Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/uezppMtx20TJ9hSLNKf7oDMfj7I.roa
File: uezppMtx20TJ9hSLNKf7oDMfj7I.roa (raw, json)
Hash identifier: pjoCbWNfCMy3URyM7PkgUwc2dHIRgW5Ux6bAVtpfczc=
Subject key identifier: B9:EC:E9:A4:CB:71:DB:44:C9:F6:14:8B:34:A7:FB:A0:33:1F:8F:B2
Certificate issuer: /CN=96199360259fa5b35b82953c5ed97999228341ac
Certificate serial: 018CC26CF6DE168674D28EC43175AF4424BE
Authority key identifier: 96:19:93:60:25:9F:A5:B3:5B:82:95:3C:5E:D9:79:99:22:83:41:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/uezppMtx20TJ9hSLNKf7oDMfj7I.roa
Signing time: Mon 01 Jan 2024 00:29:30 +0000
ROA not before: Mon 01 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212986
IP address blocks: 91.212.96.0/24 maxlen: 24
2a12:7cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f6:de:16:86:74:d2:8e:c4:31:75:af:44:24:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96199360259fa5b35b82953c5ed97999228341ac
Validity
Not Before: Jan 1 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9ece9a4cb71db44c9f6148b34a7fba0331f8fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:21:2a:9b:d2:a3:2e:6d:47:b7:3d:73:ff:
b8:ca:89:44:38:01:80:ca:24:71:83:da:02:31:fb:
46:06:2b:e2:85:6e:b9:8c:ba:97:4b:1f:07:07:e2:
95:72:88:93:4b:59:d5:68:fd:25:69:50:09:1d:ae:
1e:d3:c9:fd:2f:93:8d:a4:8a:78:01:d9:5d:09:b4:
ad:55:da:09:d0:5f:7c:ec:a8:11:08:b5:2b:68:c6:
70:90:bb:97:61:21:c3:8d:e8:22:7b:33:4a:29:33:
c3:e1:ba:97:1e:1f:05:14:2a:35:51:0e:b7:88:f8:
ab:45:3f:cc:bb:77:59:72:e2:7d:21:07:c0:5e:48:
28:e4:0a:8e:0d:ee:98:f5:d2:36:a9:e5:b4:c6:e8:
eb:6d:f6:5d:92:69:47:5c:ce:19:36:34:fe:56:87:
7a:42:1a:36:b8:3a:3b:0b:17:b2:50:9a:cf:1f:2c:
bc:6d:5b:0c:d5:17:56:53:13:57:1a:63:26:c5:52:
a8:18:12:c2:d9:af:7c:c0:6d:e2:ef:42:9a:0f:63:
8e:42:5f:6c:5f:8b:13:de:e7:5e:5e:9f:96:41:ba:
80:0d:83:ba:3d:98:01:80:ad:66:68:4f:b1:0a:ef:
fa:14:de:0f:1d:5b:4d:0d:bc:0d:8e:14:ff:b3:f4:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EC:E9:A4:CB:71:DB:44:C9:F6:14:8B:34:A7:FB:A0:33:1F:8F:B2
X509v3 Authority Key Identifier:
keyid:96:19:93:60:25:9F:A5:B3:5B:82:95:3C:5E:D9:79:99:22:83:41:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/uezppMtx20TJ9hSLNKf7oDMfj7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.96.0/24
IPv6:
2a12:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
c7:51:f1:22:f1:e7:a0:1a:9e:91:48:77:1b:a2:82:0b:d6:2a:
e9:6a:26:ea:14:1c:0d:68:53:fc:11:76:4a:d1:19:d9:93:a7:
75:af:18:30:56:aa:1d:ba:ad:bf:0b:16:55:21:95:a9:0e:73:
5f:65:29:a7:2c:7e:db:8f:4e:ac:a0:35:ce:c0:bf:db:48:2b:
06:91:69:b6:43:dc:47:50:2a:b2:27:d4:7f:7f:ce:40:23:6b:
db:02:df:ef:f9:9f:f6:bf:df:c4:00:0d:68:a4:7c:d7:79:09:
6b:1f:c1:72:a5:d3:44:e0:cb:cc:81:13:27:ca:a2:4f:bd:d5:
8d:cb:2c:34:c5:cf:a6:c5:1e:b3:8e:5e:ed:d3:53:8b:31:5e:
bb:cb:75:2a:dc:11:b9:bf:cc:bf:86:06:ec:82:58:e5:cd:1c:
53:ba:02:26:70:98:a4:68:db:ac:1b:b5:b9:c7:92:6d:21:f4:
28:16:d3:e3:07:6d:08:33:a4:47:1a:0f:87:b8:42:ff:57:c4:
ae:1e:3f:15:bb:62:55:c7:f7:8a:30:2e:93:56:6e:82:63:96:
59:81:56:95:28:0d:6d:54:77:c2:5f:18:c8:65:d6:4d:b2:f7:
56:af:ab:78:88:6c:13:b9:f2:b0:52:41:31:49:7b:49:64:a4:
e3:39:37:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:59:10 2024 by rpki-client on console-fra.rpki-client.org