Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/1-foSTjDGW_NgrNEibvuEOBGoK90.roa
File: 1-foSTjDGW_NgrNEibvuEOBGoK90.roa (raw, json)
Hash identifier: J0Hdq0yWcCOVybxDLGg8pt0fP9xsyoyLm0B0tSEBQt0=
Subject key identifier: F9:FA:12:4E:30:C6:5B:F3:60:AC:D1:22:6E:FB:84:38:11:A8:2B:DD
Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b
Certificate serial: 018CCA2974287E10755B553411D87A771802
Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/1-foSTjDGW_NgrNEibvuEOBGoK90.roa
Signing time: Tue 02 Jan 2024 12:32:43 +0000
ROA not before: Tue 02 Jan 2024 12:32:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198593
IP address blocks: 91.237.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 01:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:74:28:7e:10:75:5b:55:34:11:d8:7a:77:18:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b
Validity
Not Before: Jan 2 12:32:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9fa124e30c65bf360acd1226efb843811a82bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d4:9f:99:56:30:a1:3c:9b:e4:ba:11:49:29:
b8:75:5b:6a:7b:14:ae:74:ac:fa:2f:34:72:c4:17:
a2:58:58:8f:cc:98:a2:89:c8:9d:53:5c:d1:99:6b:
c2:71:6d:90:6e:01:96:ee:12:53:7a:4b:4d:07:c0:
be:32:71:25:9e:e5:85:16:bc:b6:31:f1:82:69:4f:
99:a7:b1:95:e6:4d:62:27:e7:71:90:57:42:85:8c:
06:4a:f9:71:cb:bb:7a:84:ee:b3:bf:d3:33:0a:34:
4d:24:0e:7f:e3:aa:be:3f:b8:89:20:ef:d9:dd:31:
c8:a8:29:48:b0:60:9a:93:87:b3:5d:33:b5:80:9a:
13:bf:37:33:6e:70:78:dc:91:8c:7f:08:4e:e7:72:
f6:8d:f2:29:74:ea:fb:15:24:30:49:e8:54:2c:b5:
98:e2:ab:17:6a:df:a8:7e:1b:f5:5d:c6:b5:d2:6a:
f1:5a:79:98:7e:5f:7c:53:55:28:ce:dc:f7:d3:7a:
cb:be:33:aa:8e:c5:d3:69:a8:87:a4:24:ab:9c:19:
46:2e:20:99:11:07:c8:5e:e6:52:44:6f:cb:f4:2f:
eb:d3:06:23:4b:4c:91:51:dc:03:cc:94:f7:70:66:
70:f0:dd:60:94:7d:3c:0e:46:cf:88:ed:a3:c5:99:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FA:12:4E:30:C6:5B:F3:60:AC:D1:22:6E:FB:84:38:11:A8:2B:DD
X509v3 Authority Key Identifier:
keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/1-foSTjDGW_NgrNEibvuEOBGoK90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.5.0/24
Signature Algorithm: sha256WithRSAEncryption
25:fc:cf:10:a3:91:ef:c3:67:c8:e6:69:ee:7c:40:48:47:ad:
37:49:56:35:92:dc:45:d8:92:94:93:5a:da:37:1d:1e:7f:76:
6b:e3:3f:12:92:d0:01:a4:d4:5a:79:e8:b9:31:6d:85:11:ae:
5e:9b:56:7d:ad:08:35:2c:9b:9b:d2:f1:21:f3:50:a0:ae:b8:
38:5e:92:78:b4:33:23:1c:59:bd:8f:b7:0d:14:9d:5d:34:45:
5c:87:33:4d:e0:50:ac:39:6e:a4:39:f4:e5:8e:65:54:95:4a:
83:64:50:36:7e:e3:03:01:94:61:75:f5:37:b9:1b:a7:d0:88:
22:cd:84:7c:cb:56:92:99:ea:4d:3a:e5:d7:7f:fc:06:e7:86:
d1:b8:bd:b2:41:77:d1:79:0b:f7:b5:ff:61:ab:3a:3c:fb:04:
c2:fb:88:7c:d9:63:af:45:45:15:fa:be:73:0a:14:1b:e5:b1:
68:1e:ed:71:cd:c6:d7:57:c5:45:af:ca:53:84:ee:00:f2:a4:
9d:f4:c4:59:c5:62:b3:82:ba:a6:96:3d:5f:49:a8:88:52:da:
94:b5:df:c0:d9:60:98:e1:89:8f:e6:9f:5d:56:a0:bc:a2:2b:
e7:cd:ab:25:5b:3f:32:93:ff:6c:e8:ed:11:8f:be:57:7b:1d:
ff:af:da:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 06:03:05 2024 by rpki-client on console-fra.rpki-client.org