Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/fY5I9Mr0o6NtxcnIzho7QK_VD3s.roa
File: fY5I9Mr0o6NtxcnIzho7QK_VD3s.roa (raw, json)
Hash identifier: sJP3iS7zxLx6Mf1/59fkSDk7oI3bem3j6MJiLQDwFCc=
Subject key identifier: 7D:8E:48:F4:CA:F4:A3:A3:6D:C5:C9:C8:CE:1A:3B:40:AF:D5:0F:7B
Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial: 018DD5B0A628E913D793C50F76ABB182FC6D
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/fY5I9Mr0o6NtxcnIzho7QK_VD3s.roa
Signing time: Fri 23 Feb 2024 11:19:00 +0000
ROA not before: Fri 23 Feb 2024 11:19:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48617
IP address blocks: 91.209.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:b0:a6:28:e9:13:d7:93:c5:0f:76:ab:b1:82:fc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Validity
Not Before: Feb 23 11:19:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d8e48f4caf4a3a36dc5c9c8ce1a3b40afd50f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:a1:82:35:d3:3a:03:5d:d9:f0:1f:f2:6d:
b7:39:62:c1:8b:43:f1:33:57:a2:8f:00:19:e4:cf:
3f:10:07:43:54:17:0e:a1:94:e7:21:24:33:8d:c4:
85:fa:58:8d:bc:20:bb:e7:35:a9:bb:86:c6:95:c6:
80:c9:45:6a:a3:b9:dc:31:cf:cd:76:8e:6b:d1:23:
b2:e1:ac:fa:dd:7a:dc:42:fd:39:3b:b3:72:08:24:
22:56:3b:23:2d:0e:6d:89:53:1b:b4:ad:8f:84:2e:
62:95:b7:63:06:16:50:35:ee:8a:da:a9:59:18:d8:
ec:71:89:5a:dd:65:c1:fd:63:55:dd:9e:88:c3:5a:
05:b9:f8:af:3c:4e:cc:55:6a:2d:81:62:9f:a8:24:
bd:0f:e0:56:53:64:ab:dc:bc:6d:21:8c:dd:0b:ec:
1e:a0:21:6d:ef:47:1f:f6:ad:94:3b:3a:af:de:9e:
03:85:b0:53:7c:0d:48:90:bc:1a:a3:a4:e3:e4:da:
44:9e:cc:7e:d6:4a:6b:40:de:3e:2e:1b:2d:01:e8:
70:fe:95:20:22:b0:08:55:89:15:a8:a3:07:7c:07:
71:08:3c:32:87:7f:be:98:55:21:03:0b:e3:b0:8d:
ca:ad:42:0b:26:d9:97:9f:39:53:71:9b:a8:8a:7f:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8E:48:F4:CA:F4:A3:A3:6D:C5:C9:C8:CE:1A:3B:40:AF:D5:0F:7B
X509v3 Authority Key Identifier:
keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/fY5I9Mr0o6NtxcnIzho7QK_VD3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.194.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:52:44:3e:f0:40:f6:00:3f:cc:2c:c5:4d:37:57:b1:ee:a3:
26:18:f2:24:a0:26:63:b4:65:1e:65:5b:f5:36:00:90:e7:b6:
d4:ae:e4:c8:0b:ae:b6:2e:dd:d9:4a:a4:fd:f5:62:6d:f5:ec:
ab:64:02:42:80:af:cd:44:4d:21:18:f2:ac:12:91:cb:b6:24:
6a:09:53:e6:16:03:f8:aa:b7:cb:95:f8:9a:58:7f:00:7e:6b:
3d:5c:02:6c:57:07:89:82:d6:ba:56:7e:02:f3:97:c9:a0:97:
ad:a3:b3:2c:90:5a:cc:1a:ee:b6:1d:f3:3c:fe:9e:c9:84:d7:
24:0a:e7:32:be:8b:22:d4:02:14:98:dc:72:1f:bb:e8:cc:8d:
11:b1:35:ca:3f:6f:2d:7a:10:1d:0a:85:2a:06:3d:2b:23:5d:
09:6c:c5:67:7f:76:16:e0:bb:47:c2:89:87:d4:ea:7f:80:09:
37:9d:8f:cc:84:45:2e:cb:70:5f:6f:d2:17:68:bd:dc:a4:73:
2f:06:f3:5b:05:e2:d2:12:28:c0:d3:9f:52:db:e2:26:89:2f:
9a:32:c0:48:65:c5:ab:4a:22:58:75:de:95:5a:46:34:fc:c9:
12:12:e4:97:77:bc:8d:c1:79:56:64:79:ac:9e:23:3d:e0:cf:
e7:6e:d9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:35:42 2024 by rpki-client on console-fra.rpki-client.org