Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/y1WPHEl8jCqjEvxGwQuDzI0lCYM.roa
File: y1WPHEl8jCqjEvxGwQuDzI0lCYM.roa (raw, json)
Hash identifier: 68cg6zmAsi7l3zE65jlqhng529IJaciOljlBDm/unkQ=
Subject key identifier: CB:55:8F:1C:49:7C:8C:2A:A3:12:FC:46:C1:0B:83:CC:8D:25:09:83
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 018CC6B8EF387B3E80F4C548B6603B893713
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/y1WPHEl8jCqjEvxGwQuDzI0lCYM.roa
Signing time: Mon 01 Jan 2024 20:30:57 +0000
ROA not before: Mon 01 Jan 2024 20:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48440
IP address blocks: 91.210.188.0/24 maxlen: 24
91.210.188.0/22 maxlen: 22
91.210.191.0/24 maxlen: 24
91.210.190.0/24 maxlen: 24
91.210.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 10:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:ef:38:7b:3e:80:f4:c5:48:b6:60:3b:89:37:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Jan 1 20:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb558f1c497c8c2aa312fc46c10b83cc8d250983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:4d:fe:9a:8a:7b:cc:9e:77:19:4f:bc:e7:
09:e8:29:e5:3b:5b:99:3c:56:09:fc:bb:8c:4e:47:
61:4b:96:f0:20:70:64:fb:dc:ae:38:3d:03:ef:d9:
fa:21:92:fa:1e:d3:4a:10:71:8c:62:7c:1d:10:48:
82:f9:b3:00:39:aa:6f:72:73:ef:6c:33:5a:3f:fb:
ef:6c:e8:2f:4b:a8:25:1b:ae:c0:66:62:76:f9:5e:
4f:99:d1:b0:5c:ef:6b:da:90:d5:e7:78:4a:c6:be:
9d:22:ab:c1:40:61:2d:f0:d2:7e:4e:5c:d1:f9:ee:
52:ad:66:54:89:96:03:e2:9a:6e:3c:00:d3:8e:82:
9b:81:dd:58:15:eb:15:08:dd:a6:0d:0e:9f:0b:fe:
e8:f2:33:cf:e4:0e:47:ad:00:e2:b7:a5:3f:3b:84:
de:9f:6f:7a:51:ef:6b:c7:0a:a9:ec:dc:03:83:07:
7f:43:bf:2c:81:c3:ed:49:76:0c:e6:46:f2:ef:5a:
f2:0b:3c:c2:d5:b0:d7:ad:e6:28:69:46:2b:7c:db:
8f:3a:53:d8:94:61:68:9a:03:3a:c1:4b:b1:bc:8c:
5f:20:72:34:9c:c8:b6:e6:f5:88:13:54:f9:1c:98:
de:93:45:d3:55:6b:64:5a:38:84:12:a6:52:05:0a:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:55:8F:1C:49:7C:8C:2A:A3:12:FC:46:C1:0B:83:CC:8D:25:09:83
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/y1WPHEl8jCqjEvxGwQuDzI0lCYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.188.0/22
Signature Algorithm: sha256WithRSAEncryption
72:ce:7b:b7:c1:2c:c6:b3:e8:a2:1c:cc:0a:4f:e1:87:ca:76:
fb:09:81:54:48:e4:ee:c6:77:f7:93:99:f3:69:4d:32:7f:d7:
a6:05:26:e2:71:1e:06:03:00:9a:95:0d:fe:71:72:9b:9d:09:
30:05:ef:ce:70:b0:aa:22:16:c6:09:8c:c0:2b:32:20:80:75:
74:85:01:0a:79:ff:5e:07:0a:ba:4b:bf:9b:71:93:af:25:23:
c7:7e:43:ad:28:c8:c4:42:16:5f:81:c8:05:c4:9d:30:cf:80:
dc:89:23:ba:2c:d0:cd:19:50:40:1d:8a:24:3a:f0:91:45:a2:
1a:85:bb:95:a4:22:c7:5c:f3:17:a7:13:f9:da:23:e9:c7:04:
92:87:48:00:08:e0:74:64:d2:ec:6e:37:da:6c:66:9d:7d:66:
7f:7a:cc:a3:34:fe:ec:ce:80:98:3f:6d:80:c0:68:26:c2:86:
7d:21:18:c6:f8:f2:cc:c7:1a:fb:71:cc:43:9c:1d:11:48:ce:
49:37:31:52:bd:08:69:18:ae:3c:89:83:b0:ee:c8:f0:79:c8:
c8:ab:d3:cf:a5:5d:01:b6:0f:60:ee:8b:f4:3f:05:65:42:e4:
21:7c:45:09:2a:96:c1:0f:c9:21:68:8b:05:b0:76:01:da:c5:
22:dc:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 19:53:11 2024 by rpki-client on console-fra.rpki-client.org