Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/46o33-QVc4MvL-1adq737GUpI2g.roa
File: 46o33-QVc4MvL-1adq737GUpI2g.roa (raw, json)
Hash identifier: 9vt3l98GGa9qBZenQ9TGNk1RF9y1zBGhbuQFOeXj/O8=
Subject key identifier: E3:AA:37:DF:E4:15:73:83:2F:2F:ED:5A:76:AE:F7:EC:65:29:23:68
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0190A1D3DB322AC81FDC0D5CF12AD86DCC35
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/46o33-QVc4MvL-1adq737GUpI2g.roa
Signing time: Thu 11 Jul 2024 12:45:34 +0000
ROA not before: Thu 11 Jul 2024 12:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 91.190.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:d3:db:32:2a:c8:1f:dc:0d:5c:f1:2a:d8:6d:cc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 11 12:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3aa37dfe41573832f2fed5a76aef7ec65292368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:2e:02:61:48:63:2d:bb:bc:25:da:9c:9d:
f3:23:fe:f1:14:e8:4c:26:05:75:57:0d:6e:5f:ae:
af:b2:2a:ea:2b:30:4a:25:97:87:e3:38:83:16:ef:
a8:e2:b2:77:31:e9:e4:4b:36:72:01:10:0e:96:cb:
a8:33:15:a1:20:26:87:72:3a:90:c6:80:4a:73:a1:
e1:b6:01:32:f4:31:d1:7e:e9:6f:d1:46:a2:bd:bc:
60:ac:bb:c3:0f:dc:b2:96:75:3b:c8:dc:bc:c1:e8:
e4:aa:77:89:b6:fb:fc:70:cf:a6:e0:1f:a3:83:ce:
43:b9:2d:eb:08:e6:f4:c0:d8:14:64:6f:c5:1c:17:
17:d7:f0:24:21:2b:ba:56:63:43:35:85:8c:f9:f2:
14:92:08:e0:06:12:d5:61:01:8d:d1:a1:4b:39:0c:
27:57:5b:33:60:6a:f1:e5:84:63:c1:7b:b4:c4:c9:
e6:a0:7e:c1:f9:8e:59:e9:56:e4:bf:b7:6a:91:ec:
12:94:8a:fb:89:29:88:d3:44:65:56:63:e6:9d:d0:
7c:22:c3:55:f0:61:09:e4:af:29:26:2f:13:6a:fd:
06:3b:4e:a6:59:ef:3a:a5:5b:91:63:09:c9:e0:09:
4e:24:d4:8b:7c:74:04:d2:4d:65:41:15:f5:81:6e:
14:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AA:37:DF:E4:15:73:83:2F:2F:ED:5A:76:AE:F7:EC:65:29:23:68
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/46o33-QVc4MvL-1adq737GUpI2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.190.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:4e:f8:6c:bd:c3:7e:3d:02:7e:a8:95:e6:53:5e:8f:ee:30:
dd:32:fb:b7:de:1c:b0:ac:85:a5:4d:c5:ca:5b:c6:85:6e:40:
88:17:8a:46:ba:c1:a9:27:47:96:a8:dd:25:fa:4c:a7:76:a0:
4f:d6:05:3b:d9:0f:ed:4e:b4:46:10:0d:6f:44:e5:ca:45:7d:
7a:2d:7c:f5:e5:5b:cb:50:31:c5:db:df:9b:a8:2e:76:a3:6e:
aa:d6:fa:24:15:d5:e2:5c:ab:ec:90:f1:0b:71:22:bd:e6:a9:
a8:98:38:41:7a:2c:02:70:ee:9d:b2:f1:cf:af:1f:01:a1:94:
9e:11:87:28:5f:12:58:01:b1:0b:4d:9a:44:3a:c1:a4:13:57:
e6:5a:79:24:5a:b6:1e:24:be:ec:d1:97:bf:76:85:ef:31:c7:
94:81:22:90:68:d2:97:ac:b7:a4:ab:39:d6:cd:f2:0c:ae:55:
db:22:23:d3:a9:33:da:c1:a7:81:6c:d0:b2:39:f9:6c:0b:5a:
ca:49:ac:54:37:45:51:21:df:21:64:2b:f3:11:be:3d:34:df:
09:a9:ad:6d:81:fe:62:bb:92:31:a9:a4:4f:c4:cb:dc:eb:2f:
92:70:ed:c4:af:3f:60:a6:0f:c0:48:a3:a4:59:6c:9a:f2:42:
15:a9:75:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:27:01 2024 by rpki-client on console-ams.rpki-client.org