Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/FHaS86iOtI2o6y9qYOH0RH1DW5Q.roa
File: FHaS86iOtI2o6y9qYOH0RH1DW5Q.roa (raw, json)
Hash identifier: 8MuNlf7soSaujne83c0rP1FerBLqa5/uHb/NtgseqGM=
Subject key identifier: 14:76:92:F3:A8:8E:B4:8D:A8:EB:2F:6A:60:E1:F4:44:7D:43:5B:94
Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial: 018CC3B72BC440E3BFE4035605539BFE8705
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/FHaS86iOtI2o6y9qYOH0RH1DW5Q.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60592
IP address blocks: 91.224.58.0/24 maxlen: 24
193.150.132.0/23 maxlen: 23
193.150.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2b:c4:40:e3:bf:e4:03:56:05:53:9b:fe:87:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=147692f3a88eb48da8eb2f6a60e1f4447d435b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:ce:29:1c:6b:e9:02:fc:3e:30:8c:bf:2d:
7e:77:73:c9:57:a0:66:f0:22:1c:1c:35:1e:61:7d:
9f:bb:9d:3e:7b:66:fc:dd:d4:0c:c5:49:22:6a:ff:
3c:b6:ca:5d:71:1e:19:30:b6:4a:d6:ce:82:10:51:
ee:f0:17:77:2a:d7:2c:e3:25:60:6b:e0:e6:0f:d4:
98:5a:b3:2e:6e:5b:e0:fc:ed:77:e7:f2:19:4e:7b:
c6:f1:30:a5:ef:2d:a2:e3:a1:7e:c8:10:eb:bb:64:
89:e8:ca:9d:3d:be:e2:e8:8d:f0:90:6a:aa:01:7d:
d2:f6:d8:5e:04:07:af:78:11:23:c8:a2:95:b6:38:
49:60:d7:76:ce:03:8c:97:6a:15:b8:7c:2b:28:ea:
d0:f2:78:a6:88:fa:a4:5a:ec:a9:a0:17:fb:2b:62:
45:d7:ef:65:32:e9:2e:63:27:46:47:b0:49:f6:ba:
95:74:25:7a:62:16:8c:01:f3:33:99:e3:8c:97:d5:
7b:57:9f:b7:9c:e6:c7:c8:ce:b9:d3:62:ed:af:ff:
58:ee:4a:d1:88:7a:c2:88:1c:8b:c9:74:30:7f:d9:
45:2d:b5:ea:9f:71:9d:ea:d8:0a:97:15:8b:42:fc:
76:e4:7f:34:df:76:73:22:60:a0:92:df:71:3b:2b:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:76:92:F3:A8:8E:B4:8D:A8:EB:2F:6A:60:E1:F4:44:7D:43:5B:94
X509v3 Authority Key Identifier:
keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/FHaS86iOtI2o6y9qYOH0RH1DW5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.58.0/24
193.150.130.0-193.150.133.255
Signature Algorithm: sha256WithRSAEncryption
67:1f:44:b6:4a:97:1e:30:d6:97:c8:eb:2d:86:f9:f7:00:25:
fd:81:4b:f5:e6:7f:da:69:9e:79:61:14:e8:87:45:c8:37:11:
81:cc:03:92:7a:d7:57:ec:90:e6:47:ac:7b:5f:40:5d:9c:47:
d5:3d:65:eb:3f:74:69:99:d9:09:49:76:3c:f7:13:5e:91:d8:
77:39:85:1a:bb:63:c2:f0:35:9b:1f:ab:0c:a8:8a:44:b5:31:
b9:3a:a6:7e:e3:f1:ff:69:9c:33:bb:2a:e2:48:09:81:e3:af:
e9:c5:ae:c7:6a:d3:d4:1e:33:66:eb:21:4f:55:4d:e8:0e:9e:
42:5e:0e:83:b3:da:95:e6:ed:80:06:6e:94:11:13:92:8b:8c:
eb:d6:b1:e7:61:2b:4e:1f:b6:f4:ff:f5:a3:f7:07:8d:70:be:
ae:d9:1f:c2:7a:11:49:ae:7a:f0:78:d0:0e:f0:7f:56:a9:5e:
3f:b5:e4:b1:1a:bc:c7:a5:df:4a:d7:2d:29:10:18:86:77:d0:
94:91:b9:02:e6:fb:0f:28:83:0d:55:f2:0d:30:d5:42:f3:68:
15:28:5d:26:51:31:c0:03:3e:93:88:2e:d6:17:fb:91:17:15:
b8:6e:40:d8:a8:42:f7:9b:37:b5:56:20:05:54:ea:7a:2e:a8:
c6:cd:bf:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:13 2024 by rpki-client on console-ams.rpki-client.org