Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/kIodGZkuAwXDnbz0MyJtw4XbNag.roa
File: kIodGZkuAwXDnbz0MyJtw4XbNag.roa (raw, json)
Hash identifier: /SBm/vFKXK/nYPk+P9SXBQTw9zFW/v6dvtP4VrQHPFg=
Subject key identifier: 90:8A:1D:19:99:2E:03:05:C3:9D:BC:F4:33:22:6D:C3:85:DB:35:A8
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 018D12D2FEEA7E485CA3B5B68A45B403E8BF
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/kIodGZkuAwXDnbz0MyJtw4XbNag.roa
Signing time: Tue 16 Jan 2024 15:10:34 +0000
ROA not before: Tue 16 Jan 2024 15:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13273
IP address blocks: 91.216.209.0/24 maxlen: 24
185.21.152.0/22 maxlen: 24
185.114.208.0/22 maxlen: 24
195.54.62.0/23 maxlen: 24
213.91.0.0/18 maxlen: 24
213.162.32.0/19 maxlen: 24
213.162.32.0/20 maxlen: 24
213.162.62.0/24 maxlen: 24
2a04:1940::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:d2:fe:ea:7e:48:5c:a3:b5:b6:8a:45:b4:03:e8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Jan 16 15:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=908a1d19992e0305c39dbcf433226dc385db35a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:2f:68:d3:c4:b2:c1:67:72:08:1a:3c:e6:
f0:55:5e:ae:f6:a3:c3:71:44:58:6b:81:28:ee:72:
2f:3c:60:a7:50:d3:74:1b:92:b0:4d:be:bd:85:9a:
d0:a4:ed:11:92:e9:02:cc:63:95:1f:d2:a1:07:97:
66:e0:40:8b:9c:6e:19:6c:26:69:11:17:eb:d0:00:
d2:98:c5:d9:18:fc:bf:91:e8:87:66:1b:3c:2b:0c:
26:f2:b4:4f:71:20:c6:cb:06:e6:85:f8:9e:7b:e9:
c9:e4:19:f7:d6:eb:b0:79:f5:12:ce:23:05:26:2d:
04:2a:12:b1:c2:8e:55:97:ab:65:12:62:b0:a6:03:
99:72:fd:5c:e9:39:f5:38:3d:a9:79:8c:f6:2e:e8:
1b:d8:08:7a:dc:1e:ae:d4:7c:b2:42:d9:d2:81:6d:
9d:41:f5:f8:97:2e:6d:3e:d3:fc:6e:61:e3:30:b1:
20:d5:7c:f1:89:ec:84:75:7d:3a:bd:bf:64:39:00:
1d:0c:65:a5:c1:d8:18:61:c1:47:e2:46:ce:d2:6a:
44:1c:4f:2e:1d:00:ce:13:2c:62:8a:c4:50:43:3b:
75:84:55:b7:cc:5a:00:d8:de:91:1e:d5:1a:13:84:
b2:e4:8a:47:c8:41:e9:21:fd:d2:6b:20:5f:f0:45:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8A:1D:19:99:2E:03:05:C3:9D:BC:F4:33:22:6D:C3:85:DB:35:A8
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/kIodGZkuAwXDnbz0MyJtw4XbNag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.209.0/24
185.21.152.0/22
185.114.208.0/22
195.54.62.0/23
213.91.0.0/18
213.162.32.0/19
IPv6:
2a04:1940::/29
Signature Algorithm: sha256WithRSAEncryption
06:d9:71:5e:7f:c3:06:2f:28:5c:64:04:61:fc:4c:6b:c8:7b:
8b:57:6a:8d:60:45:19:c7:84:21:fe:43:67:c3:31:eb:41:25:
8d:f3:57:c2:cd:fe:4b:a5:1c:26:b2:ef:1d:fc:69:bb:e7:ee:
da:e6:7e:8f:db:f8:84:1f:27:ab:b7:44:08:8c:cb:db:bf:f1:
af:73:11:42:63:22:46:58:cd:b2:0e:12:d1:ef:27:79:5c:ee:
6c:dd:d9:aa:39:77:33:e2:1b:99:92:2e:29:92:76:41:48:ad:
ee:dc:09:ca:20:0c:f3:12:2b:f7:c1:7a:d6:74:bd:25:91:7f:
df:81:b4:fb:75:26:be:dc:9a:7a:8c:dc:30:ce:55:9f:01:4f:
3f:c5:0d:8a:4f:04:a6:86:7d:e2:93:ba:ec:0d:cf:61:9b:28:
85:d9:33:85:59:48:bd:ba:48:96:63:5a:1a:e2:fa:b2:6e:62:
b0:0c:70:91:9d:de:eb:e2:0a:68:f7:68:3a:4a:36:08:21:88:
f9:f9:61:9c:9e:92:fe:cf:88:16:10:9d:7a:de:d0:c7:33:7b:
53:30:76:b6:50:b4:01:65:00:3e:1d:0a:1e:b3:18:91:5a:47:
a5:03:1a:6b:24:82:d1:ce:38:38:e6:19:7b:6c:32:1a:d3:8f:
90:64:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:33 2024 by rpki-client on console-ams.rpki-client.org