Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/x5DauiVUXZbukOzsTXguflZilXI.roa
File: x5DauiVUXZbukOzsTXguflZilXI.roa (raw, json)
Hash identifier: 04LQNWK9xcFynKlpcV/3oA1Hlr5AnoUYfr+Cj3mJA3g=
Subject key identifier: C7:90:DA:BA:25:54:5D:96:EE:90:EC:EC:4D:78:2E:7E:56:62:95:72
Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial: 018DF3CA7588033CC602D202BD08E9867A92
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/x5DauiVUXZbukOzsTXguflZilXI.roa
Signing time: Thu 29 Feb 2024 07:35:48 +0000
ROA not before: Thu 29 Feb 2024 07:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51101
IP address blocks: 91.237.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f3:ca:75:88:03:3c:c6:02:d2:02:bd:08:e9:86:7a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
Validity
Not Before: Feb 29 07:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c790daba25545d96ee90ecec4d782e7e56629572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:71:24:3d:4d:30:e6:88:c5:1e:d0:2c:8f:
ce:8b:46:1b:8b:56:20:5e:bb:90:aa:02:c3:42:6c:
f9:f9:91:fb:5f:99:c2:93:ad:e8:79:58:c3:4a:8f:
ad:4f:af:e1:52:57:06:a6:f6:f5:9b:c9:75:d3:72:
ff:7d:70:46:5c:61:5f:ea:a3:cb:17:0b:a4:75:13:
71:3d:19:24:8f:52:e8:18:2f:6f:0b:1b:1c:88:cc:
5d:67:85:79:cc:f4:27:b6:ce:e7:c9:17:2d:ac:cb:
4b:3b:ca:a2:13:42:9d:aa:51:db:00:14:cf:fe:69:
06:94:ef:64:37:1c:a6:c5:f0:8b:53:37:3a:f6:b8:
78:d7:d6:8a:77:3e:34:a7:02:8c:b8:e8:85:6b:1d:
07:d3:3e:f5:31:4b:7d:eb:94:fb:51:bd:d6:68:81:
5a:f4:1e:f9:1e:ed:4a:e1:29:93:f5:c1:20:dc:a8:
74:af:e7:05:0e:b3:9b:c9:1a:60:49:90:8c:50:ce:
f4:c3:2d:07:93:3a:a8:6d:0e:50:74:a5:e8:3f:3c:
dd:d3:d5:f1:1b:6f:73:98:df:fe:b0:78:60:60:8c:
6a:f7:5e:eb:ef:59:b6:0a:3e:36:02:1e:75:ec:71:
34:69:23:d5:42:a1:26:c4:66:98:f2:c3:b0:91:9a:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:90:DA:BA:25:54:5D:96:EE:90:EC:EC:4D:78:2E:7E:56:62:95:72
X509v3 Authority Key Identifier:
keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/x5DauiVUXZbukOzsTXguflZilXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.72.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:74:43:72:98:26:6a:f4:98:4e:23:7a:1f:3b:fc:81:b3:1b:
6f:db:3c:06:9f:ba:ac:e8:e2:90:67:ac:b2:fa:97:d8:dd:fc:
1c:b2:09:4c:8f:7e:56:1d:1f:44:8b:a5:c1:9f:a0:08:41:57:
09:b7:c8:6e:9a:e4:16:21:87:2f:3d:84:4c:40:52:f0:c7:3a:
9e:89:7b:ae:29:50:95:71:4e:02:9f:ef:ec:9c:93:34:ae:c4:
bd:46:05:b8:f5:4e:b3:b2:6c:77:b2:64:bf:f5:8f:f5:db:37:
1f:13:7b:24:a7:bd:36:21:c8:c7:6a:48:d0:2b:81:0c:d7:8b:
e1:1c:f7:a7:86:23:43:5f:25:f0:1f:0b:6b:47:a2:36:ff:41:
ae:9f:5f:d4:c4:c8:6a:eb:45:f1:cc:16:43:aa:b3:93:ed:ec:
c7:53:5f:56:02:87:58:6d:25:f1:73:9b:52:69:81:9c:22:10:
b4:a7:e5:bb:95:d7:db:15:9c:5a:2e:99:3a:a5:69:1d:0e:2c:
70:90:c7:00:4e:12:d4:5f:76:89:6d:f2:e9:d7:4d:4f:b3:ff:
cc:68:d1:76:c2:ef:47:c4:f7:cd:0a:4b:fe:30:d8:a0:34:dc:
a6:c2:bb:19:a5:b6:fd:a1:9e:13:9c:9d:5e:91:c6:57:28:2a:
b1:19:ce:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:12 2024 by rpki-client on console-fra.rpki-client.org