Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/_gD8kA8ucmeRwoRsh_wIAl1avdE.roa
File: _gD8kA8ucmeRwoRsh_wIAl1avdE.roa (raw, json)
Hash identifier: buB1FI0GNFMYmJBN0FzUbkWwRu5yzo2kpfdYDEGgAnQ=
Subject key identifier: FE:00:FC:90:0F:2E:72:67:91:C2:84:6C:87:FC:08:02:5D:5A:BD:D1
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 0191089BA8EC32674657DC1DA327D154BF70
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/_gD8kA8ucmeRwoRsh_wIAl1avdE.roa
Signing time: Wed 31 Jul 2024 11:45:04 +0000
ROA not before: Wed 31 Jul 2024 11:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 91.200.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:08:9b:a8:ec:32:67:46:57:dc:1d:a3:27:d1:54:bf:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Jul 31 11:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe00fc900f2e726791c2846c87fc08025d5abdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:67:54:5d:b4:39:61:ff:12:6c:7a:91:29:cc:
51:47:85:af:ac:67:a9:7d:f8:30:d5:24:14:ae:b4:
7d:5a:bd:f9:73:83:26:fb:bf:56:bd:1a:11:d2:eb:
84:8c:d1:96:86:fd:5e:47:af:c7:85:d9:53:9b:ae:
7e:7c:c9:b8:49:69:87:30:de:4d:cc:5c:3c:a6:47:
e2:2e:34:95:ae:25:c7:06:a5:fb:f2:9b:08:09:be:
f6:ee:ed:5f:14:f8:5a:76:60:c2:05:45:3f:d8:dd:
1c:4b:16:fe:b3:2e:f8:f2:34:f3:f0:eb:26:99:55:
d1:b6:25:44:b9:ed:b1:1c:b0:ed:58:96:b3:b1:84:
a2:a9:9c:9d:f3:9e:76:d9:bd:5b:a4:71:e8:b6:77:
80:69:0f:d3:9b:86:08:d0:e1:f8:50:f4:b0:78:36:
0a:8d:02:7c:3a:62:0b:44:0c:1e:a2:3d:dc:08:cd:
f5:74:a0:22:93:ad:21:6c:e1:1b:21:35:f7:af:42:
6c:36:a7:a7:64:80:36:44:7f:17:58:84:fc:bd:0b:
5b:ad:bc:29:21:92:95:2a:6b:4a:d9:55:07:2a:ed:
e9:39:d5:cb:1e:30:54:c1:e2:03:af:aa:13:58:c6:
26:4f:ce:10:f5:99:43:c5:b4:04:0c:13:6b:02:7e:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:00:FC:90:0F:2E:72:67:91:C2:84:6C:87:FC:08:02:5D:5A:BD:D1
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/_gD8kA8ucmeRwoRsh_wIAl1avdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.252.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2e:b4:ad:cb:f2:97:0c:57:dd:db:30:6f:e5:91:f9:f3:3f:
11:75:91:9f:71:c2:b1:4c:e5:ae:d1:0d:c4:4b:33:c0:1c:f2:
0d:2c:d2:43:f3:4b:2f:37:8c:20:72:a1:bf:dd:22:d9:b4:20:
72:7f:5b:90:1f:69:c3:36:7b:4e:a1:31:37:ae:0b:13:38:a8:
38:67:7e:64:fd:3e:c7:51:8c:8a:d7:ca:87:eb:c5:e3:1a:c2:
ef:69:ac:95:1d:b9:c6:3c:88:b6:a4:09:3b:27:ba:d5:11:32:
c9:6f:4e:3a:fa:85:19:f4:7e:1b:d8:39:c8:d3:1b:a3:87:81:
55:44:d8:b0:5a:16:ef:92:78:b0:1b:23:f1:53:65:c2:34:87:
33:77:95:cc:c5:66:4e:c7:6a:c5:38:7c:f0:ed:d6:47:e8:36:
51:c4:0a:d2:e6:3a:a6:14:f2:2b:e1:c3:3b:08:e9:ba:45:b9:
4b:c5:18:bc:12:64:96:30:18:fd:55:c9:94:8c:17:2e:c6:1f:
b8:60:a4:31:7e:30:20:c7:0f:56:3b:e6:ca:72:71:67:61:f3:
2f:0f:6d:c9:f2:e6:33:80:fc:b5:ad:84:a2:fe:5a:9d:3c:e4:
6e:6c:53:cc:6f:bf:14:5b:71:b5:2e:7d:90:6c:f4:4b:16:af:
91:27:cc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:51:56 2024 by rpki-client on console-fra.rpki-client.org