Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/xqA_KJ2o2RKDmARYRWwgCHuc2wA.roa
File: xqA_KJ2o2RKDmARYRWwgCHuc2wA.roa (raw, json)
Hash identifier: O1crKUA0E4HoxMEDhURLfC72JGI3u4Zg11FCVrYTvGY=
Subject key identifier: C6:A0:3F:28:9D:A8:D9:12:83:98:04:58:45:6C:20:08:7B:9C:DB:00
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 018CCA2AF80ECDB3E3198BEE528D111149C7
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/xqA_KJ2o2RKDmARYRWwgCHuc2wA.roa
Signing time: Tue 02 Jan 2024 12:34:22 +0000
ROA not before: Tue 02 Jan 2024 12:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43674
IP address blocks: 193.43.90.0/24 maxlen: 24
91.198.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 04:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:f8:0e:cd:b3:e3:19:8b:ee:52:8d:11:11:49:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Jan 2 12:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6a03f289da8d91283980458456c20087b9cdb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:85:3e:66:c3:18:b0:67:2f:18:6a:84:0e:62:
d0:92:cf:98:6f:31:71:2d:3f:a1:58:50:05:39:1f:
1d:e6:ae:03:8d:88:d6:49:9d:b8:b8:3d:2e:bb:41:
ba:32:18:58:e6:9b:b3:5d:eb:26:e0:a7:91:90:92:
fb:7c:ac:51:73:f8:12:90:94:b1:c9:33:9d:cd:d8:
d0:3e:40:e9:ed:ed:6b:ac:8b:60:d6:e3:8d:8f:65:
f2:a8:8d:c1:01:b2:a8:0b:5f:f2:9a:6f:cf:fa:b6:
82:17:8c:1b:5d:34:38:58:69:ff:c5:e9:3b:73:9a:
0c:2a:a8:26:98:34:d6:26:7f:cd:6b:08:1d:1d:26:
4d:a7:31:f3:35:b6:b4:42:cc:f1:22:c3:46:74:b4:
d0:38:65:45:6b:96:79:3f:8f:fc:b4:88:71:f8:55:
8c:89:49:ba:d6:a5:b6:99:73:07:83:36:3b:22:db:
01:fc:65:40:63:5a:8c:bc:38:55:bd:cd:00:cd:1a:
44:d2:fd:bd:3c:e3:61:9a:b0:2a:fe:e4:52:b7:8d:
54:9f:73:81:8d:23:e1:b4:61:ba:22:f4:24:95:34:
7e:d1:8c:74:4b:07:1d:2d:21:f5:f0:87:2f:eb:5f:
4a:25:4f:4c:6c:75:36:55:c1:ee:f3:21:22:9f:b4:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A0:3F:28:9D:A8:D9:12:83:98:04:58:45:6C:20:08:7B:9C:DB:00
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/xqA_KJ2o2RKDmARYRWwgCHuc2wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.100.0/24
193.43.90.0/24
Signature Algorithm: sha256WithRSAEncryption
33:94:2b:9b:c3:03:49:7e:4a:c8:78:77:a5:30:6d:42:a5:4d:
05:62:1b:e9:f0:23:58:b8:42:9e:6d:70:e5:84:40:5c:40:88:
01:a6:93:9c:a7:b9:c3:c2:ce:43:87:b0:46:34:41:5b:ec:fa:
0a:fc:f5:82:a5:e4:c8:e6:c3:73:fd:77:ab:af:08:1e:b6:a4:
ac:84:64:8a:10:27:94:81:4f:b3:d2:7a:39:dd:4f:53:93:ce:
4e:19:c0:ca:49:df:eb:49:d4:4f:6c:4d:9d:cf:d6:ce:05:b5:
19:4d:c6:b3:fc:8c:f5:2b:21:f9:bd:d0:9b:9b:b8:8c:77:5e:
3f:56:ed:42:68:97:1d:09:63:33:a1:5b:68:7b:45:ae:f7:9b:
c0:25:32:45:82:82:7c:6e:1d:dc:91:3b:15:75:68:ad:b2:67:
e6:2c:1b:9c:02:83:19:21:d5:39:f2:15:1c:74:2a:10:d5:b8:
ea:0f:16:fa:7e:35:8e:18:1c:3b:9c:f7:e1:4a:b0:00:e7:ec:
f3:2f:d0:29:2c:68:9d:8e:65:34:fe:84:1b:5c:cf:4d:0d:6e:
ef:98:59:42:d5:9b:2e:b9:6a:f3:4d:71:ce:37:bb:c4:89:7f:
11:47:20:18:c3:31:ad:ab:7b:34:19:54:f7:21:39:01:b5:0b:
80:8b:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 11:41:18 2024 by rpki-client on console-ams.rpki-client.org