Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/W7b4k_QeJVfpBpI7iqmQzeomeUg.roa
File: W7b4k_QeJVfpBpI7iqmQzeomeUg.roa (raw, json)
Hash identifier: MGBk/jXerN8biMkhs5YOKGDMj7ESBBqBeYO80YbAvpM=
Subject key identifier: 5B:B6:F8:93:F4:1E:25:57:E9:06:92:3B:8A:A9:90:CD:EA:26:79:48
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 018CCA2B5C42E886BE8B8A99663153E05B1A
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/W7b4k_QeJVfpBpI7iqmQzeomeUg.roa
Signing time: Tue 02 Jan 2024 12:34:48 +0000
ROA not before: Tue 02 Jan 2024 12:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49788
IP address blocks: 91.240.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:5c:42:e8:86:be:8b:8a:99:66:31:53:e0:5b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 2 12:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bb6f893f41e2557e906923b8aa990cdea267948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:86:77:e6:41:00:a9:3d:9c:aa:bf:33:e1:df:
fa:97:8b:5b:81:87:f1:d6:80:eb:3e:31:38:4b:6e:
94:2b:bd:2a:5e:c4:97:f5:47:2e:71:82:5b:6b:31:
54:f8:54:00:00:b8:80:ca:44:5a:1a:ce:33:15:b6:
58:e4:b3:dc:59:55:ff:41:6f:47:44:68:5a:84:83:
54:44:fc:4d:6f:27:d6:07:03:f5:ee:4c:3b:b9:ff:
20:a1:fb:36:19:ba:ff:d3:03:e0:2f:3d:20:ec:17:
f8:f7:a6:a0:93:83:f3:f3:55:e4:dc:df:aa:76:7e:
a9:3a:b6:6e:1b:66:2d:06:39:59:0d:93:fe:04:b0:
a4:f9:3d:15:e2:3b:ad:bc:7e:0a:fa:2b:15:86:7f:
c5:aa:e5:05:32:c3:12:61:50:66:39:1e:ae:a2:e2:
b4:99:1f:8b:bf:be:96:07:b5:19:ed:08:88:a6:1f:
cf:d5:94:72:f3:a1:8d:12:4d:86:22:0a:61:49:f1:
fe:2a:d2:e5:e7:4f:be:57:a5:4f:0d:b9:8c:42:3e:
af:a6:cc:0f:53:82:b6:0e:bd:ab:0f:f1:b4:90:5c:
e5:c6:2d:0b:6a:ca:c9:14:f9:42:ff:81:46:0d:36:
29:dc:f8:99:aa:d6:70:2a:9c:0a:52:b7:83:06:cb:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B6:F8:93:F4:1E:25:57:E9:06:92:3B:8A:A9:90:CD:EA:26:79:48
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/W7b4k_QeJVfpBpI7iqmQzeomeUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.204.0/24
Signature Algorithm: sha256WithRSAEncryption
06:98:4a:a1:33:da:3d:b6:11:8d:21:d8:68:70:d8:97:95:d0:
68:05:2e:74:9f:1d:52:21:f9:22:88:44:b8:36:0e:97:de:cf:
ff:2e:f4:86:79:d6:df:ff:1b:00:48:58:c7:23:42:58:68:0d:
f7:fb:5c:69:b0:1f:18:e1:70:81:89:2b:5d:a6:28:16:16:86:
74:9c:20:24:d9:0a:13:cc:db:03:e9:ce:40:c0:52:b4:65:d8:
79:fc:b2:e3:9c:b2:a7:b2:45:11:83:7d:a2:2c:04:43:ec:fa:
44:50:eb:88:2e:60:1f:c0:52:61:35:1e:72:18:44:9c:b1:40:
98:a5:1d:f5:57:09:95:58:b0:ea:80:6c:b2:e1:0f:03:5e:a2:
37:28:66:40:bd:b1:b6:bd:76:9a:5a:9a:30:6a:0b:94:08:b7:
b8:d9:f2:d7:12:98:2e:a7:c8:55:f8:ee:0d:ab:3a:7d:ae:9d:
8d:6e:12:96:8b:63:7a:31:16:5e:94:20:02:49:66:2c:db:5f:
9d:c0:ec:e1:0e:06:f2:9f:37:8c:32:89:45:5f:db:5d:c2:ba:
95:df:dd:c3:83:06:ea:8a:58:ff:36:45:2f:63:1a:e8:39:d8:
74:a3:71:74:aa:3a:b8:96:bb:58:c7:15:a1:10:41:66:ce:73:
8e:a9:fe:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:19:22 2024 by rpki-client on console-ams.rpki-client.org