Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/uKcC-gQyCXWaqWVZOKoEJFXhrIs.roa
File: uKcC-gQyCXWaqWVZOKoEJFXhrIs.roa (raw, json)
Hash identifier: KIHztpdXyzPoCK9lZwE8AnQP9IfIMpXV8mXW0D/eZLo=
Subject key identifier: B8:A7:02:FA:04:32:09:75:9A:A9:65:59:38:AA:04:24:55:E1:AC:8B
Certificate issuer: /CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b
Certificate serial: 018CC26D5B990E13C04E3214EBBDEF8FFEBF
Authority key identifier: FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/uKcC-gQyCXWaqWVZOKoEJFXhrIs.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31437
IP address blocks: 91.197.80.0/22 maxlen: 22
91.197.81.0/24 maxlen: 24
91.197.83.0/24 maxlen: 24
91.197.80.0/24 maxlen: 24
91.197.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5b:99:0e:13:c0:4e:32:14:eb:bd:ef:8f:fe:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8a702fa043209759aa9655938aa042455e1ac8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:0c:9c:81:8e:8a:53:09:05:98:3b:af:df:
5d:c1:46:15:cc:59:af:09:2b:ed:7f:2e:1a:6e:33:
90:90:dc:d2:f5:bd:be:91:54:5a:bf:1e:ef:5b:9e:
4c:7c:73:af:66:f5:17:c4:49:05:a7:60:cf:6b:60:
29:64:cc:55:24:53:ba:14:70:45:4e:bd:93:07:37:
a1:04:33:07:02:96:29:dc:da:6f:0a:cf:37:85:a8:
20:d1:1d:bf:78:53:cd:87:de:1a:a0:52:4c:fd:56:
7f:81:15:82:1a:30:37:73:b6:fd:1d:ba:fb:f1:33:
9a:b8:24:a5:68:71:23:8c:18:d7:c0:d4:1c:89:82:
dc:68:07:f3:3b:9f:59:43:3e:00:fd:2a:bb:98:b0:
dc:b9:ba:92:54:17:3a:8b:d9:7b:2c:ec:b7:80:b5:
1d:1b:09:82:5f:d4:eb:01:b5:c5:ea:af:ed:59:70:
11:d9:02:bf:77:44:8c:9a:d2:60:49:e7:86:68:1a:
db:df:92:82:9e:4b:67:33:a3:c1:74:f7:8b:af:1a:
7c:a7:d7:c7:9e:6f:7e:21:c8:11:b9:75:99:cc:c1:
a2:76:46:62:d0:95:a6:71:80:f1:ec:3d:d2:74:f2:
5e:b0:5b:7b:c4:0e:7e:73:ef:f3:2d:ad:78:bb:60:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A7:02:FA:04:32:09:75:9A:A9:65:59:38:AA:04:24:55:E1:AC:8B
X509v3 Authority Key Identifier:
keyid:FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/uKcC-gQyCXWaqWVZOKoEJFXhrIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.80.0/22
Signature Algorithm: sha256WithRSAEncryption
43:fa:d2:8e:39:d8:ea:04:3d:fa:88:d3:87:c3:67:d5:29:09:
e8:af:23:fc:6d:0f:9f:c5:e3:10:fc:52:4a:b1:fd:09:3a:b4:
b3:97:85:61:60:82:48:fb:ff:39:9c:63:15:f5:ad:74:77:72:
3f:ed:72:94:bc:4a:5e:36:bb:8f:2f:ba:d5:85:e6:19:58:23:
12:93:8e:c6:48:5f:94:2b:7f:56:e9:75:3e:e6:d1:19:5f:c6:
ec:14:ca:84:7e:4e:8b:08:a9:9e:e5:df:0c:85:cc:29:a2:8a:
2d:7f:93:3e:fe:d2:7f:4e:d9:da:11:9d:d4:c3:bd:b5:17:40:
a6:d4:63:45:1f:50:29:f9:3c:db:92:69:64:3f:b6:c6:b6:de:
fd:a5:5b:cd:7d:29:35:65:59:f4:34:8c:60:e9:61:17:a2:2d:
8a:f6:27:90:55:0b:5e:91:e4:c1:12:9b:d7:83:61:b7:ed:d7:
d0:65:03:7b:f4:a5:f7:c0:d2:11:52:fc:41:5c:1b:5c:66:f8:
6c:02:8a:74:66:84:a1:17:d5:5e:65:5d:f0:a6:04:11:d4:5c:
aa:ce:01:9b:01:66:5d:ce:a8:58:8b:ea:10:ad:fb:73:db:96:
e2:0e:b3:56:4e:a6:a2:6f:ca:8e:43:05:23:d6:cf:1b:c8:e5:
59:2c:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:10:32 2024 by rpki-client on console-fra.rpki-client.org