Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/HL5FzkPJLJGrsB0ogfRDWH6PowI.roa
File: HL5FzkPJLJGrsB0ogfRDWH6PowI.roa (raw, json)
Hash identifier: pDIVCTEaF6/jxD9bAEd4CuWW1ZqX7S2CpvmfxDVGKLM=
Subject key identifier: 1C:BE:45:CE:43:C9:2C:91:AB:B0:1D:28:81:F4:43:58:7E:8F:A3:02
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 018EF016BE28342FDE2C1E04251404D5F4C5
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/HL5FzkPJLJGrsB0ogfRDWH6PowI.roa
Signing time: Thu 18 Apr 2024 07:23:26 +0000
ROA not before: Thu 18 Apr 2024 07:23:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 91.196.160.0/22 maxlen: 22
91.196.160.0/24 maxlen: 24
91.196.161.0/24 maxlen: 24
91.196.162.0/24 maxlen: 24
91.196.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:16:be:28:34:2f:de:2c:1e:04:25:14:04:d5:f4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Apr 18 07:23:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cbe45ce43c92c91abb01d2881f443587e8fa302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4a:fe:8b:c1:c3:d4:1a:09:52:2d:3c:a8:58:
58:a5:44:c1:ee:2d:bf:18:a8:47:5c:90:23:a1:6d:
8f:1c:ed:80:c9:48:2a:e5:12:9d:f7:84:bc:cf:df:
22:90:c6:89:d5:c4:59:ba:c7:82:ba:c7:c8:50:4b:
b6:93:9a:97:94:37:cc:a8:4e:63:67:e0:69:39:37:
2c:80:06:c6:8c:bc:ab:67:01:50:81:d0:86:0e:40:
f8:d8:06:dd:cd:db:8b:f8:82:a8:19:df:43:66:40:
72:75:42:86:54:9a:4c:90:a4:45:b4:32:67:bb:2e:
39:33:65:3c:e0:fa:70:5f:57:20:0a:03:db:31:77:
a5:cb:82:69:2d:8b:c8:5e:81:f0:ba:1a:67:ce:e0:
ac:dc:a8:b7:a8:2a:01:39:99:04:3d:39:58:80:be:
d4:40:dd:5a:01:aa:f5:de:e9:73:c5:29:af:6c:2b:
86:94:bf:10:30:eb:1c:21:95:3e:a6:99:b8:12:00:
e0:74:a7:90:8b:21:fb:5f:90:64:93:e2:61:28:58:
81:71:8a:c9:df:26:b9:c7:91:31:27:2a:f5:53:b0:
99:e6:05:cf:80:56:93:47:4c:bb:7d:61:93:dd:3f:
39:e7:5a:d5:8b:7d:73:d7:bb:89:1e:3a:a6:13:5a:
4c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BE:45:CE:43:C9:2C:91:AB:B0:1D:28:81:F4:43:58:7E:8F:A3:02
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/HL5FzkPJLJGrsB0ogfRDWH6PowI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.160.0/22
Signature Algorithm: sha256WithRSAEncryption
08:96:ff:eb:c3:2c:a2:2b:fb:5e:76:54:82:ea:db:a0:09:79:
ae:65:2a:02:28:e2:e2:0e:07:a0:23:58:6c:07:8a:53:7a:15:
bb:bb:8a:65:c9:0a:51:fc:9d:e6:1e:23:e1:ae:8c:a4:e1:61:
57:99:01:3a:1f:d5:c8:eb:f6:c1:3c:3a:02:27:bd:45:77:28:
68:29:df:6b:aa:da:02:9c:b2:fc:93:50:5a:58:6e:72:53:a9:
7f:56:62:e4:8f:9f:81:c8:9e:ff:9e:5f:9c:b8:d3:da:58:77:
33:90:7f:55:d7:d2:9c:7c:25:3a:53:77:87:f9:c5:d0:f1:53:
45:34:97:d4:e5:38:3b:93:64:a2:d3:9a:4b:a6:25:de:2a:f6:
a4:e8:d1:aa:aa:7a:da:6d:d2:9e:8a:2d:37:aa:b7:9d:46:d5:
99:07:3c:f2:26:7a:8d:f0:cf:06:57:3d:29:de:2d:30:61:2f:
a1:8d:3c:72:32:a0:ea:fd:3b:1b:b2:70:8d:d4:41:3e:f8:0f:
1c:5c:3c:d8:34:fc:9f:67:46:b8:64:04:49:7f:d2:b6:da:ba:
a2:f1:71:6c:ac:d7:8d:84:b9:ee:02:97:36:c9:38:02:61:6f:
4e:9a:36:8c:a8:da:1b:1a:95:b2:8c:06:70:fa:13:78:74:f8:
38:58:dc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:40:50 2024 by rpki-client on console-ams.rpki-client.org