Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/Da3AJDXzfRh5ibfxBnEXbhKwhro.roa
File: Da3AJDXzfRh5ibfxBnEXbhKwhro.roa (raw, json)
Hash identifier: LPk9vPnWOc8dpmV5+oDSq0fZxkyT3+Bt80puEx1njnE=
Subject key identifier: 0D:AD:C0:24:35:F3:7D:18:79:89:B7:F1:06:71:17:6E:12:B0:86:BA
Certificate issuer: /CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b
Certificate serial: 018E3D947C92EF2E6E6060F44450592A0826
Authority key identifier: 17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/Da3AJDXzfRh5ibfxBnEXbhKwhro.roa
Signing time: Thu 14 Mar 2024 15:28:45 +0000
ROA not before: Thu 14 Mar 2024 15:28:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12480
IP address blocks: 91.201.100.0/22 maxlen: 24
194.76.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:94:7c:92:ef:2e:6e:60:60:f4:44:50:59:2a:08:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b
Validity
Not Before: Mar 14 15:28:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dadc02435f37d187989b7f10671176e12b086ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:97:bf:fa:f5:d5:2c:e8:ea:df:e4:89:40:
f9:28:10:8b:7a:25:c4:41:30:0d:2a:73:7e:fc:be:
51:2e:50:af:0a:13:da:d3:ba:1d:c1:76:5e:8d:97:
84:82:03:47:26:ac:2e:a4:ae:a5:af:cd:70:8b:31:
28:7e:d7:e5:5d:9b:b8:c9:21:e4:7f:cb:b0:4f:db:
0d:e0:9e:73:24:ef:74:fa:99:37:fb:65:c5:21:29:
b5:7c:69:e2:f9:e7:88:29:5a:35:e8:da:12:ab:26:
ef:cb:aa:25:96:89:2f:7e:ed:4d:a8:ee:91:50:92:
7e:88:6f:ce:c8:33:dc:6f:ab:47:e8:08:41:32:ba:
b6:bd:40:49:18:d2:f4:7c:aa:3a:db:26:18:fc:c9:
af:dc:dd:f8:0f:45:2f:18:87:68:9b:f7:eb:6d:df:
4d:40:42:5d:dc:73:5f:03:21:48:2f:60:1c:bf:6b:
69:85:fb:8b:91:ba:3e:19:d4:57:49:41:96:54:d9:
46:54:40:71:fe:e5:c4:46:b4:1c:3a:5b:f0:90:d8:
0c:cd:30:50:4b:41:d6:fd:ac:fa:b8:ee:25:be:38:
52:bc:13:8a:8e:d6:fb:a0:3b:71:33:4f:fa:53:03:
70:05:28:87:99:27:8f:b7:5d:ec:7b:41:e8:65:03:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AD:C0:24:35:F3:7D:18:79:89:B7:F1:06:71:17:6E:12:B0:86:BA
X509v3 Authority Key Identifier:
keyid:17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/Da3AJDXzfRh5ibfxBnEXbhKwhro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.100.0/22
194.76.193.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2e:a4:46:28:15:78:06:a7:f8:23:36:dc:ae:58:f5:46:66:
d9:b4:88:6f:22:5d:ca:a5:57:7f:38:d8:ff:83:40:92:af:72:
ff:95:5b:be:2c:14:16:61:7e:5a:f2:b7:2a:44:b0:cf:ca:0c:
51:08:34:fc:1d:1f:f3:ac:96:51:2d:59:c5:29:69:cc:c3:39:
a8:b7:bb:a4:1f:96:54:1e:1e:d4:74:94:31:c9:35:7d:9b:bf:
ed:3f:dd:46:a9:97:e8:00:9f:dc:de:fe:b5:3b:bf:33:a3:47:
6d:c6:08:ef:af:a3:b8:04:7a:5d:53:6e:88:50:c6:f6:9f:6f:
72:9f:dc:87:84:b9:95:2b:c1:84:02:bd:82:9e:82:4b:b8:3a:
22:a7:28:8d:3a:81:c7:38:d3:ae:43:c6:ca:13:c2:2c:a8:d2:
84:11:3b:c2:46:68:c5:3e:ff:89:b4:8b:c4:d1:ce:57:04:f1:
92:3b:d2:fe:1c:26:90:57:b1:e1:d6:70:cf:20:1f:5d:d7:bc:
73:36:80:b0:5e:c8:1d:7e:70:96:6d:f6:0c:f5:e2:b6:4e:3f:
20:4f:20:0b:92:9f:e4:67:6f:f4:f2:ad:4c:ec:c8:d2:b2:a1:
34:ab:51:70:3c:f8:bc:f0:27:49:26:78:52:46:13:69:a3:e7:
ed:71:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:49 2024 by rpki-client on console-fra.rpki-client.org