Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/4-YzNUujOpnuQi61CbSS6frU0fE.roa
File: 4-YzNUujOpnuQi61CbSS6frU0fE.roa (raw, json)
Hash identifier: w1S3CiooDRF7CmauW2VhUGIP69aHFmO6i451M/lwYJs=
Subject key identifier: E3:E6:33:35:4B:A3:3A:99:EE:42:2E:B5:09:B4:92:E9:FA:D4:D1:F1
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 018CCA2B5ABF645E81104BA8584DF7087039
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/4-YzNUujOpnuQi61CbSS6frU0fE.roa
Signing time: Tue 02 Jan 2024 12:34:48 +0000
ROA not before: Tue 02 Jan 2024 12:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 91.240.206.0/24 maxlen: 24
91.240.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:5a:bf:64:5e:81:10:4b:a8:58:4d:f7:08:70:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 2 12:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3e633354ba33a99ee422eb509b492e9fad4d1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1b:33:e8:69:be:b8:2c:a8:a1:02:f7:da:1e:
ff:a6:08:73:bb:91:ae:fd:6b:b9:2d:60:f3:52:6f:
27:d4:ff:c6:fc:3e:2b:6b:36:c3:cd:32:d0:44:88:
88:ec:ea:42:2a:e7:c9:d2:5d:ab:2a:86:ab:1e:88:
d6:2c:7f:85:35:48:65:b0:f1:a7:e4:b0:1e:4e:48:
97:83:65:7a:d1:ff:77:6f:00:4e:6e:b9:68:f3:d9:
0c:b1:ce:ed:e8:33:b5:39:4e:9d:0a:a9:85:6e:70:
b7:9c:24:75:e3:90:80:35:ba:34:d6:77:55:97:0d:
60:89:cd:f1:52:45:06:65:bb:8c:19:02:dc:3b:b1:
6b:3b:fc:ab:6d:36:f8:4a:2a:bb:41:3d:40:90:b3:
ed:92:c7:32:5d:13:f0:69:05:86:11:b8:e0:a5:c7:
3c:9f:ac:88:11:ef:64:4c:e9:e8:8e:8b:76:5e:a9:
7a:a1:3e:92:52:fc:54:a8:e6:e1:61:b6:7b:c5:3a:
ba:8c:01:94:41:01:7c:65:8d:a8:b5:04:d2:2d:da:
73:7e:a1:64:46:d5:98:9b:9c:8b:b1:bc:cd:b7:c9:
e1:ba:0e:02:03:00:12:c7:1b:fa:b5:88:68:c4:53:
07:6a:eb:2f:cd:0d:4d:50:cd:7b:c0:7d:01:ef:19:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E6:33:35:4B:A3:3A:99:EE:42:2E:B5:09:B4:92:E9:FA:D4:D1:F1
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/4-YzNUujOpnuQi61CbSS6frU0fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.205.0-91.240.206.255
Signature Algorithm: sha256WithRSAEncryption
4b:f1:08:a8:05:75:c4:99:72:db:30:cf:c7:20:5f:27:c6:6f:
75:67:43:11:89:ef:d7:2c:58:83:4e:91:96:bc:cd:1c:54:4f:
cb:fe:37:02:9d:e6:e7:c5:c4:4b:7b:06:70:22:63:7c:a5:60:
f8:62:94:79:d4:73:18:16:0c:23:23:f3:f9:38:b5:7d:e3:6b:
30:95:80:a0:0e:b4:f3:72:8f:2e:dc:01:2e:c7:8e:4c:9d:67:
1c:ee:19:ab:18:a5:fa:5a:d2:cb:5b:48:03:ab:3f:83:cd:39:
97:c0:06:32:f5:ca:c7:67:13:b7:01:59:72:02:c3:9d:af:7b:
e1:9f:c9:ff:d7:47:95:1b:5f:4f:34:ad:9c:e6:4f:66:6e:19:
c1:bf:cf:5d:33:fe:79:e6:e6:55:8d:e3:ad:f6:11:63:be:51:
b5:21:8c:88:b4:ed:a0:b4:d4:f7:06:18:85:4a:8d:ff:3a:a5:
9e:87:aa:1b:22:46:80:2d:db:44:3b:ac:db:c5:8f:a1:2f:4d:
18:94:c1:eb:dc:73:1d:27:6b:dd:de:cf:93:7c:2d:40:f2:75:
30:9d:c0:92:ab:1b:68:71:84:7d:bd:7b:5d:c9:30:2a:3d:9a:
f7:90:02:c0:21:d5:7d:95:56:e1:28:15:a8:5b:d3:12:35:dd:
94:28:20:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:54:57 2024 by rpki-client on console-fra.rpki-client.org