Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/_hiZ704kvsA4HFAjaSul7sh5OpA.roa
File: _hiZ704kvsA4HFAjaSul7sh5OpA.roa (raw, json)
Hash identifier: Y1V4bBH/ixCgTjTe7lvatipN2jxHBC7svovX4gfxxGw=
Subject key identifier: FE:18:99:EF:4E:24:BE:C0:38:1C:50:23:69:2B:A5:EE:C8:79:3A:90
Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial: 018CC794324FA6590F248A6AD26F21EF183D
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/_hiZ704kvsA4HFAjaSul7sh5OpA.roa
Signing time: Tue 02 Jan 2024 00:30:27 +0000
ROA not before: Tue 02 Jan 2024 00:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57773
IP address blocks: 91.198.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:32:4f:a6:59:0f:24:8a:6a:d2:6f:21:ef:18:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Validity
Not Before: Jan 2 00:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe1899ef4e24bec0381c5023692ba5eec8793a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:50:a3:f0:1b:e2:4e:27:52:9b:e0:37:2e:
12:2f:13:fd:8e:f9:c2:2c:ae:59:3c:96:23:7e:c0:
53:3c:40:37:0f:bf:e0:85:f0:e9:7b:4d:d8:53:28:
45:aa:59:a0:ff:66:a0:b4:b8:65:ee:81:ef:f5:f5:
48:ed:e3:0d:00:38:f0:23:ce:39:01:bf:4e:f2:36:
71:55:a3:1b:8d:c1:d9:a6:f2:78:46:fe:c8:ea:7a:
8e:b3:9c:48:5f:2f:47:95:78:f8:9f:d3:b2:40:68:
79:22:7b:9b:99:97:fe:f9:e5:14:39:09:cd:7a:9a:
bf:1e:7b:84:ac:1f:27:24:6e:30:08:a2:ce:c2:55:
27:23:b4:07:18:a8:57:85:99:0f:0f:8d:7a:af:5d:
f2:e7:a0:4e:7b:98:8c:89:28:74:f8:60:a4:48:69:
b7:f4:e6:b5:92:a2:86:ab:98:44:e7:2d:d6:38:52:
d6:de:ad:6c:33:eb:2b:48:3f:cc:ac:63:db:c3:a2:
56:27:47:91:a6:b4:24:aa:4a:75:c2:2a:58:d1:1a:
5a:1e:bf:b8:ce:2f:bd:72:de:3d:a9:6a:eb:7a:19:
74:e8:b1:33:70:94:e5:4b:aa:a9:9e:50:22:d2:6f:
c4:44:fa:41:e1:14:47:7e:86:8b:03:d9:a1:09:0c:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:18:99:EF:4E:24:BE:C0:38:1C:50:23:69:2B:A5:EE:C8:79:3A:90
X509v3 Authority Key Identifier:
keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/_hiZ704kvsA4HFAjaSul7sh5OpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:5b:d3:17:e7:75:c6:63:bd:f2:0c:7d:e8:f7:0e:8d:3f:ef:
79:61:ba:64:aa:af:4e:6e:9d:fd:ff:34:68:d3:6e:d0:f4:22:
38:9b:7e:4a:01:7b:d0:cb:89:e9:92:92:65:be:f1:a2:73:f3:
de:27:b2:c6:c4:d2:a5:1c:34:ab:0b:1e:54:3d:65:89:53:4d:
45:52:4f:79:02:79:c1:e5:76:83:a7:cd:bb:53:fc:c0:1e:9c:
4e:fa:32:c0:c4:83:96:19:4b:21:22:9b:90:b4:f1:bf:0c:40:
c1:2e:60:95:f0:4d:bf:d7:78:0c:cc:f3:04:7b:36:d2:5d:83:
df:47:76:32:e3:60:14:7d:f5:d5:89:72:87:a6:06:a4:89:20:
88:59:82:ea:03:e3:f5:65:03:03:db:c1:bf:27:4f:67:dd:43:
02:cb:2c:ee:00:9d:a0:a0:18:3a:39:10:9b:2d:46:9c:27:a3:
2e:44:e1:d7:18:10:f7:b7:00:23:ef:9d:c0:c8:d2:b1:d6:ab:
26:e1:89:a1:60:81:a1:98:25:3e:8a:23:f0:d3:3e:97:af:b2:
59:e1:57:90:1f:ff:b3:bc:ec:55:63:a9:8c:05:95:07:45:a7:
25:11:a4:6a:b1:f3:29:a1:ee:cb:12:73:cc:a2:2a:f0:44:85:
53:f2:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:30 2024 by rpki-client on console-ams.rpki-client.org