Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/H4Q223_SSiEtdK5YRcqoyHINohM.roa
File: H4Q223_SSiEtdK5YRcqoyHINohM.roa (raw, json)
Hash identifier: NyK0nIcM3fSRd6J6ohAuPSTTiGB8wGIKOdr6RYUahko=
Subject key identifier: 1F:84:36:DB:7F:D2:4A:21:2D:74:AE:58:45:CA:A8:C8:72:0D:A2:13
Certificate issuer: /CN=55cd2c8dbf311287ebf7a45a9c17a8c71056bce8
Certificate serial: 018CC5DBEEF5DF0E4C844FE99F72261DBE19
Authority key identifier: 55:CD:2C:8D:BF:31:12:87:EB:F7:A4:5A:9C:17:A8:C7:10:56:BC:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vc0sjb8xEofr96RanBeoxxBWvOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/H4Q223_SSiEtdK5YRcqoyHINohM.roa
Signing time: Mon 01 Jan 2024 16:29:34 +0000
ROA not before: Mon 01 Jan 2024 16:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48551
IP address blocks: 91.217.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/Vc0sjb8xEofr96RanBeoxxBWvOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/Vc0sjb8xEofr96RanBeoxxBWvOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vc0sjb8xEofr96RanBeoxxBWvOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ee:f5:df:0e:4c:84:4f:e9:9f:72:26:1d:be:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55cd2c8dbf311287ebf7a45a9c17a8c71056bce8
Validity
Not Before: Jan 1 16:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f8436db7fd24a212d74ae5845caa8c8720da213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:d3:ac:be:96:12:1d:fc:04:1a:c2:a9:ec:
1b:74:53:7d:26:4d:0c:e4:d8:83:7b:a0:0d:e5:84:
17:07:fe:83:7f:8d:10:1e:88:cb:b0:b0:2e:28:0c:
0b:48:f5:c2:89:dc:32:94:11:0c:1f:b7:25:2b:05:
b0:f9:8a:29:87:d2:0a:2c:1f:e4:eb:87:5d:f9:b1:
4d:83:71:c0:47:4d:9e:af:d7:96:64:17:b7:9a:2c:
57:b2:a2:0a:80:40:d1:d4:87:ab:93:8a:57:5b:e7:
c8:0b:0a:6f:7f:d1:47:c8:54:06:44:a4:f4:6d:7b:
e6:e2:4c:8b:ea:d0:5d:6a:79:90:82:26:b8:f8:a4:
de:d0:08:5d:85:d4:82:34:d4:d3:16:3f:ed:94:55:
ff:4d:01:03:ff:f1:18:29:b6:d4:e1:51:68:99:69:
a3:bf:d2:50:00:40:a0:09:1c:d4:43:c1:ea:bd:64:
79:ca:01:c4:16:2a:bb:7a:d2:6c:b8:61:11:7c:60:
cf:74:50:3b:ce:66:8a:53:6b:b5:dc:6f:2d:c9:ac:
ba:ea:8f:67:c1:b6:11:2b:80:9d:80:43:71:c9:f5:
d2:54:23:e7:bf:12:db:55:fc:d0:68:3b:a6:ad:04:
d0:a8:6b:e2:ed:45:ec:31:7c:5d:2a:fc:8c:3a:56:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:84:36:DB:7F:D2:4A:21:2D:74:AE:58:45:CA:A8:C8:72:0D:A2:13
X509v3 Authority Key Identifier:
keyid:55:CD:2C:8D:BF:31:12:87:EB:F7:A4:5A:9C:17:A8:C7:10:56:BC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vc0sjb8xEofr96RanBeoxxBWvOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/H4Q223_SSiEtdK5YRcqoyHINohM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2ebeeb-95b1-4fea-8da0-b5af64568a33/1/Vc0sjb8xEofr96RanBeoxxBWvOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.177.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:fa:aa:1c:3e:d4:cf:ff:62:ab:88:5d:49:3e:cf:e1:a5:ef:
12:64:ae:ea:34:9f:18:45:43:57:49:9e:f8:7b:93:74:00:64:
51:88:7e:e8:25:fc:28:80:3a:b9:8b:23:e4:04:a9:1a:58:ca:
a2:7b:2f:6f:1b:df:59:25:4d:e4:96:09:fa:74:e8:b3:9c:65:
97:95:4b:5b:ff:1b:14:92:a6:08:48:97:ed:6f:48:22:88:77:
e5:14:f8:ec:37:5c:dc:99:29:92:30:20:79:0b:33:51:f4:d8:
ca:d0:e5:68:99:41:e5:3e:ae:3b:e9:ff:2e:18:00:b7:ed:9c:
45:b4:5a:24:3a:2b:4e:47:68:7d:e1:26:c9:56:50:80:62:07:
dd:52:5b:14:1c:88:02:b0:e3:c8:ca:42:ad:f3:37:bd:cf:24:
d1:e5:c9:8b:0c:e1:50:2d:17:fb:86:28:1c:4a:d7:c6:69:fb:
33:3f:49:38:ad:38:9c:11:ef:16:02:53:84:89:c1:99:d8:19:
85:cf:34:0e:b5:70:b2:ff:5d:c7:ef:87:eb:d9:99:42:42:85:
86:33:74:85:86:20:4c:dd:7b:b9:f6:14:b2:f2:b8:66:03:1b:
b4:fb:5b:3a:f7:7b:60:5d:e8:17:54:dc:b5:8f:25:5a:c6:29:
b6:17:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:41:06 2024 by rpki-client on console-fra.rpki-client.org