Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/oT-QA3TRrGv0UgKZYUuKRpppMME.roa
File: oT-QA3TRrGv0UgKZYUuKRpppMME.roa (raw, json)
Hash identifier: 8Hp4Zq3PYJCPvI5KVDS3LmKwYx7TYsaHUo2/KskqYh4=
Subject key identifier: A1:3F:90:03:74:D1:AC:6B:F4:52:02:99:61:4B:8A:46:9A:69:30:C1
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018CC56EFEF0211B84F1EDB65E6EF0E5E168
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/oT-QA3TRrGv0UgKZYUuKRpppMME.roa
Signing time: Mon 01 Jan 2024 14:30:34 +0000
ROA not before: Mon 01 Jan 2024 14:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59711
IP address blocks: 91.250.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:fe:f0:21:1b:84:f1:ed:b6:5e:6e:f0:e5:e1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 14:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a13f900374d1ac6bf4520299614b8a469a6930c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:48:ca:50:bb:ed:20:6b:eb:43:b0:3d:00:
7a:7b:f9:5b:a1:20:69:f4:c9:99:72:ae:b2:7c:4a:
d4:dd:ed:c1:d4:a4:1c:89:1e:5b:35:f4:2a:c7:70:
7e:cc:41:72:6b:79:f9:d2:7f:39:96:5d:1c:98:96:
09:e0:9f:db:73:02:9b:50:73:c7:bd:cb:a0:61:d2:
57:f9:6f:ef:f2:26:82:db:f1:a7:6b:0d:91:b1:46:
0f:18:32:c0:af:0f:5f:6b:99:60:e1:ee:f5:f2:6e:
cb:15:06:39:ee:fc:80:9e:34:6e:67:87:db:5e:84:
87:5b:fc:dc:9f:c4:19:41:d3:e5:bd:da:db:a2:60:
35:46:dc:55:75:cc:b4:fc:91:13:fc:4b:e5:63:0f:
fa:e8:0e:90:12:43:27:a9:c3:bd:58:5a:c7:09:a8:
85:ec:34:36:89:1c:b5:59:ff:63:0e:41:e6:d1:23:
bd:3a:35:3c:ae:38:45:cc:e4:12:40:63:fb:15:c7:
0e:41:eb:7a:88:3c:dd:dc:01:86:12:de:38:ad:d7:
a8:f4:2b:2f:7f:27:1e:e3:c6:35:04:eb:60:a8:3d:
e4:6a:ac:1a:c4:34:cc:c4:f4:5a:1f:76:37:8d:21:
e7:4d:db:8d:33:6e:77:01:58:74:fa:fa:7f:3c:cd:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3F:90:03:74:D1:AC:6B:F4:52:02:99:61:4B:8A:46:9A:69:30:C1
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/oT-QA3TRrGv0UgKZYUuKRpppMME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.244.0/24
Signature Algorithm: sha256WithRSAEncryption
10:fb:29:6e:ea:e6:e9:e9:c3:01:9e:a7:3c:52:bb:e1:77:df:
a6:61:c4:98:c4:5b:1f:5a:f6:63:a2:19:3b:7c:59:ec:08:20:
df:2d:21:88:f4:6c:6a:f5:87:59:75:c2:24:eb:b6:f2:0d:42:
c7:78:70:b1:0a:f2:c0:a5:6d:af:ba:57:bc:e7:71:76:86:5e:
df:d4:2e:93:e1:48:7f:1c:fb:0d:f8:53:44:70:79:4d:81:2a:
bd:28:6c:ef:48:98:58:76:ef:e7:da:b0:bf:1e:b2:b4:2f:f9:
b2:88:1a:a6:9b:39:a8:db:71:fb:d6:31:8b:72:da:5f:b7:89:
e0:f8:6a:b0:77:53:a8:b3:ec:9e:ec:55:ef:11:83:24:38:0d:
98:7f:87:c1:4f:9c:b9:e1:ac:f4:62:0d:d8:d5:56:11:29:12:
9f:e2:5a:da:8e:19:cb:df:48:62:ad:ac:7f:4a:1b:d1:55:2d:
f2:58:87:f5:82:1f:08:84:ec:03:fd:e8:8f:f6:39:72:27:e7:
d8:ea:e5:e8:4b:5d:36:2d:d5:0e:24:b9:29:c7:74:e4:a9:91:
c2:8b:62:c2:aa:b9:b9:a2:0c:7c:8c:11:60:40:48:3e:44:ea:
ee:98:d4:28:b7:15:08:d6:51:51:ef:4c:d2:83:55:bf:78:65:
df:27:d5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 14:54:05 2024 by rpki-client on console-fra.rpki-client.org