Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/UAbTEqXHHqPFWZ9ZQtr6imi_hzg.roa
File: UAbTEqXHHqPFWZ9ZQtr6imi_hzg.roa (raw, json)
Hash identifier: FolJ0ZnGLJFdmW6hPIifLMhcYcbzEwYXC1acdGzA3dA=
Subject key identifier: 50:06:D3:12:A5:C7:1E:A3:C5:59:9F:59:42:DA:FA:8A:68:BF:87:38
Certificate issuer: /CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Certificate serial: 0191E1203149D21F070FE4FF283467CAEB18
Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/UAbTEqXHHqPFWZ9ZQtr6imi_hzg.roa
Signing time: Wed 11 Sep 2024 12:47:48 +0000
ROA not before: Wed 11 Sep 2024 12:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43673
IP address blocks: 91.198.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:20:31:49:d2:1f:07:0f:e4:ff:28:34:67:ca:eb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Validity
Not Before: Sep 11 12:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5006d312a5c71ea3c5599f5942dafa8a68bf8738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:c5:15:ca:55:4f:66:f6:85:15:18:cc:e4:
ff:d5:53:35:0e:28:00:0f:54:2a:7d:0e:c1:df:20:
41:71:88:90:42:3e:e3:b4:a8:7c:77:37:67:69:d5:
50:e6:52:4d:2f:96:95:da:9b:c0:69:82:6b:33:d0:
d0:ad:b1:49:f8:52:cb:d1:ae:d2:40:9f:f7:18:02:
78:b0:dc:d9:36:d4:25:56:56:11:0d:ea:fe:a5:f2:
71:9e:44:6d:36:36:13:9b:91:01:cc:18:39:10:51:
67:f9:c1:ae:fb:21:40:ed:2c:72:21:03:3c:a9:fb:
6c:69:32:96:7b:90:1f:83:81:4a:fe:e3:87:c6:16:
7e:0f:27:a9:f3:d6:b9:5d:1a:6c:9b:35:30:d1:54:
ef:ee:45:26:94:b9:e4:d6:40:a1:ed:fc:8c:9d:f6:
50:c5:4f:af:b1:74:79:0b:bd:ad:83:36:2f:2f:23:
63:eb:17:f2:ee:f1:b2:27:91:a0:11:db:9f:e0:fc:
77:82:5a:8d:6b:bf:d4:69:5a:3b:80:83:9d:4d:65:
7e:7f:5b:10:3d:ee:ac:90:99:d5:74:e8:7a:97:89:
4b:ba:a9:75:09:08:12:72:9e:4e:c9:82:00:5d:9b:
93:7a:86:eb:a2:43:85:3b:ce:b6:a0:3f:de:e3:8c:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:06:D3:12:A5:C7:1E:A3:C5:59:9F:59:42:DA:FA:8A:68:BF:87:38
X509v3 Authority Key Identifier:
keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/UAbTEqXHHqPFWZ9ZQtr6imi_hzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.98.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ae:23:05:2d:18:34:ee:1e:27:6a:26:f7:53:aa:40:c2:a7:
5c:6b:4a:02:77:ad:98:ab:d9:9e:af:7c:7e:2b:32:6d:0c:6b:
b8:de:19:8d:f0:25:1d:a4:b4:d9:23:b9:e5:dd:b4:b0:a1:69:
c0:f7:f0:77:17:74:4d:6c:31:c6:73:16:42:59:58:49:a2:5c:
21:c2:5f:f2:c4:67:a1:9b:5e:53:a0:0b:0f:d5:19:bc:2c:c1:
29:c8:4d:a2:2f:de:a4:96:0c:33:fe:64:79:9f:3e:17:f5:c4:
b0:e4:0a:be:39:e3:5e:53:50:bd:f5:24:87:de:e2:fe:fd:24:
df:94:e8:4e:ad:cc:48:da:d3:3d:3f:35:0f:c0:5a:8e:7a:23:
be:22:e9:aa:d8:b0:c2:8a:d9:4c:47:81:e8:63:05:72:6a:98:
16:ab:38:1d:19:81:b7:df:2b:79:cd:ce:8e:81:82:c3:ab:d6:
68:ad:84:c4:9a:6b:c8:f1:b8:b4:bf:54:d2:9f:33:f8:5e:cc:
ab:c2:56:29:c0:2c:01:14:d7:70:30:24:3f:91:0e:0a:a0:6c:
d7:17:6d:e0:38:c4:27:1b:55:7e:37:94:96:02:eb:c8:79:34:
12:53:46:8e:1d:a0:8b:54:cd:5f:99:d3:33:00:34:f9:f3:77:
e9:09:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:31:35 2024 by rpki-client on console-ams.rpki-client.org