Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/uXKX8Ee-p1dJMU2bMTjTBR9OKtA.roa
File: uXKX8Ee-p1dJMU2bMTjTBR9OKtA.roa (raw, json)
Hash identifier: CB3+mQfjGV2/HLdCIKe6KPHvFa9X57G9JHqSmjZOMos=
Subject key identifier: B9:72:97:F0:47:BE:A7:57:49:31:4D:9B:31:38:D3:05:1F:4E:2A:D0
Certificate issuer: /CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Certificate serial: 018CCA2A4DD3CD3B8FF7FD2F59294600513B
Authority key identifier: B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/uXKX8Ee-p1dJMU2bMTjTBR9OKtA.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198732
IP address blocks: 91.238.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4d:d3:cd:3b:8f:f7:fd:2f:59:29:46:00:51:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b97297f047bea75749314d9b3138d3051f4e2ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cc:e1:09:be:23:b8:d1:21:d2:11:8d:bd:5b:
25:19:25:9e:2e:88:90:b1:3b:04:93:da:30:87:c2:
d0:22:f5:ff:7c:89:31:9a:44:54:d4:fe:23:28:b4:
e7:32:84:5c:cb:17:dd:9a:a3:f1:90:9c:5f:13:a7:
f2:1e:d3:ef:19:22:60:9c:04:58:c0:af:67:0a:8a:
42:a8:c0:e1:2a:5f:5f:85:a1:80:de:ed:59:5a:17:
80:d1:73:a5:05:ad:04:d9:40:68:99:c2:a8:cc:9b:
8f:97:ab:bf:cf:01:b5:6d:50:10:7c:dc:be:87:dd:
de:57:06:d0:f6:eb:8b:4e:df:63:9c:36:1e:f4:81:
fd:6f:dd:ed:43:23:ed:fd:5e:3e:48:fe:7c:d9:72:
f9:84:29:62:89:71:ff:b2:68:2f:4d:db:11:99:fd:
30:4d:14:fb:2a:54:5c:36:8d:0d:a9:26:87:3f:59:
71:35:b5:3d:73:8b:09:3a:26:0e:3f:15:ca:c6:a7:
94:6d:51:70:39:70:c1:b9:e7:c3:70:3d:93:6b:9c:
21:cf:ce:22:5d:fa:f9:ad:19:6e:66:82:94:7e:51:
b9:74:4d:03:91:86:e7:4a:79:03:8e:11:b0:9c:7f:
7b:4a:e2:7b:8c:0b:80:46:cb:ac:eb:cf:30:97:5d:
d6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:72:97:F0:47:BE:A7:57:49:31:4D:9B:31:38:D3:05:1F:4E:2A:D0
X509v3 Authority Key Identifier:
keyid:B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/uXKX8Ee-p1dJMU2bMTjTBR9OKtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.220.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7e:b1:c3:be:f2:a7:42:7b:f8:76:3e:52:ef:90:3c:e4:0e:
32:f3:6d:ed:f2:7b:3d:b5:06:c9:07:43:3d:90:6e:45:71:4d:
ba:3f:51:a0:6c:99:d6:00:01:e8:87:e2:66:88:ae:0e:21:b1:
a3:e5:55:1f:ce:8e:ab:b8:49:f3:6b:5a:25:c1:2c:43:e0:ef:
53:b5:e9:53:40:b7:d6:e8:a8:e9:cd:fd:d7:a4:65:e2:6e:d2:
e8:0e:cb:72:e2:f7:f9:7f:5e:35:8a:25:4d:21:98:68:a7:ae:
c5:3e:71:6c:9b:18:73:ff:82:fa:8a:d9:a8:e4:50:f5:3e:21:
2e:b1:fe:92:4b:a6:c2:34:2d:cb:34:4d:26:d6:65:1e:1e:00:
3d:cc:b4:ea:6b:01:1d:3c:2b:fc:58:e3:66:87:fc:a4:5c:b1:
0b:a3:c2:af:60:06:ea:bf:ee:05:e4:8c:55:14:32:14:b0:e7:
3a:ca:88:fd:90:ba:cc:bd:e5:92:96:3f:f4:50:41:5c:c4:4e:
f1:ce:25:0b:5d:49:c9:e4:c1:d4:a2:46:96:10:6f:7a:9e:99:
56:1c:56:52:47:f2:54:75:e3:8b:db:1b:9c:2a:28:b6:f4:f4:
8f:ff:b5:59:d3:3a:62:e2:d3:88:5b:66:2a:2a:e6:7f:c1:b2:
61:76:dd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:06:36 2024 by rpki-client on console-ams.rpki-client.org