Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/4y3lxQEK81LmErjX2rgCb6ojqI8.roa
File: 4y3lxQEK81LmErjX2rgCb6ojqI8.roa (raw, json)
Hash identifier: XGNVQNH9/qJQt4cwKvz5vu//ujRffbssMgquK4RXB0M=
Subject key identifier: E3:2D:E5:C5:01:0A:F3:52:E6:12:B8:D7:DA:B8:02:6F:AA:23:A8:8F
Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial: 018CC3B72C8982D62C1181BB2334D9E4E38F
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/4y3lxQEK81LmErjX2rgCb6ojqI8.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197130
IP address blocks: 91.216.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2c:89:82:d6:2c:11:81:bb:23:34:d9:e4:e3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3277a239664d245becf4214dde15923042a142f
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e32de5c5010af352e612b8d7dab8026faa23a88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:3c:b3:ea:05:79:29:e2:a6:f0:d1:a4:43:
63:ae:d7:7a:96:4b:32:28:a0:6b:c1:ff:ea:10:80:
4c:cc:ea:06:31:79:e2:99:fa:c8:98:0d:8e:62:d8:
1c:ea:6e:84:d5:15:d8:85:45:07:92:1b:fb:0b:37:
be:b8:41:d4:7f:af:7d:f0:fa:4b:c9:1a:7a:fc:bc:
c7:c0:c8:f1:9e:2c:0b:ba:4b:99:39:ac:e7:15:9e:
d4:50:bf:88:fd:10:74:29:c0:f1:89:76:4e:85:fa:
3d:8b:02:41:b3:c0:f9:8a:ea:58:2a:1e:ef:51:da:
12:c0:c3:7a:b8:3e:0f:d1:21:fe:46:4a:17:07:fc:
f6:12:de:4e:be:8c:c3:bb:5f:d2:e7:bc:9d:08:7c:
1a:e8:58:2d:62:0e:a6:63:b6:9d:92:4f:f8:b8:c1:
a2:82:3a:48:18:de:a7:31:63:17:79:6d:8a:e1:c8:
18:c7:c5:18:0d:97:9b:f2:55:2a:e6:84:9a:af:cb:
6a:b7:7e:18:c6:62:b1:0f:c4:31:85:87:1f:e9:21:
bb:e9:20:62:08:e2:ce:ba:bd:e7:07:9b:f1:9b:00:
5e:47:f8:47:dd:a7:bb:c8:54:65:81:bd:49:d6:e1:
c6:90:c9:3c:fa:8b:7f:76:50:89:4b:b4:de:16:c7:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:E5:C5:01:0A:F3:52:E6:12:B8:D7:DA:B8:02:6F:AA:23:A8:8F
X509v3 Authority Key Identifier:
keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/4y3lxQEK81LmErjX2rgCb6ojqI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.201.0/24
Signature Algorithm: sha256WithRSAEncryption
34:21:18:26:27:24:d5:5e:db:3c:68:4d:63:fd:0e:57:40:e1:
eb:da:cf:52:90:53:8a:2f:9c:a5:df:66:98:f8:95:1f:a4:55:
51:98:9d:c8:07:28:51:ae:28:5f:42:e6:d4:63:f2:27:b4:a6:
78:d2:eb:35:15:dd:4b:b1:38:4b:a5:44:ee:db:0b:f9:4f:1d:
8b:45:32:0a:fe:ee:19:92:3f:71:16:83:f1:1f:24:e8:6f:5a:
59:ac:25:cd:79:c5:91:b2:e6:e9:1d:f0:d9:e1:8c:cc:e7:dd:
36:05:8d:1a:de:94:57:f1:8c:b3:70:f2:33:03:ea:0c:62:85:
12:be:e4:6f:7c:34:b3:05:ce:e8:a9:cb:67:8e:7b:b2:44:c9:
8b:e5:a6:7f:c3:27:ed:93:4b:03:28:9c:26:92:72:da:70:96:
4d:ce:dd:b6:a3:50:90:f1:c8:24:91:09:59:4d:82:26:9d:e1:
92:0d:0e:5b:8d:f2:11:81:03:b8:49:36:27:11:da:db:97:37:
87:4f:df:ab:d2:e2:32:39:fe:65:c3:99:08:f2:56:d3:01:83:
8e:4e:95:38:ff:8a:3a:58:b0:5e:19:7c:b0:d1:1c:ae:2b:cd:
58:2b:35:04:c8:34:80:dc:00:02:27:57:ef:fc:9c:d8:ea:ff:
00:e2:88:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:46:34 2024 by rpki-client on console-ams.rpki-client.org