Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/mFq30EVov3KZFiRshDeTe09LZZA.roa
File: mFq30EVov3KZFiRshDeTe09LZZA.roa (raw, json)
Hash identifier: edRdrry42HRz6aSneIIBcdSuCyi3jNjLyDn5ZqVmFP0=
Subject key identifier: 98:5A:B7:D0:45:68:BF:72:99:16:24:6C:84:37:93:7B:4F:4B:65:90
Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial: 0191F53973DB12C85E8EA28E220FB45D49D6
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/mFq30EVov3KZFiRshDeTe09LZZA.roa
Signing time: Sun 15 Sep 2024 10:27:48 +0000
ROA not before: Sun 15 Sep 2024 10:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61418
IP address blocks: 91.216.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f5:39:73:db:12:c8:5e:8e:a2:8e:22:0f:b4:5d:49:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3277a239664d245becf4214dde15923042a142f
Validity
Not Before: Sep 15 10:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=985ab7d04568bf729916246c8437937b4f4b6590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:2a:16:dd:4f:3a:20:7e:23:37:ea:14:72:
98:8d:ce:b6:c2:c9:9d:17:85:13:75:3a:fe:0e:f1:
df:74:d0:30:0e:29:a4:3a:b8:76:0e:8a:e1:e7:08:
d7:b9:ed:d1:92:8b:39:aa:3a:e5:1f:0b:92:ad:8f:
d0:2b:9c:5c:aa:63:ab:8f:b5:09:43:d2:8c:a1:75:
9c:d0:5e:b1:79:bf:a7:31:22:e7:92:f6:f3:b4:e3:
45:89:b5:5c:18:80:23:ae:d2:4a:1c:34:99:24:e6:
f6:1b:5b:85:08:d9:7c:6e:8f:e2:8e:3b:ea:c4:a8:
d6:3f:c3:0a:2c:1c:9a:6b:d2:f4:78:6d:db:a5:75:
2c:3c:e7:29:79:ab:d1:1c:39:f6:6c:90:be:29:ea:
ac:1c:ee:c7:15:ff:e9:cc:95:6c:62:d1:7b:5c:90:
82:d2:ca:33:8b:42:8e:71:02:4a:c9:52:08:df:47:
e4:b1:07:b4:93:1c:10:41:fe:a6:aa:c7:ec:83:50:
75:0e:46:13:11:f1:0d:f0:36:74:a9:23:82:c9:b7:
e6:5e:2d:f6:22:9f:7d:5f:0f:87:43:ec:91:c4:ad:
fc:6d:93:76:a5:0c:2d:1f:54:78:ac:10:fb:08:4a:
e8:a2:ca:38:c0:60:3e:cc:13:c5:48:08:13:a0:20:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:B7:D0:45:68:BF:72:99:16:24:6C:84:37:93:7B:4F:4B:65:90
X509v3 Authority Key Identifier:
keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/mFq30EVov3KZFiRshDeTe09LZZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:40:df:b5:a3:86:5e:4d:c5:20:53:27:c1:84:e7:e7:07:21:
de:ee:d3:8f:b5:4b:47:b5:75:2f:45:85:a5:f9:17:3b:b8:f3:
ab:4f:7b:44:c2:0d:a3:55:99:8c:53:7a:ea:35:06:d7:32:f3:
18:f3:1a:a2:07:53:42:f7:a9:c4:c4:99:4f:e3:b3:0a:1e:39:
1b:13:ab:1c:f2:16:4e:ef:ef:36:ec:c8:10:19:ab:32:7b:7e:
a4:eb:07:bb:98:65:16:b3:52:cd:59:2a:93:91:4f:4d:d7:cf:
20:42:f5:1a:89:c3:54:17:7f:9a:5b:ce:ea:ad:c1:b7:87:ad:
3f:7e:51:aa:2c:38:22:ab:ca:28:b2:34:b5:1f:3f:0f:22:a1:
94:8b:b4:09:c3:2d:7e:0c:a0:e4:d4:04:f0:41:bf:21:f8:12:
53:46:55:a1:b0:19:63:3c:c5:92:89:71:97:67:10:e6:49:9a:
0e:2d:1a:1a:ec:05:15:79:60:45:a2:25:9b:93:fe:09:13:6b:
52:66:bc:95:9b:d3:c5:45:74:a3:68:d4:25:51:9f:04:65:76:
1c:71:8a:58:0a:f5:f8:b0:d6:8c:fa:dd:58:f7:fd:ba:47:d0:
93:bd:ce:c7:ba:78:4b:9c:94:e5:c6:6b:5d:62:9d:7f:0b:3e:
d7:78:eb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:06 2024 by rpki-client on console-fra.rpki-client.org