Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/8rr5MVRPucM3C2YQxyB74DT4h90.roa
File: 8rr5MVRPucM3C2YQxyB74DT4h90.roa (raw, json)
Hash identifier: SZa+MtG0FFtflm4B8rl9dZwQz3MH8IIY6pNzvy3i7Rc=
Subject key identifier: F2:BA:F9:31:54:4F:B9:C3:37:0B:66:10:C7:20:7B:E0:34:F8:87:DD
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 018CC4253E2E5B733F58D9A9C25508C6D174
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/8rr5MVRPucM3C2YQxyB74DT4h90.roa
Signing time: Mon 01 Jan 2024 08:30:24 +0000
ROA not before: Mon 01 Jan 2024 08:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208783
IP address blocks: 91.213.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3e:2e:5b:73:3f:58:d9:a9:c2:55:08:c6:d1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Jan 1 08:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2baf931544fb9c3370b6610c7207be034f887dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:5d:d8:2c:4f:99:77:2c:ab:8d:e4:a6:42:
cf:5d:cf:0a:bf:77:e1:0c:14:84:be:12:59:de:5f:
d5:32:17:17:9d:9f:60:ac:db:87:bb:1d:6f:f9:e1:
01:d6:c8:2f:49:d6:96:f8:c8:11:63:1a:88:60:6f:
76:2e:1b:44:1d:ef:ff:81:fc:b0:27:8f:cf:5e:40:
0f:3c:58:ea:67:46:0f:26:f5:9a:f9:5f:c2:1a:51:
f4:2f:44:2b:81:fc:c0:75:21:e9:47:3a:2c:98:1a:
45:c3:5f:e8:90:b9:1f:2c:e2:31:20:ad:62:12:23:
b4:f5:15:cf:f8:23:15:9d:45:08:57:76:d3:a2:07:
7e:fa:0b:7a:5e:5c:ce:3a:ac:bc:08:a6:58:e5:42:
7e:3a:a2:72:83:2e:2a:66:94:dc:ae:46:05:96:98:
f9:48:2a:25:ab:45:0f:20:01:61:08:72:c0:a6:97:
10:96:63:52:cd:9a:0d:a4:4e:c5:5f:88:54:37:8a:
47:72:71:97:6b:ce:12:8a:80:44:eb:67:32:5d:a0:
65:0c:d9:26:5c:c9:9c:4f:78:be:15:b5:99:f7:96:
b3:50:b0:8a:d2:c3:a9:3b:92:88:72:7a:e0:73:30:
67:fc:e2:28:90:d7:7f:e2:01:5c:d6:de:31:0f:80:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BA:F9:31:54:4F:B9:C3:37:0B:66:10:C7:20:7B:E0:34:F8:87:DD
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/8rr5MVRPucM3C2YQxyB74DT4h90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.251.0/24
Signature Algorithm: sha256WithRSAEncryption
62:78:02:0d:3b:d6:90:c0:24:49:cc:0b:e8:9d:5d:8b:6a:bf:
a9:2b:29:75:a1:f6:7d:ec:6d:3d:a3:2f:9e:f0:03:4a:93:07:
4d:94:2b:d4:d4:6f:66:aa:ce:41:6b:13:c9:f2:2e:ee:04:a9:
54:2d:57:a6:dd:cf:03:d6:db:29:24:10:59:d9:a1:64:e4:ac:
55:93:eb:47:94:89:f2:65:89:1d:18:05:d6:3a:23:1a:57:31:
a7:f5:e9:8e:5a:cc:4d:3d:e0:1d:69:ad:3b:9b:da:7a:50:c0:
49:84:b5:0c:ad:40:f1:4e:fc:4c:5d:9d:35:2e:4c:46:a4:1a:
85:d6:17:6e:4c:f4:30:61:45:74:ad:5a:df:3c:16:ad:ea:47:
61:88:71:c1:d0:2a:eb:54:59:7f:c5:80:2b:e1:e5:47:de:fe:
9e:a3:99:a2:7e:29:a7:79:c9:9a:1d:79:4d:1f:14:6f:8a:c7:
28:c7:a5:75:b5:b3:15:31:f3:9d:0b:dd:8b:1c:79:68:a2:a2:
c3:c4:a7:92:1b:56:bf:cc:cc:44:38:be:cc:4d:fa:85:b7:8d:
98:86:ee:66:dc:94:f8:5f:80:39:8f:6a:c2:6f:9f:2f:e3:08:
ab:cd:4a:46:6e:fa:84:c7:5e:50:ab:8c:48:96:9e:6c:8c:ec:
13:27:ff:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:36:57 2024 by rpki-client on console-fra.rpki-client.org