Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/H7fXZ_4fOMDwz9esK_YgaQK3cpU.roa
File: H7fXZ_4fOMDwz9esK_YgaQK3cpU.roa (raw, json)
Hash identifier: SJZU4/kJuQeTWgve1rDiaDsrAHhSvqbLo42E9hfb7GU=
Subject key identifier: 1F:B7:D7:67:FE:1F:38:C0:F0:CF:D7:AC:2B:F6:20:69:02:B7:72:95
Certificate issuer: /CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Certificate serial: 018CC64B2E9F7D6D5945660FD73E13C35AF1
Authority key identifier: A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/H7fXZ_4fOMDwz9esK_YgaQK3cpU.roa
Signing time: Mon 01 Jan 2024 18:31:05 +0000
ROA not before: Mon 01 Jan 2024 18:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51088
IP address blocks: 91.233.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:2e:9f:7d:6d:59:45:66:0f:d7:3e:13:c3:5a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Validity
Not Before: Jan 1 18:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fb7d767fe1f38c0f0cfd7ac2bf6206902b77295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:0b:1a:22:f9:3e:23:a5:27:bc:37:b8:22:
12:30:4b:a2:87:98:d7:c6:4f:8f:92:92:f8:01:1a:
fb:28:a9:b1:73:23:a1:a4:4a:ab:53:a0:40:b5:76:
f8:67:e9:05:1e:3d:e7:25:e1:9a:8f:8c:4e:41:ac:
24:95:ad:08:ee:16:4c:7b:9e:ea:eb:09:03:fa:5b:
3d:c9:d0:f7:12:6e:2d:55:14:ad:b1:14:90:5c:d1:
9d:92:20:67:12:66:7f:7c:66:ea:32:08:40:55:fc:
5f:92:0b:db:c0:ad:14:25:3a:00:43:97:30:18:01:
f6:fd:a9:c1:fb:9a:37:2a:cc:de:98:06:82:4c:c8:
a0:19:3a:e0:51:ac:48:ee:29:31:8c:32:5f:c4:3e:
94:e3:4b:39:9a:ec:b4:c7:87:73:cf:07:27:3b:31:
4b:65:e9:36:8f:88:f2:d3:76:52:1b:46:29:80:d8:
b5:8d:93:2f:73:ba:a2:33:b9:57:8e:f2:f0:c4:3b:
79:07:0a:00:06:0f:0c:f1:f8:37:10:d3:66:46:80:
56:9d:28:4a:c0:11:74:e7:5f:2a:cb:02:e4:23:60:
55:a1:57:f8:36:4c:f5:5e:a2:91:00:0f:e3:0d:d8:
df:cb:84:c0:00:a8:0e:8c:df:7e:98:40:b0:83:57:
3b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B7:D7:67:FE:1F:38:C0:F0:CF:D7:AC:2B:F6:20:69:02:B7:72:95
X509v3 Authority Key Identifier:
keyid:A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/H7fXZ_4fOMDwz9esK_YgaQK3cpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.224.0/23
Signature Algorithm: sha256WithRSAEncryption
48:d9:91:3d:c4:c6:c2:a9:84:d3:9d:70:03:c0:bb:d2:4e:a5:
fe:a9:4b:c4:85:d9:fd:8c:4c:2c:74:7e:99:cb:19:f0:c9:47:
1b:11:36:29:99:42:2d:5c:09:97:8f:6c:e6:1f:21:08:2b:6a:
a2:3b:4b:0f:9f:1e:f6:33:a8:eb:42:a9:2e:1f:a3:05:3e:d0:
20:88:54:a1:f4:58:90:ea:dd:77:0d:12:ac:99:58:8d:61:45:
ac:18:ff:c7:53:d6:a4:4a:c4:84:1a:ee:58:1f:09:ef:03:14:
be:18:1c:e4:10:2c:6f:64:49:fd:09:57:47:c2:2b:6f:1f:33:
2b:b9:1b:7b:be:11:4f:8c:31:94:98:eb:7e:75:8d:40:74:fc:
39:d1:04:d6:6e:3d:5a:ea:ad:a2:ac:6c:72:3e:2e:1a:c9:9c:
db:7d:78:4f:13:8c:98:c1:ff:87:33:64:cb:d8:4f:90:6e:15:
ed:eb:27:4d:56:60:3b:8b:0f:b3:65:56:ab:a6:c2:ad:00:9e:
8f:2d:4a:b5:b0:25:11:59:08:41:47:ec:9d:3e:6b:ae:ed:0b:
2d:f0:c7:e0:d2:2b:75:bc:b5:5a:cd:76:0e:fd:3e:67:a7:88:
38:e5:ad:38:db:f6:1d:57:53:22:74:0a:1f:dc:07:d2:f3:9c:
43:37:43:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:51:49 2024 by rpki-client on console-fra.rpki-client.org