Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/UwxKMdgr5TSKt4fxW4JZ0GqRkWQ.roa
File: UwxKMdgr5TSKt4fxW4JZ0GqRkWQ.roa (raw, json)
Hash identifier: s9Fb4JWFS7BuXdCNqW0g4z+lNrz9u/TGi1O/c1cVNFA=
Subject key identifier: 53:0C:4A:31:D8:2B:E5:34:8A:B7:87:F1:5B:82:59:D0:6A:91:91:64
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 0191B6D4C33DE229A123049405CFE7B7B764
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/UwxKMdgr5TSKt4fxW4JZ0GqRkWQ.roa
Signing time: Tue 03 Sep 2024 07:41:22 +0000
ROA not before: Tue 03 Sep 2024 07:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51167
IP address blocks: 91.239.43.0/24 maxlen: 24
195.191.65.0/24 maxlen: 24
213.109.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:d4:c3:3d:e2:29:a1:23:04:94:05:cf:e7:b7:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Sep 3 07:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=530c4a31d82be5348ab787f15b8259d06a919164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:48:d3:0e:6c:aa:79:50:3d:29:c3:6e:b9:
d0:42:a1:64:40:b0:39:1d:f3:61:9b:86:9a:5e:26:
a8:da:29:6c:ce:b6:31:40:e6:4f:90:d9:12:61:5f:
d7:16:ad:85:fc:c4:8b:bd:71:1a:b6:03:d5:0e:74:
af:09:a7:50:3e:e6:e9:85:01:f1:a7:33:20:f5:91:
a5:cc:e2:ce:40:a9:94:89:eb:ac:a6:e9:f1:e5:92:
54:9e:ca:8b:a1:2b:a1:09:1d:e6:fb:80:2e:05:7d:
c2:5d:3b:c1:51:fd:07:15:9a:8a:28:70:7f:97:2c:
79:55:63:1a:af:c5:9e:69:5f:b0:0c:4e:35:cd:e8:
ac:58:df:1e:d6:d5:1a:1e:0b:10:72:bf:53:c5:a5:
da:21:11:81:48:ae:52:14:27:d2:bf:e5:fd:2a:71:
c8:8a:b9:fd:a7:57:dd:f7:a4:96:b4:6e:ce:0c:be:
e2:85:d1:88:c9:67:15:81:65:32:74:cd:de:cc:2f:
01:42:50:a6:97:d5:24:75:9f:7c:14:d6:0b:ad:bd:
7b:d3:9b:c5:94:f8:92:ca:08:ee:5f:c3:4b:81:5b:
c7:da:b2:b0:70:a9:32:32:2b:4b:29:ab:b8:8f:69:
e1:4c:42:77:46:cc:66:36:7d:52:ce:8e:83:7b:44:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0C:4A:31:D8:2B:E5:34:8A:B7:87:F1:5B:82:59:D0:6A:91:91:64
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/UwxKMdgr5TSKt4fxW4JZ0GqRkWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.43.0/24
195.191.65.0/24
213.109.76.0/23
Signature Algorithm: sha256WithRSAEncryption
49:92:e2:16:09:61:fb:d8:27:d6:72:f8:e7:66:29:e8:4b:a7:
af:fe:17:af:0a:f6:7d:ce:95:c7:37:c8:11:e2:32:21:13:76:
53:02:63:7b:ed:c3:cf:9e:4a:c6:64:60:c1:1e:82:66:14:bb:
08:5f:b6:ec:a0:c6:cb:cc:da:54:80:db:6e:5f:e9:44:cd:d5:
85:bd:82:88:15:03:46:15:be:ee:20:cc:e2:50:1a:98:e4:9d:
d5:16:fc:71:c8:17:20:d3:45:28:b9:82:14:6c:25:c0:11:66:
d4:bd:2e:5e:89:27:6a:b8:2f:a7:71:20:1d:3e:68:7f:94:e3:
4a:68:1c:d1:a8:27:b7:c4:c7:94:ec:59:4f:3e:b4:e2:13:8a:
b0:cb:30:0a:70:ce:df:07:cc:a6:c0:b0:9d:9d:64:68:70:32:
e6:91:a1:ca:cb:bd:de:94:81:22:86:4d:15:e6:23:5d:4c:bc:
55:90:db:b3:82:8e:50:a5:4f:8c:89:07:51:d8:f9:77:45:4e:
36:7a:7f:e0:e0:88:64:0a:d1:c7:39:c1:8b:a6:3d:50:db:2b:
9f:5f:89:ce:79:27:75:09:ba:1f:a7:24:c0:df:5c:9a:66:52:
eb:eb:5f:89:d1:3c:51:1a:db:2b:f8:f0:8a:5a:3d:d2:ed:9c:
a1:27:0a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:49:12 2024 by rpki-client on console-fra.rpki-client.org