Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/tVDvv1PeOgPYGWdM2qNgb2h2GAQ.roa
File: tVDvv1PeOgPYGWdM2qNgb2h2GAQ.roa (raw, json)
Hash identifier: DOIM9+Ux2XOn4iSGkSASmD+hqW69pVr2FhiDf4AduQA=
Subject key identifier: B5:50:EF:BF:53:DE:3A:03:D8:19:67:4C:DA:A3:60:6F:68:76:18:04
Certificate issuer: /CN=7e05f5adbb9aab1079b25246e23bbbd6a17e3ed8
Certificate serial: 018E12E8A8F41CCAE0D272741C421AE1C2CC
Authority key identifier: 7E:05:F5:AD:BB:9A:AB:10:79:B2:52:46:E2:3B:BB:D6:A1:7E:3E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/tVDvv1PeOgPYGWdM2qNgb2h2GAQ.roa
Signing time: Wed 06 Mar 2024 08:37:01 +0000
ROA not before: Wed 06 Mar 2024 08:37:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43190
IP address blocks: 91.217.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:12:e8:a8:f4:1c:ca:e0:d2:72:74:1c:42:1a:e1:c2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e05f5adbb9aab1079b25246e23bbbd6a17e3ed8
Validity
Not Before: Mar 6 08:37:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b550efbf53de3a03d819674cdaa3606f68761804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:bd:b4:da:6c:b5:69:98:37:22:ab:50:4c:
59:86:f1:91:3a:39:9f:e0:51:af:eb:47:9f:b1:35:
ab:27:52:2d:44:f8:f6:59:7b:4d:5b:8d:62:b9:97:
b1:78:84:31:7d:c9:c1:ed:32:98:32:42:06:d4:fc:
97:3d:0d:4e:35:d6:19:5f:90:45:d7:dd:68:32:6d:
d8:bf:49:38:8e:6d:5a:72:9f:05:16:42:d8:f1:cc:
d4:ea:88:9b:61:76:24:94:a1:b1:87:e5:74:cd:f9:
63:94:93:54:8e:37:47:b8:ad:00:a3:73:20:a8:88:
c3:b5:18:86:e3:69:ec:f5:45:b8:e1:a7:1b:90:8c:
a8:48:b5:ca:f8:43:c0:2b:57:c2:5c:ae:d1:30:e9:
af:fa:aa:24:19:6c:f3:cd:6e:41:dc:99:57:a8:f3:
1a:96:f1:45:4e:33:e6:70:f2:8d:db:53:92:97:05:
0a:61:2c:47:3f:f4:ee:4a:67:35:91:ae:0b:59:98:
e0:6f:d3:e5:2c:25:41:29:35:04:11:62:38:40:84:
88:31:95:47:48:3d:b5:b9:fc:96:4d:58:86:be:39:
35:a9:74:c3:ab:3f:84:5f:25:cf:53:3b:1c:55:06:
23:9f:ab:39:57:a7:ef:6e:2f:22:03:e6:44:42:51:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:50:EF:BF:53:DE:3A:03:D8:19:67:4C:DA:A3:60:6F:68:76:18:04
X509v3 Authority Key Identifier:
keyid:7E:05:F5:AD:BB:9A:AB:10:79:B2:52:46:E2:3B:BB:D6:A1:7E:3E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/tVDvv1PeOgPYGWdM2qNgb2h2GAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f5:81:ca:d4:e5:21:6c:a4:13:49:5e:ec:47:12:16:e8:ae:
93:07:67:aa:e5:cd:0b:69:e4:1b:34:4f:df:37:52:8b:fc:05:
b8:9d:2f:48:9d:43:13:0a:a4:54:c2:9c:70:7d:1a:b8:cf:3a:
2e:6b:09:47:ea:42:30:8a:7c:01:4a:6c:d4:df:92:05:66:7b:
a8:cf:6f:62:db:cd:1a:55:c0:0e:07:f1:11:f6:34:8e:82:1d:
a6:00:aa:d3:94:a6:77:39:41:10:37:fb:e5:63:27:30:74:3d:
de:f4:61:9c:44:8a:4c:4b:0a:c5:36:d4:11:92:7b:17:58:50:
0b:89:a0:36:40:e6:c3:a3:d4:da:b0:40:21:a9:6e:c9:1a:59:
c4:a9:ff:2c:4c:2c:72:65:4c:bc:48:6b:0e:ad:ee:aa:24:fa:
b7:44:ba:d7:2c:a9:37:6f:db:1d:85:0b:e1:16:95:b1:ea:e0:
eb:e0:ac:d0:cc:7f:84:42:85:bb:72:bc:b8:ac:2d:ad:e4:00:
f1:2a:45:b8:58:68:5f:88:09:65:7e:92:d4:57:26:1b:bd:50:
ca:0e:3f:23:cc:66:dd:ae:37:21:e3:cc:20:41:35:30:0f:14:
ae:f4:62:e6:13:09:9f:4d:ea:aa:6d:2c:46:f8:16:ac:f5:8d:
d3:b6:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 13:33:52 2024 by rpki-client on console-ams.rpki-client.org