Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/sfQZPpGpNeYVWXlyQqqfFO1t7t0.roa
File: sfQZPpGpNeYVWXlyQqqfFO1t7t0.roa (raw, json)
Hash identifier: ri3ZVcjnGr/qNykNmEWEMclDO7bE40245vOX+J8H8QE=
Subject key identifier: B1:F4:19:3E:91:A9:35:E6:15:59:79:72:42:AA:9F:14:ED:6D:EE:DD
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 018CC34906EBA5D28111260FA2F8041AE328
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/sfQZPpGpNeYVWXlyQqqfFO1t7t0.roa
Signing time: Mon 01 Jan 2024 04:29:52 +0000
ROA not before: Mon 01 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29286
IP address blocks: 90.159.208.0/20 maxlen: 20
90.159.224.0/21 maxlen: 21
90.159.224.0/20 maxlen: 20
90.159.220.0/24 maxlen: 24
90.159.232.0/22 maxlen: 22
90.159.236.0/22 maxlen: 22
90.159.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:06:eb:a5:d2:81:11:26:0f:a2:f8:04:1a:e3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 1 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1f4193e91a935e61559797242aa9f14ed6deedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:b7:03:17:30:a0:a5:8e:13:35:78:8c:83:
cb:50:af:fa:5b:51:ac:74:c4:20:a1:40:90:8d:b2:
e5:6d:a5:0a:e8:5c:89:12:cd:79:ce:5e:60:58:29:
76:34:c8:c0:d0:2a:c3:37:3a:cf:ff:0a:5a:45:4c:
5f:c0:cd:51:6f:74:c0:cf:e6:bb:ad:ad:37:5f:b3:
bd:f5:03:24:2d:b5:91:e0:ca:d9:02:74:85:44:93:
36:3d:d1:a2:c2:cf:e1:02:a1:20:0f:09:09:8c:c2:
12:d2:97:3d:20:67:94:74:92:1f:0c:29:37:92:fb:
7c:39:8e:b7:15:94:5b:07:15:d2:a3:bb:eb:c4:7a:
15:f4:78:cb:83:99:b5:92:4b:59:87:57:5f:13:d1:
c7:a7:50:5d:20:9a:8d:74:ec:e8:9d:2f:9c:f2:5e:
3d:f0:06:e7:8f:17:f8:bf:1c:96:e6:77:a0:54:1c:
80:6d:fa:4f:ad:59:1a:79:31:1f:1a:6c:de:7f:d4:
85:bf:45:0d:02:8c:15:06:aa:33:ed:5b:b4:47:70:
f9:16:85:ee:9b:de:16:7e:a6:fd:a2:a6:23:f9:39:
10:1f:2a:0f:3d:cd:bc:81:8f:14:ad:33:4d:66:07:
21:60:95:55:f2:f2:5d:32:50:37:c8:68:83:a0:54:
41:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F4:19:3E:91:A9:35:E6:15:59:79:72:42:AA:9F:14:ED:6D:EE:DD
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/sfQZPpGpNeYVWXlyQqqfFO1t7t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.159.28.0/24
90.159.208.0-90.159.239.255
Signature Algorithm: sha256WithRSAEncryption
96:38:14:60:fa:fe:97:67:a6:aa:8e:c5:ea:13:7c:1c:a5:fc:
1d:7b:a6:71:1c:54:73:39:66:54:75:fe:e8:d1:31:b7:38:c9:
ca:a0:30:38:17:dc:cb:81:b1:62:c5:60:b6:07:5a:37:bc:08:
ce:cb:f3:b1:b5:a6:42:b2:1c:6f:55:aa:c3:15:aa:c4:72:2f:
bb:f8:8b:fd:8d:c4:cd:86:4f:70:1d:55:f4:c7:8b:66:ef:18:
bb:09:38:95:2c:89:eb:b9:4f:39:53:ea:e1:8d:38:c5:f1:d4:
d5:7b:50:92:06:37:5c:6f:bd:18:8b:f7:51:d8:19:f5:b0:9d:
62:02:46:a0:af:d8:71:5b:ac:0d:be:40:0f:50:ae:6a:c8:e9:
0a:99:6b:7a:9d:fb:e3:c8:e0:42:dc:fa:0e:8c:ef:74:f9:c3:
ea:7b:b1:7f:64:ea:3d:e5:80:1a:45:9c:7a:bd:48:92:e2:9f:
13:0d:f8:2f:0b:98:f3:38:b4:79:9f:b8:52:5c:f4:18:a5:7d:
30:05:83:f0:3a:39:d4:e7:c9:36:a4:55:ad:86:70:a7:4d:10:
9d:80:eb:d5:68:b9:cd:2e:85:49:e0:ad:7e:31:47:51:71:f4:
0a:6b:f8:75:c8:42:e0:58:8d:75:0d:d9:d6:72:c9:9e:09:63:
89:32:f4:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 5 03:00:14 2024 by rpki-client on console-fra.rpki-client.org