Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS51269.roa
File: AS51269.roa (raw, json)
Hash identifier: ly4zBSpwx3tnZLY/d6YnnWs6Zn6bGuThPWTO4b0Q9qg=
Subject key identifier: 1C:DE:2B:F7:E6:9D:AC:F8:07:CE:02:33:FA:F8:D5:13:AC:20:1E:F5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 30743A52FC1124E548B8553950C3DBAC572CEEF2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS51269.roa
Signing time: Thu 14 Mar 2024 05:02:10 +0000
ROA not before: Thu 14 Mar 2024 04:57:10 +0000
ROA not after: Thu 13 Mar 2025 05:02:10 +0000
asID: 51269
IP address blocks: 91.124.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:74:3a:52:fc:11:24:e5:48:b8:55:39:50:c3:db:ac:57:2c:ee:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 14 04:57:10 2024 GMT
Not After : Mar 13 05:02:10 2025 GMT
Subject: CN=1CDE2BF7E69DACF807CE0233FAF8D513AC201EF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0e:17:f9:ff:fa:3d:0c:e9:ad:5e:86:12:d1:
b4:08:c8:cf:68:8c:8b:9d:00:19:ac:f8:16:ae:2b:
31:c5:26:eb:f5:5a:81:33:35:bc:57:7d:ce:68:9c:
62:29:9a:ba:4d:ae:03:e6:5e:1f:ad:1a:86:ef:dc:
92:fd:26:00:2b:c9:6c:b3:26:b8:82:67:f3:02:3c:
a6:dd:e3:29:7e:dc:18:62:f5:ac:06:85:d8:b0:e9:
41:12:77:e2:25:d7:6b:90:fd:ca:2e:85:0b:43:5f:
52:ba:23:91:00:d3:f9:d6:15:94:3b:a7:70:72:97:
e0:a4:ca:85:f9:0d:d1:b4:3e:59:0b:56:76:c6:52:
92:bc:57:7d:f7:3a:85:6c:77:93:83:f8:7c:5c:ed:
52:8d:af:32:b4:6c:86:c9:43:13:93:28:f0:f6:b8:
60:c5:b7:77:2b:0c:19:3b:1c:ff:d8:fb:1c:c0:46:
91:06:44:f6:05:ff:f1:82:f2:6b:b4:d4:6b:77:69:
de:ae:63:26:f0:bb:b3:fa:49:b5:e7:e4:c9:03:a6:
b9:68:9a:03:e4:3c:96:6b:fb:ba:28:93:77:f9:55:
6a:3e:67:3d:65:30:e6:88:e6:f2:a6:a7:d7:18:82:
7b:a6:d6:30:65:e9:81:42:60:46:ed:44:0d:db:b5:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:2B:F7:E6:9D:AC:F8:07:CE:02:33:FA:F8:D5:13:AC:20:1E:F5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS51269.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.91.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ab:25:d7:a3:3f:1f:e7:69:80:37:4b:78:26:6a:d9:26:ae:
e2:3a:9e:33:c1:0b:7a:f3:d2:8c:00:11:f4:62:7a:6a:55:37:
c0:88:3f:2d:b4:ba:22:0b:5a:c7:50:90:bd:d2:40:cf:cc:c8:
b7:54:b8:2c:80:25:99:45:1c:9e:1c:f8:3e:02:36:b5:d5:e4:
fc:d1:84:72:c7:10:f3:df:06:55:f2:af:82:26:d2:ad:3f:73:
5e:7d:05:6a:1b:53:75:73:39:f9:1c:b3:89:9e:3d:e9:dc:c2:
d3:3e:af:da:81:90:5c:9a:a6:fc:0d:2f:34:64:46:3e:46:35:
d3:26:00:b8:28:8b:48:79:b0:67:89:97:bc:0f:5e:3e:40:4d:
e9:b0:ea:dd:96:7b:92:e1:0a:36:ee:fb:76:57:ab:e6:9a:52:
5f:82:62:10:79:49:16:c4:76:f1:61:77:ce:79:0f:3d:27:e5:
d8:5a:d6:f5:76:35:cd:c2:10:55:58:83:f9:28:16:01:07:0a:
4c:1f:cd:1c:5d:8b:d8:1b:b4:1a:8b:93:14:f9:f0:e9:e3:e8:
c6:b2:0b:e4:bd:85:05:66:bc:62:82:7d:ab:39:80:01:80:01:
af:0c:3c:18:cf:4f:5d:12:b5:6e:c9:06:85:3c:cd:5f:ba:39:
2d:1f:52:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:58:22 2024 by rpki-client on console-fra.rpki-client.org