Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/4cpzAXBJmCO0U7FnzUKgjyBcqWQ.roa
File: 4cpzAXBJmCO0U7FnzUKgjyBcqWQ.roa (raw, json)
Hash identifier: IMA/QCa7fuyNN/VbgVUhrjfSdHLM02wA+hxpabXkuls=
Subject key identifier: E1:CA:73:01:70:49:98:23:B4:53:B1:67:CD:42:A0:8F:20:5C:A9:64
Certificate issuer: /CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Certificate serial: 018CC64B10089DA0D215466B72CCECC3EB73
Authority key identifier: 10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/4cpzAXBJmCO0U7FnzUKgjyBcqWQ.roa
Signing time: Mon 01 Jan 2024 18:30:57 +0000
ROA not before: Mon 01 Jan 2024 18:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198512
IP address blocks: 91.235.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:10:08:9d:a0:d2:15:46:6b:72:cc:ec:c3:eb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Validity
Not Before: Jan 1 18:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1ca730170499823b453b167cd42a08f205ca964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:04:e0:f9:39:ff:71:9a:29:79:0a:26:bd:0d:
11:4f:ae:3a:94:d6:f8:0f:71:28:b0:a3:42:a1:ef:
e6:9d:c8:54:2a:ef:f2:78:92:5b:f8:2a:68:24:69:
91:bf:d0:2a:fc:2e:67:74:b1:2d:f1:a0:7d:18:08:
95:b8:24:52:54:f5:d7:75:6c:7f:27:7f:30:9f:8c:
f2:b3:69:85:89:7b:89:a4:b8:ec:8e:c7:27:3f:c0:
39:57:dd:27:f9:5c:9a:ad:40:37:bc:21:44:30:c9:
67:5b:4a:c0:69:af:89:10:33:c0:8d:cc:a1:dd:93:
5b:29:bd:02:89:c2:10:ec:b4:16:0d:5b:61:8b:43:
94:81:c5:1b:1d:43:a2:0c:c6:70:bd:2c:f8:ad:f4:
ed:8b:a9:d2:9f:d5:90:4d:f6:f9:76:83:dd:f5:44:
50:7b:5c:01:23:bb:69:9c:ad:51:27:3d:27:9e:29:
ca:e7:03:f5:ae:e5:9d:d1:43:a5:b0:77:96:ce:aa:
50:eb:2b:00:b2:a0:b0:f9:8c:70:ba:1f:04:ef:ce:
2a:72:04:1c:e8:19:07:4e:02:db:f0:28:f1:1e:b5:
00:eb:da:a9:f2:db:fa:c0:72:22:9c:01:ee:56:43:
a1:fe:1c:79:31:80:75:89:15:fd:82:cb:8f:d2:78:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CA:73:01:70:49:98:23:B4:53:B1:67:CD:42:A0:8F:20:5C:A9:64
X509v3 Authority Key Identifier:
keyid:10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/4cpzAXBJmCO0U7FnzUKgjyBcqWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.243.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b7:0d:10:a2:b7:db:0b:7e:0e:57:aa:de:b9:c5:f9:2d:7b:
1e:92:fc:70:d3:71:bb:5c:17:6e:1b:74:07:96:a3:c9:e1:96:
aa:1b:89:7f:c9:84:25:f2:8f:1f:f4:7c:b3:32:48:3e:17:01:
0f:4b:58:ce:e3:74:8a:18:aa:b1:ba:c3:2f:48:cd:7e:e0:42:
e1:74:e7:fd:d1:7a:4a:f7:2a:21:d9:64:35:62:5e:16:65:54:
5d:fe:4b:54:a0:82:b0:cd:fd:5e:d7:db:2c:40:ab:f6:83:ae:
86:fa:33:26:2f:42:77:8d:79:d2:21:38:bc:36:c6:e6:7e:0d:
2b:e4:eb:1e:be:82:91:86:9f:dc:65:2e:79:fd:fe:f8:4d:93:
14:09:54:a8:30:91:89:6c:51:70:e2:e2:ae:1f:f6:7f:5a:f5:
33:27:cb:1e:ab:4e:e7:91:4a:41:d6:27:9d:6f:b0:3c:4b:6f:
4e:ea:59:70:dc:7a:3b:63:bb:68:64:42:9b:8d:96:fd:51:49:
97:da:2d:44:bf:ad:68:96:73:99:72:b5:1a:85:fc:34:3c:bd:
37:ba:18:d4:c2:20:de:7b:eb:4e:49:f7:ea:be:0a:51:ed:b6:
cd:e0:26:20:fe:6e:d3:1e:a6:a3:ba:d8:8a:a4:b2:ab:2e:8c:
4e:13:4d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:54 2024 by rpki-client on console-ams.rpki-client.org