Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/t8U_TQSH9rMbMr9tdF-FNDElb5Q.roa
File: t8U_TQSH9rMbMr9tdF-FNDElb5Q.roa (raw, json)
Hash identifier: SERe9eZCoiYDVhyZf52IBB+DxhtZRHtWTLkr4YOBX5w=
Subject key identifier: B7:C5:3F:4D:04:87:F6:B3:1B:32:BF:6D:74:5F:85:34:31:25:6F:94
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 018CC7933BEBA108C9957A07945858BBCC07
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/t8U_TQSH9rMbMr9tdF-FNDElb5Q.roa
Signing time: Tue 02 Jan 2024 00:29:24 +0000
ROA not before: Tue 02 Jan 2024 00:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 91.103.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3b:eb:a1:08:c9:95:7a:07:94:58:58:bb:cc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jan 2 00:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7c53f4d0487f6b31b32bf6d745f853431256f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:8f:ec:4a:7d:64:07:83:4d:6c:41:55:aa:
7f:b4:b7:6c:39:d5:8a:f5:d9:ee:72:0c:65:53:7b:
54:1f:0f:1e:67:ab:52:a4:31:c2:3b:76:7c:09:64:
02:77:5a:60:a2:cd:85:55:17:02:f1:89:63:1e:14:
74:b4:3a:8a:8e:22:18:b6:14:74:f8:62:45:f3:c1:
e0:5f:cc:df:ae:ed:03:d5:a4:a1:7b:96:7a:c6:56:
eb:ee:d6:34:32:9e:4c:3b:10:57:d6:85:63:69:9f:
a3:ae:c8:ec:8b:58:41:a7:0f:91:7f:c2:77:a7:57:
52:a4:5f:bb:7a:dc:c9:ce:4d:51:92:9a:f2:b1:5d:
97:e8:f5:17:6d:72:34:fc:21:da:97:27:4f:3d:67:
1a:f9:e1:ba:58:74:6c:54:cb:94:8f:1c:a2:cc:11:
cb:88:f4:f2:99:e7:dc:80:53:ae:d8:0c:62:34:9e:
20:fc:35:63:65:f2:9e:f1:23:4d:17:22:b9:b1:a0:
0a:f0:77:09:f5:0c:bf:87:a8:24:8b:aa:2d:85:b5:
2b:49:41:a0:8b:78:26:c2:fa:03:bf:0a:ec:06:13:
43:1c:d2:44:51:94:28:83:b4:6c:11:4c:43:1b:90:
37:06:eb:de:58:c2:94:a0:08:fe:da:f2:76:a4:71:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C5:3F:4D:04:87:F6:B3:1B:32:BF:6D:74:5F:85:34:31:25:6F:94
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/t8U_TQSH9rMbMr9tdF-FNDElb5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:02:4b:6b:be:39:c3:5d:39:e4:cf:3b:eb:08:f4:b5:b7:d2:
5f:c2:f2:a1:b5:dc:63:e7:f2:88:e2:d4:51:8e:af:fe:3f:dd:
69:05:6c:19:a1:21:78:1d:42:ac:fd:4a:68:c5:ab:2f:f5:4e:
bc:02:0a:bc:7c:cc:84:e2:87:07:a1:d6:03:21:7a:9e:1e:7d:
0f:36:95:bf:2d:21:f1:e5:8b:4b:f0:f7:5e:0c:e1:7f:9b:39:
2e:2b:8e:6d:88:3a:f9:62:9b:3d:f6:4f:b4:13:62:b6:77:d9:
07:58:99:d2:8b:b7:12:cf:a1:9b:64:2d:f6:02:0c:3c:bb:05:
27:65:c7:10:12:07:14:fb:eb:8f:b8:4d:6e:f0:06:3d:09:cd:
e5:d1:0b:cf:77:5c:d2:29:32:e8:1a:01:9c:cf:b4:c2:55:a5:
40:fe:c7:ab:d8:fa:ea:b5:7e:ef:6d:88:b0:5d:42:28:fe:38:
b8:eb:5e:c9:03:35:3c:40:7d:8f:55:f2:13:69:c5:bc:8c:39:
a7:49:9a:39:5a:40:83:4e:2b:d4:bd:39:fb:99:c6:63:5a:14:
9b:1b:d1:09:51:1b:b3:ee:fd:2d:41:b6:f5:5a:74:28:0e:30:
e5:d6:e3:95:b8:f3:24:f9:52:0f:ec:5d:8f:82:43:1e:0d:3f:
44:8f:c0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:14:57 2024 by rpki-client on console-ams.rpki-client.org