Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/nPt33AVU0QDMPfeG0BWhMHa3wAY.roa
File: nPt33AVU0QDMPfeG0BWhMHa3wAY.roa (raw, json)
Hash identifier: h8/xeguD0Y6znyvd1a9SZXyLfpkAxJ7gzIDNEL9IvgA=
Subject key identifier: 9C:FB:77:DC:05:54:D1:00:CC:3D:F7:86:D0:15:A1:30:76:B7:C0:06
Certificate issuer: /CN=bc635876af1c7ef82411b404a70d88b7916509f6
Certificate serial: 018E2E4639E1FE57D692D8465DF2417F1BE9
Authority key identifier: BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/nPt33AVU0QDMPfeG0BWhMHa3wAY.roa
Signing time: Mon 11 Mar 2024 16:08:57 +0000
ROA not before: Mon 11 Mar 2024 16:08:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212150
IP address blocks: 91.237.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:46:39:e1:fe:57:d6:92:d8:46:5d:f2:41:7f:1b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc635876af1c7ef82411b404a70d88b7916509f6
Validity
Not Before: Mar 11 16:08:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cfb77dc0554d100cc3df786d015a13076b7c006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:f9:ae:4f:12:d9:7d:40:27:19:d7:db:4f:
19:0f:fa:e6:ee:98:f1:10:68:8a:92:2c:77:cc:af:
b9:4e:1e:23:1b:5f:58:6a:4b:70:6e:1e:e0:90:82:
7f:51:9e:a7:f9:ca:b1:3c:0d:4d:8a:02:85:39:ff:
7a:c2:43:63:5c:5f:f6:01:63:01:6c:79:e7:3f:f2:
f1:7c:b9:48:09:0f:ab:0d:1d:e0:61:93:8e:f4:3b:
30:b3:8f:eb:2b:fd:11:a9:ba:00:a6:b5:01:4c:9c:
42:01:37:d2:ce:4d:4e:86:a1:ff:7b:4b:05:42:7d:
a4:83:58:b3:70:0e:af:62:f5:77:f4:e2:39:19:cb:
e0:02:64:b2:ee:0d:35:c7:30:16:1c:bc:da:1b:30:
74:af:41:aa:cd:be:da:0a:33:3b:0a:62:bf:58:6f:
ed:02:b2:0b:bd:65:02:45:b3:63:d5:5c:40:8d:9a:
19:1c:c4:94:9d:8d:08:ed:2a:4b:37:90:48:cd:c4:
92:eb:c7:42:c1:9e:f3:e5:ba:c6:79:3b:e8:79:bb:
78:8c:e8:f3:5b:b8:0c:4c:bb:54:1e:4c:76:71:8d:
e9:0b:dc:c1:fa:33:32:e1:ff:90:6f:5c:ea:b1:04:
aa:11:d8:dc:15:bc:b4:91:f9:12:dc:16:48:b6:22:
e9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FB:77:DC:05:54:D1:00:CC:3D:F7:86:D0:15:A1:30:76:B7:C0:06
X509v3 Authority Key Identifier:
keyid:BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/nPt33AVU0QDMPfeG0BWhMHa3wAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.143.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:33:37:7c:96:d9:02:db:04:3a:20:02:59:06:a6:a0:7d:1b:
c3:25:5f:31:79:e0:8c:e8:ed:2f:f2:4a:0b:7a:96:f3:fd:1e:
90:7f:64:cf:92:61:d8:da:53:85:72:3e:fa:b0:29:11:b9:ae:
9f:64:b8:6e:91:c9:45:85:86:b5:78:7d:84:8e:11:f5:d0:73:
28:d3:b6:71:ea:41:d3:c5:95:6e:44:5d:bb:6f:de:0d:cc:6e:
4b:54:01:8f:5e:c6:af:a9:00:a8:91:02:a6:f8:21:37:97:95:
70:74:99:06:55:82:72:89:d6:14:42:2a:91:ca:57:9a:1b:b7:
cb:92:25:0b:7f:c4:8b:fd:7c:e0:d3:3e:57:d4:fc:39:6e:8b:
cf:8e:19:7c:5d:d9:a9:1a:9d:6c:6f:c1:89:a5:5a:9d:09:1c:
9a:60:47:7e:1b:12:ba:bd:ee:86:9b:37:76:b3:f6:93:c2:6a:
3a:92:78:a3:39:4f:98:5f:03:23:10:67:c2:91:d2:46:55:53:
81:f6:c9:67:04:a4:e9:bc:ff:52:d3:17:ea:11:d4:83:a7:93:
f9:cd:ce:ea:34:99:fa:d6:3f:3a:d6:4c:4c:70:4f:aa:f7:b1:
68:a3:a5:56:e6:b4:b5:9d:7d:7e:4d:a4:ec:1f:8d:3d:a0:1b:
6c:c7:f3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 07:36:24 2024 by rpki-client on console-fra.rpki-client.org