Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/U1PSqWUMnsIi6Z6KyLtNfkSmzXE.roa
File: U1PSqWUMnsIi6Z6KyLtNfkSmzXE.roa (raw, json)
Hash identifier: uIxW96EOBiPQuW8osJUFESeMrt8Hy0vfHJsHBn+DQSs=
Subject key identifier: 53:53:D2:A9:65:0C:9E:C2:22:E9:9E:8A:C8:BB:4D:7E:44:A6:CD:71
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 018CC50038FA297F889B0D43A4EA6B45A7AE
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/U1PSqWUMnsIi6Z6KyLtNfkSmzXE.roa
Signing time: Mon 01 Jan 2024 12:29:35 +0000
ROA not before: Mon 01 Jan 2024 12:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208468
IP address blocks: 91.135.177.0/24 maxlen: 24
91.135.176.0/23 maxlen: 23
91.135.176.0/24 maxlen: 24
91.135.188.0/24 maxlen: 24
91.135.188.0/23 maxlen: 23
91.135.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:38:fa:29:7f:88:9b:0d:43:a4:ea:6b:45:a7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Jan 1 12:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5353d2a9650c9ec222e99e8ac8bb4d7e44a6cd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:16:99:3d:23:e4:a9:8d:0c:59:93:f6:b9:37:
6e:41:3e:ce:61:e4:91:d4:3a:7a:44:81:9c:dd:3c:
e1:68:07:63:93:45:c1:73:9c:c5:91:5f:25:33:bb:
04:5e:62:39:ed:5e:a1:89:4c:58:d6:73:d1:4e:bc:
9a:a2:1f:6c:fb:10:f5:b2:f2:12:bd:10:cf:9a:f7:
17:21:f7:f9:e0:5b:a7:29:fb:ab:64:c7:3e:8b:db:
d2:c0:10:02:bb:a4:a7:75:89:20:55:e8:0e:ae:23:
19:b6:3f:8c:99:b2:6a:ca:fb:34:82:41:02:aa:e2:
5b:af:1b:66:2c:5e:57:09:03:49:a0:14:57:cc:b5:
7a:80:58:a2:06:06:45:29:f1:bd:ac:4d:c0:5f:32:
d1:c7:37:31:18:e8:68:87:69:fd:21:e5:19:4a:cb:
d3:16:f9:4a:67:17:39:b8:85:0f:3d:bf:b2:5c:04:
79:49:ce:cf:7b:60:37:b5:75:ab:9d:3c:99:94:11:
33:d5:da:55:5a:4e:67:37:b9:97:c3:a8:8f:0a:1b:
f0:98:4a:43:1b:bc:8b:0d:58:f9:1c:2a:80:fc:ea:
71:3c:f3:fa:e7:8f:14:f0:a4:11:e9:10:0a:e2:1c:
c3:cb:08:0b:53:be:6c:07:d7:f8:ea:b4:20:c9:52:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:53:D2:A9:65:0C:9E:C2:22:E9:9E:8A:C8:BB:4D:7E:44:A6:CD:71
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/U1PSqWUMnsIi6Z6KyLtNfkSmzXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.176.0/23
91.135.188.0/23
Signature Algorithm: sha256WithRSAEncryption
84:a8:7e:f8:a0:75:c8:4b:ff:fe:61:62:b5:0e:f2:9a:97:18:
18:4f:7b:e3:c9:58:d3:56:00:38:ba:bf:37:87:e6:71:6e:bc:
f1:33:a7:4e:17:93:44:02:12:05:7c:f7:a9:d8:b4:8d:ed:90:
19:27:a6:b5:f8:ac:70:79:a1:a5:a1:e4:c7:97:ac:5b:2b:25:
d3:26:59:f9:7d:03:b1:89:19:46:a9:31:be:e6:4d:ab:42:68:
82:aa:2e:6d:a3:26:fa:83:17:d7:f8:16:6b:73:ac:0e:b8:de:
8f:8a:78:b5:35:63:cb:5b:9d:47:ee:81:cc:17:c8:67:c7:ad:
24:2b:be:c8:fd:19:d9:5f:be:0c:a9:67:50:4d:31:70:05:ce:
96:89:3e:ef:4c:d6:d5:5a:57:20:e3:7b:59:c3:03:e4:47:f6:
ed:9a:b6:09:06:a3:be:ba:42:cc:d7:ae:49:ec:10:c7:33:80:
80:07:a6:ad:e3:2e:09:a2:ce:28:a7:4a:47:b2:57:43:e4:21:
b5:5b:1d:d3:7f:9e:84:01:3a:c0:1e:94:90:3a:7a:34:93:98:
78:32:cf:92:12:70:1e:38:38:c7:ed:73:96:ee:9d:b2:b4:ad:
f5:f9:42:01:5e:51:36:a4:54:03:a7:a3:7a:c8:3e:28:9b:a3:
30:bd:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 10:29:35 2024 by rpki-client on console-fra.rpki-client.org