Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/F9iz-KXdQUPii9Qc__n905BfpZc.roa
File: F9iz-KXdQUPii9Qc__n905BfpZc.roa (raw, json)
Hash identifier: nQIkpOzG6tSBZLGWRJBqGn+YG5dy8qABeTowzZ9vtFw=
Subject key identifier: 17:D8:B3:F8:A5:DD:41:43:E2:8B:D4:1C:FF:F9:FD:D3:90:5F:A5:97
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 018CC5014DB1E6C57656E802D793FC0DAAB0
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/F9iz-KXdQUPii9Qc__n905BfpZc.roa
Signing time: Mon 01 Jan 2024 12:30:46 +0000
ROA not before: Mon 01 Jan 2024 12:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15768
IP address blocks: 195.35.91.0/24 maxlen: 24
195.35.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4d:b1:e6:c5:76:56:e8:02:d7:93:fc:0d:aa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17d8b3f8a5dd4143e28bd41cfff9fdd3905fa597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:29:12:88:6a:64:36:a8:31:7a:91:68:88:
37:d3:e7:41:11:7f:46:9d:3e:0e:53:18:55:34:57:
fd:28:2a:a2:03:5f:5d:4f:b1:96:a4:99:b6:06:6a:
7f:15:ac:45:64:42:ac:3f:01:bf:8e:3b:54:e5:6c:
60:bb:f5:0d:35:ec:0a:5a:57:f4:f7:51:ee:62:1a:
b7:d5:b9:07:7c:49:7b:a1:7d:14:2f:2e:3f:e4:ae:
e1:3e:ae:c2:d8:0e:e4:9c:52:a5:17:ab:5f:be:b6:
cb:77:5c:22:a8:04:95:0f:4b:60:80:7d:f5:77:51:
d0:09:df:b7:ca:58:12:73:e8:f2:b4:ef:46:d0:d1:
2b:e6:0b:57:99:53:b7:69:78:b2:97:7e:b5:b9:43:
38:11:13:04:b6:d5:50:02:cb:5f:b3:24:63:89:e4:
29:66:30:a3:b0:cf:29:45:87:5d:3f:73:84:2c:2c:
bc:92:6a:5a:1e:8c:26:d1:ab:70:1d:de:e9:7f:0b:
45:62:18:26:e4:f6:fb:c3:ed:ea:34:51:66:7f:64:
a7:09:bb:96:f0:c3:b1:48:00:91:24:2c:4e:cd:71:
21:47:9f:ae:35:4d:ad:e9:a8:24:97:f5:81:ff:a5:
50:1e:b9:27:14:c2:4d:fb:09:7c:f9:27:0d:1c:a2:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D8:B3:F8:A5:DD:41:43:E2:8B:D4:1C:FF:F9:FD:D3:90:5F:A5:97
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/F9iz-KXdQUPii9Qc__n905BfpZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.90.0/23
Signature Algorithm: sha256WithRSAEncryption
16:c0:a6:cd:2d:0a:dd:97:10:9e:19:d2:a5:d2:84:e1:71:29:
89:8d:7d:72:d4:9c:d0:ac:bc:e8:08:41:2e:09:8d:71:66:33:
92:51:22:66:33:79:88:15:6b:df:c6:97:a2:09:75:ce:16:51:
bd:2b:46:08:27:98:6e:b1:e9:8f:a4:99:41:f0:e0:e5:b1:43:
8c:6e:63:e4:40:58:67:3a:1f:70:3a:e2:22:92:8e:95:66:b9:
ed:60:b1:cf:17:0f:e8:5f:d1:9f:d5:f9:e8:f7:a9:54:30:5c:
72:28:19:02:6f:89:1d:2d:63:1c:bc:ed:31:ab:df:d6:f8:07:
9e:29:e5:a2:76:1a:5f:c2:19:68:df:9f:83:90:53:b1:5f:96:
24:0d:27:4f:03:54:aa:58:c3:2d:cb:22:a7:ab:3b:11:26:ae:
c9:3c:70:40:98:c6:69:13:85:8c:7e:1f:3a:ca:c7:16:fb:51:
f3:e9:ea:e9:2f:b8:64:cf:31:8a:37:52:67:cf:86:9b:53:2f:
46:bb:86:4e:7f:fb:80:de:15:14:81:dd:75:ab:56:d6:c2:57:
31:d6:16:76:a4:c9:45:a9:74:28:4a:a5:6a:e3:f7:12:28:38:
40:a6:4d:1e:23:81:ae:c5:c8:8c:23:0e:c3:d0:04:dd:88:cb:
0a:c5:cd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 10:10:16 2024 by rpki-client on console-ams.rpki-client.org