Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/0JM7ZRPFENYHNyUfB_kARAJiFDU.roa
File: 0JM7ZRPFENYHNyUfB_kARAJiFDU.roa (raw, json)
Hash identifier: N0Oc9eg5OfmKyJFdK2RgKV84ZOI2r2ymX9+Opv0Vo9Y=
Subject key identifier: D0:93:3B:65:13:C5:10:D6:07:37:25:1F:07:F9:00:44:02:62:14:35
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 018CC9BCAD75B9E54D05DCF6F5E5A32AD6FA
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/0JM7ZRPFENYHNyUfB_kARAJiFDU.roa
Signing time: Tue 02 Jan 2024 10:33:54 +0000
ROA not before: Tue 02 Jan 2024 10:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42399
IP address blocks: 91.189.112.0/24 maxlen: 24
91.189.112.0/23 maxlen: 23
91.189.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ad:75:b9:e5:4d:05:dc:f6:f5:e5:a3:2a:d6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jan 2 10:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0933b6513c510d60737251f07f9004402621435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:82:d9:7d:78:35:ab:fa:5b:ad:95:ba:bc:a0:
6c:35:7f:09:fd:7b:37:0d:1b:da:9c:69:5a:e4:36:
4a:ae:6d:c4:4b:a2:c0:f9:2a:10:38:ed:0c:db:a4:
4b:93:44:3e:03:0b:bd:f3:ea:78:45:b4:ed:0c:60:
b9:6a:18:7d:df:5c:bf:43:b9:ad:8a:fb:d5:78:1d:
62:34:ee:16:b7:5d:cc:ca:e1:21:0d:80:ea:b3:fa:
a6:e9:33:a0:90:79:ba:3c:6c:4a:5d:b8:46:36:eb:
1f:47:04:d8:a2:11:75:94:13:fb:af:47:37:aa:16:
26:d9:67:0e:bf:c6:42:4d:83:d5:48:dd:27:0b:33:
c0:58:15:3d:3a:b2:3b:25:c9:ac:59:07:14:4a:92:
c2:6e:47:4f:96:90:3f:d0:c8:d6:58:64:f3:4f:51:
d1:1c:f1:f1:b8:7b:9d:e8:4e:8f:f5:5c:07:ad:d7:
6b:0d:3c:fa:ac:7e:29:c9:4b:53:d4:e1:e7:3b:59:
85:f3:6c:dd:7f:58:50:ee:d7:95:a6:c6:58:b8:39:
9d:4e:cb:14:e3:ac:98:fb:50:3b:71:fd:e8:f3:57:
bc:2b:0c:4c:29:ae:b8:23:cb:4a:9d:f4:1d:24:fa:
ef:95:e4:b7:5c:9c:46:d6:ab:f2:4d:4c:b8:3a:af:
22:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:93:3B:65:13:C5:10:D6:07:37:25:1F:07:F9:00:44:02:62:14:35
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/0JM7ZRPFENYHNyUfB_kARAJiFDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.112.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:10:51:7d:a8:81:40:6b:6e:29:67:85:67:a6:7f:da:aa:37:
bd:0d:39:a5:63:83:28:fa:4e:11:ca:0f:0c:5a:c8:c3:5f:23:
23:2d:3d:81:c7:d0:e6:c8:92:6c:1d:eb:09:2b:2f:ed:ae:4b:
ef:20:67:7e:a5:92:77:18:24:b9:bf:43:4c:d1:a3:2d:22:dc:
06:88:bc:12:e9:90:2a:5c:8e:c6:8e:6e:fb:d3:88:3d:2f:f6:
85:28:6f:48:61:90:6c:11:5d:b2:53:c7:b8:0c:bb:73:50:a6:
92:3c:52:05:07:49:0d:a6:0e:4f:b2:eb:43:a9:c2:e2:21:c1:
a3:38:51:36:c1:55:24:0a:a1:7f:0c:57:aa:fb:e2:58:1a:b0:
4b:47:cb:0d:d0:fa:b1:c4:dd:4c:b5:c5:77:36:f5:e1:32:53:
82:bf:68:f2:e1:5a:10:6e:6c:e4:1d:ca:0d:d2:11:c8:df:be:
a0:65:54:4f:22:69:8a:4d:8d:22:9f:cc:ca:47:c8:45:58:9f:
54:30:6f:f6:d1:da:b0:01:88:98:e7:48:e1:c4:e4:e9:4b:9d:
46:02:69:8b:ea:7f:6d:16:05:17:4c:90:d2:35:1f:13:f1:c9:
be:32:0e:e4:09:47:6c:a3:f1:9f:58:2c:be:9c:0e:0a:e2:01:
39:b8:9d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:36:22 2024 by rpki-client on console-fra.rpki-client.org