Yea9zRkJGy58.roa
File: u3o4_Ycc8dCMt45Yea9zRkJGy58.roa (raw, json)
Hash identifier: 4UdczghdgV9+cg00yshoxAukIuXJ8XHvroiSzdjAj1s=
Subject key identifier: BB:7A:38:FD:87:1C:F1:D0:8C:B7:8E:58:79:AF:73:46:42:46:CB:9F
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 018CC6B792EC11878A19D59E38A2E02DB2F0
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/u3o4_Ycc8dCMt45Yea9zRkJGy58.roa
Signing time: Mon 01 Jan 2024 20:29:28 +0000
ROA not before: Mon 01 Jan 2024 20:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 91.194.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:92:ec:11:87:8a:19:d5:9e:38:a2:e0:2d:b2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Jan 1 20:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb7a38fd871cf1d08cb78e5879af73464246cb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:9c:25:0d:5d:06:7c:7b:2d:53:b0:fd:9a:
a7:fb:64:a7:4c:5a:2c:25:2f:cb:af:1a:a0:26:cf:
76:9f:06:ba:ff:db:0a:0e:4b:db:54:32:bc:ed:a0:
b7:5a:5d:47:be:d3:ba:d9:e6:43:fa:41:3d:87:ef:
a4:68:94:c0:1c:83:d9:2a:3b:29:05:f9:d2:aa:74:
51:f6:37:7d:db:9f:6b:e8:49:79:1f:7f:28:b0:5a:
c8:2c:b3:d0:52:a0:7a:ef:c1:ba:63:cf:4c:65:aa:
03:5f:d5:66:59:70:eb:5d:44:7b:b0:63:22:78:32:
53:dc:12:46:dd:ef:d2:7e:0f:17:ff:75:bd:ff:5f:
d0:04:78:64:5d:40:2e:03:45:5a:90:40:6e:e4:77:
80:7e:3a:40:95:44:7a:95:d4:34:db:ac:32:29:43:
4f:e3:14:b9:6f:04:32:c3:c1:e8:2b:4e:5f:ca:bc:
76:cb:be:6d:fa:9d:d7:9c:40:c7:48:56:22:4a:e7:
08:3a:85:69:63:4a:d7:96:d3:9c:d5:49:87:fb:de:
5a:26:31:f0:8f:40:0d:ce:5b:46:28:d1:19:41:0f:
fa:fe:07:90:59:a5:a6:34:30:29:8b:c2:09:38:a5:
e5:88:d6:be:b9:44:d5:f8:30:95:fb:cf:93:97:5f:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:38:FD:87:1C:F1:D0:8C:B7:8E:58:79:AF:73:46:42:46:CB:9F
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/u3o4_Ycc8dCMt45Yea9zRkJGy58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.236.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ea:2e:9c:71:68:52:7a:65:05:f1:4b:5d:f8:ef:c2:91:1f:
25:d2:02:35:88:ed:1b:e7:31:fb:04:65:3a:8e:1f:32:4b:b5:
84:10:22:ab:39:89:62:ef:61:dd:64:82:50:68:df:cf:d0:a8:
44:61:ae:71:50:ff:ca:6e:b0:0f:a1:55:43:87:e6:5f:39:35:
37:8c:07:03:11:4f:3a:db:84:a7:d3:1b:83:8c:16:2f:58:3b:
02:70:57:3e:f4:84:92:0e:19:9b:8f:15:28:ba:fc:f7:b6:ac:
37:35:e5:7d:b7:21:7a:e3:df:b6:c1:4f:c6:be:b9:92:93:20:
49:b2:cf:59:09:d0:24:f4:b2:57:95:b0:0c:3f:81:81:1f:56:
8c:dd:82:99:c7:da:45:55:50:ae:1e:70:7a:b5:b7:50:36:16:
03:50:c5:42:0c:62:80:61:36:ce:e9:de:97:fa:05:b5:aa:e4:
16:d5:5e:4b:43:6a:6d:80:c3:be:18:4f:6d:d5:a3:27:2e:f4:
d4:78:aa:46:d4:96:59:94:60:d0:6c:42:04:43:50:df:98:11:
f3:ad:15:89:ad:6b:26:6e:0d:d3:62:78:c7:c3:1a:e3:35:aa:
7c:1c:06:dc:e3:b0:fc:d8:e0:3a:25:1f:8a:14:f1:51:2e:df:
b7:87:0f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:02:01 2024 by rpki-client on console-fra.rpki-client.org