Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/bVhUbkg4UqIcwFpUWMEw-9tcZyw.roa
File: bVhUbkg4UqIcwFpUWMEw-9tcZyw.roa (raw, json)
Hash identifier: Yz6KOJ28MbFXWeKP1QaysipVQiXXeXgRoXTOUfQkhO8=
Subject key identifier: 6D:58:54:6E:48:38:52:A2:1C:C0:5A:54:58:C1:30:FB:DB:5C:67:2C
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 018CC94D15F12C6202F84CE16931F17D5002
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/bVhUbkg4UqIcwFpUWMEw-9tcZyw.roa
Signing time: Tue 02 Jan 2024 08:32:01 +0000
ROA not before: Tue 02 Jan 2024 08:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204062
IP address blocks: 91.103.149.0/24 maxlen: 24
91.103.148.0/24 maxlen: 24
91.103.150.0/24 maxlen: 24
185.115.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:15:f1:2c:62:02:f8:4c:e1:69:31:f1:7d:50:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Jan 2 08:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d58546e483852a21cc05a5458c130fbdb5c672c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:e4:2c:21:b1:16:c5:eb:a2:96:ec:5b:5c:
dd:a3:5e:3e:e3:47:76:72:50:02:42:cc:e2:30:16:
18:2f:4c:cb:8e:2f:c4:45:9b:d9:08:b9:8a:38:58:
40:a9:62:6e:84:6f:eb:21:bc:8d:c0:b6:c2:d9:eb:
48:d7:a2:86:62:47:fc:ba:5c:9b:70:54:52:01:73:
c7:de:06:b6:70:e1:a2:f6:8d:72:8e:5d:45:e0:cb:
05:4d:ff:ab:91:4d:48:19:f4:eb:73:29:5e:95:9f:
28:2a:40:a4:4f:e2:8d:e2:49:35:54:ff:91:25:11:
3a:a0:02:b6:ab:3b:c8:54:2e:3f:73:9f:9d:cb:17:
88:93:d7:e3:e7:ea:75:41:8e:60:1e:e4:f1:31:0d:
b4:0d:fe:29:e0:58:57:c9:bb:97:5d:c3:c1:e2:99:
0e:ed:d8:80:c5:c4:cf:ee:71:6b:45:44:af:5d:e5:
cb:e9:6e:0f:6e:47:19:d6:46:c8:ab:2c:27:a4:7d:
71:02:98:72:cd:20:99:a7:9c:76:4e:25:72:46:c4:
60:35:dc:b9:4e:aa:41:ff:8a:9b:22:5c:24:ea:ca:
23:aa:e4:67:ea:dd:7e:b7:de:dc:bc:d1:b7:76:68:
e3:cf:0a:d1:4d:3d:41:42:d2:18:49:80:2c:b0:38:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:58:54:6E:48:38:52:A2:1C:C0:5A:54:58:C1:30:FB:DB:5C:67:2C
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/bVhUbkg4UqIcwFpUWMEw-9tcZyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.148.0-91.103.150.255
185.115.232.0/22
Signature Algorithm: sha256WithRSAEncryption
38:52:63:b5:dd:34:a0:d2:cd:42:df:44:55:57:99:d7:53:1b:
a0:a4:d4:ba:55:03:a0:9f:02:50:7d:d2:f9:52:bc:a3:c9:ef:
aa:8e:a6:3d:d5:5d:42:b8:15:e3:eb:13:fe:d5:97:ca:5a:ab:
da:fc:c6:3f:6e:c5:d3:ec:0e:1d:38:d3:53:d9:f0:90:8d:52:
cb:75:ee:d6:c8:ef:45:5d:8b:8e:f9:9c:f7:1c:57:9a:f3:c7:
35:b9:f2:e4:95:a2:0f:57:6f:aa:f0:67:ad:75:52:62:47:5d:
c3:e0:cc:b9:28:d9:ae:78:b9:20:44:4b:bc:03:d4:29:42:fd:
ae:2f:1b:fa:85:75:d3:e4:28:1c:ec:9d:d5:e4:b2:45:01:d1:
3a:2a:12:8d:c2:c4:7d:18:46:b2:e7:bf:b7:b5:4c:e9:ff:0a:
d9:dc:97:26:92:1e:38:ea:59:d0:0a:84:80:38:ee:5d:e5:1f:
76:1b:b8:f7:85:e3:aa:b4:e6:0a:3b:5b:8f:6f:ad:a1:3a:e3:
07:85:69:b7:fc:e1:e9:33:fc:99:34:e3:bc:a5:d6:24:aa:a0:
c0:47:93:7f:78:a2:75:05:52:92:7e:1b:79:72:35:ef:a3:2e:
ea:55:c6:3c:ba:09:94:49:7d:92:23:25:d7:8f:9d:a5:94:b9:
90:3e:3c:ed
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 17 00:05:00 2024 by rpki-client on console-ams.rpki-client.org