Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/geuv-JK48xe4JBhZhchSCVWoTLw.roa
File: geuv-JK48xe4JBhZhchSCVWoTLw.roa (raw, json)
Hash identifier: grj7nnBoBLxDZ+pd95NslR6vCd4u/Rlrq8JUuQDVM64=
Subject key identifier: 81:EB:AF:F8:92:B8:F3:17:B8:24:18:59:85:C8:52:09:55:A8:4C:BC
Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial: 018CC8DF04D247E34E0C6C35BFEF3F23CE11
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/geuv-JK48xe4JBhZhchSCVWoTLw.roa
Signing time: Tue 02 Jan 2024 06:31:48 +0000
ROA not before: Tue 02 Jan 2024 06:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.227.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:04:d2:47:e3:4e:0c:6c:35:bf:ef:3f:23:ce:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Validity
Not Before: Jan 2 06:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81ebaff892b8f317b824185985c8520955a84cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:d2:2b:e7:94:98:e0:30:8d:a8:68:4c:6e:
ed:85:8c:50:ba:bc:59:47:a6:f7:e1:e2:a2:07:1e:
47:63:b2:53:0a:2b:9a:e1:78:51:00:4a:16:e9:f1:
68:3c:17:59:95:4d:00:94:33:8b:13:35:8f:75:a7:
ad:0e:c2:e0:8e:47:e9:3e:4c:10:e0:9b:26:f9:c1:
46:a1:e3:6b:3c:36:ef:a5:34:73:09:6d:23:88:f5:
89:84:2f:84:3c:ce:77:5b:4e:47:c1:1b:8d:eb:1d:
95:c9:1d:71:28:5f:61:54:6c:6b:f5:0a:d6:3c:83:
b4:3d:55:46:18:48:1d:1e:78:be:30:d6:f1:c0:74:
13:97:25:c2:16:9b:eb:65:78:80:da:a6:a1:ff:07:
75:c3:7b:f6:a9:28:5c:04:83:05:c7:3d:4b:e4:90:
c1:2b:a0:61:91:42:95:39:29:ed:ae:71:6d:89:31:
02:5d:20:6a:80:31:ea:67:01:6b:d2:da:41:af:7f:
9a:69:2b:36:4f:88:ff:ef:98:1d:99:e0:02:13:31:
e0:d1:13:6f:90:88:e1:19:38:b3:cb:a7:55:60:df:
c7:3d:83:6e:9c:70:44:59:20:a4:c6:ee:25:b7:64:
e4:86:92:33:6e:84:55:8b:bb:ee:40:78:69:3f:26:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EB:AF:F8:92:B8:F3:17:B8:24:18:59:85:C8:52:09:55:A8:4C:BC
X509v3 Authority Key Identifier:
keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/geuv-JK48xe4JBhZhchSCVWoTLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.75.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e2:6d:3b:ad:6a:4d:fd:7f:26:47:26:6f:0d:c8:36:52:1e:
a5:40:66:9e:a7:82:78:b1:c8:bf:89:ba:d7:69:46:64:f7:91:
d5:f7:09:6d:a2:9e:56:b8:79:87:11:7c:e5:a5:54:aa:3e:e9:
e8:3e:2c:ec:94:6b:28:d9:e3:92:4c:9d:7d:2f:f7:80:17:b4:
e7:64:aa:97:47:ba:02:c2:a3:a6:f1:40:94:c9:8c:6f:2e:e8:
9a:5c:95:12:4f:97:d0:5b:d5:c2:6b:fc:f2:08:16:ff:3b:32:
fa:8a:0b:f6:9d:00:01:b8:61:40:b8:1e:86:4a:00:c8:41:38:
66:12:50:3c:e3:0b:17:99:a6:43:ef:ba:0c:e6:c5:df:9c:c3:
5d:58:ec:dd:fe:34:4c:64:2d:48:a6:8b:8d:9f:98:ac:37:6b:
55:ae:24:cd:2f:a1:92:14:ab:b2:9e:63:0f:55:04:b9:fd:34:
bf:65:12:89:24:2e:7e:ff:4a:01:b2:51:fd:9d:15:ab:a3:f8:
2c:35:a1:8c:f6:cd:87:e8:b1:8e:ae:76:a9:3a:0c:91:56:43:
61:a3:49:d7:50:6b:d1:52:42:13:0f:5b:43:2d:66:1f:f1:8c:
6c:9c:56:6f:47:43:57:3b:52:b7:ec:c3:0d:f2:a2:dc:25:7f:
05:26:21:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:12:31 2024 by rpki-client on console-fra.rpki-client.org