Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/yD_gw5wUZEQTwKrJYVDU-HRw7ZE.roa
File: yD_gw5wUZEQTwKrJYVDU-HRw7ZE.roa (raw, json)
Hash identifier: PZMFaB3mP9dzg+/OVlluz6IK43ekH3iRpT3b5BsYT8E=
Subject key identifier: C8:3F:E0:C3:9C:14:64:44:13:C0:AA:C9:61:50:D4:F8:74:70:ED:91
Certificate issuer: /CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Certificate serial: 018CCEC99E962EE3CA51512E1EECEE982935
Authority key identifier: 1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/yD_gw5wUZEQTwKrJYVDU-HRw7ZE.roa
Signing time: Wed 03 Jan 2024 10:06:08 +0000
ROA not before: Wed 03 Jan 2024 10:06:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198901
IP address blocks: 91.240.88.0/24 maxlen: 24
185.245.8.0/24 maxlen: 24
185.245.10.0/24 maxlen: 24
185.245.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:c9:9e:96:2e:e3:ca:51:51:2e:1e:ec:ee:98:29:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Validity
Not Before: Jan 3 10:06:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c83fe0c39c14644413c0aac96150d4f87470ed91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b2:55:d1:47:a3:81:6a:7a:87:a9:c9:85:86:
17:e8:5b:06:ca:95:01:e7:d3:b8:74:db:e6:0c:f4:
08:06:9f:4f:9f:ee:86:f8:49:f3:09:24:90:5d:06:
71:89:01:b0:07:de:fe:86:22:ff:cd:aa:b8:84:cc:
c6:f0:8b:3b:4a:2d:1d:78:25:66:e0:d1:21:57:35:
51:12:d5:bd:12:37:42:37:27:14:c7:e7:64:fd:ff:
7e:06:3b:3c:e2:11:de:bb:92:82:49:3f:04:26:2e:
ed:c2:35:1b:e1:7b:81:07:15:f7:b9:35:37:1e:ba:
52:b9:bf:b5:c7:f3:aa:c0:2c:49:37:70:b7:64:fd:
3f:ca:39:58:b2:0d:92:39:b0:2a:be:90:1f:43:ef:
5b:8a:a0:11:d2:7b:75:51:86:ce:5d:62:bd:77:7e:
16:55:33:fd:e3:19:e5:91:d7:7d:06:a6:f0:18:20:
ef:3e:f9:d4:61:39:33:6b:18:a7:81:92:06:91:3a:
66:c6:72:13:17:95:d5:01:f2:40:f9:17:1c:ed:2c:
27:bd:f4:f8:dc:61:a6:c3:20:42:70:9b:23:ae:17:
27:95:01:6b:69:70:4e:7f:f6:09:2a:62:7e:d8:42:
c0:d9:3f:b9:23:fa:c6:58:ac:ba:69:93:4e:e9:18:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3F:E0:C3:9C:14:64:44:13:C0:AA:C9:61:50:D4:F8:74:70:ED:91
X509v3 Authority Key Identifier:
keyid:1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/yD_gw5wUZEQTwKrJYVDU-HRw7ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.88.0/24
185.245.8.0-185.245.10.255
Signature Algorithm: sha256WithRSAEncryption
5d:6d:0e:6e:91:2d:6f:81:35:dc:a4:ea:bc:aa:b9:32:1c:5d:
2d:91:53:3a:90:af:89:ec:ee:b1:4f:d5:35:6f:21:60:cb:f4:
3b:3e:ce:41:f0:c9:cf:fb:6c:f3:1e:6d:da:33:fd:c6:e8:52:
3f:1f:fa:d7:f2:df:1f:11:b1:5b:59:8a:d3:5d:b0:8b:46:82:
93:2a:b8:01:d8:b0:dd:c0:17:b0:9a:42:40:1b:11:aa:c4:ae:
f4:c4:72:54:f5:86:5e:e8:a8:57:97:ad:8c:12:49:6f:d3:be:
af:f8:67:81:c0:ea:75:fa:f3:2c:00:8c:ea:ca:00:83:57:f3:
37:92:ca:57:c9:61:62:8a:b6:d9:bd:98:e9:a3:89:00:d1:74:
6b:b7:6c:ff:38:70:95:3d:d4:cb:37:87:ef:1c:2e:ea:42:fe:
e9:bd:b5:f5:fa:1a:18:d9:27:0b:ed:d3:8e:5c:eb:24:b4:cf:
c0:70:85:bd:0c:a3:56:07:1a:c0:8f:48:08:53:e5:ec:3c:55:
84:cc:36:ba:d0:ad:eb:4b:ab:31:b6:c4:ff:08:55:76:e4:6d:
8d:69:46:a0:ad:5a:be:23:68:23:ac:88:12:bc:93:0a:b0:fc:
cc:e1:cd:a1:07:e3:68:81:0f:fb:9f:c9:f7:c8:76:59:84:8d:
aa:2d:01:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:48:15 2024 by rpki-client on console-fra.rpki-client.org