Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/UsxnqQq6zTzjYHL7GT8s9rLgQJ4.roa
File: UsxnqQq6zTzjYHL7GT8s9rLgQJ4.roa (raw, json)
Hash identifier: ZfYR++49QvOqmlUx2LGRt2CqIUByxrbELPfAA5uXh3E=
Subject key identifier: 52:CC:67:A9:0A:BA:CD:3C:E3:60:72:FB:19:3F:2C:F6:B2:E0:40:9E
Certificate issuer: /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Certificate serial: 018CC94D7B70B9997E526194A459157F08B8
Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/UsxnqQq6zTzjYHL7GT8s9rLgQJ4.roa
Signing time: Tue 02 Jan 2024 08:32:27 +0000
ROA not before: Tue 02 Jan 2024 08:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43872
IP address blocks: 91.201.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:7b:70:b9:99:7e:52:61:94:a4:59:15:7f:08:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Validity
Not Before: Jan 2 08:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52cc67a90abacd3ce36072fb193f2cf6b2e0409e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5b:81:0e:6e:db:34:bd:df:42:d4:04:90:7c:
39:0a:96:eb:5b:be:bd:29:70:f7:b9:38:2a:e7:9d:
05:d6:3f:70:1e:b8:d0:12:6d:ad:41:0b:c2:88:5b:
50:77:c0:bb:ed:fd:a5:2a:b1:18:26:65:50:cf:ac:
00:3f:c7:af:82:39:2b:9d:73:7a:df:2c:a7:6a:4c:
19:1f:bc:0a:c9:7f:69:1a:68:96:52:be:f6:91:b0:
8a:b2:c0:c3:45:84:88:11:d4:da:fc:76:72:5f:04:
1f:80:8c:8a:cd:b2:ef:90:ab:1c:1a:28:b2:d5:27:
60:c8:a4:a3:4f:a5:bf:d2:2a:8b:d3:4e:a5:6d:05:
69:c5:cc:60:6c:7b:c7:80:2d:0c:3d:49:8e:92:18:
07:2e:72:94:c8:88:2a:f6:ea:86:fd:34:c5:0c:7e:
ba:25:e7:14:72:9b:bf:ba:33:a3:58:91:55:42:58:
01:9e:25:e8:d3:fd:27:86:8b:a5:10:ec:51:6c:cc:
98:fa:4b:34:64:21:87:c5:84:35:23:74:6a:ab:96:
cf:44:b3:78:a5:93:b6:eb:da:ae:08:4d:7b:d8:34:
26:a4:65:83:1e:c8:6c:54:2c:0b:10:a0:c4:73:66:
c2:54:d9:51:2b:57:b1:00:35:3e:50:f8:03:c4:24:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CC:67:A9:0A:BA:CD:3C:E3:60:72:FB:19:3F:2C:F6:B2:E0:40:9E
X509v3 Authority Key Identifier:
keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/UsxnqQq6zTzjYHL7GT8s9rLgQJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.105.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fc:3f:6d:71:f4:77:a8:05:c4:c6:d2:8f:5a:33:7f:ae:5d:
2e:30:77:ba:b0:5d:b3:c6:17:c4:6b:38:8c:aa:19:b0:6d:43:
80:3a:09:f3:11:2f:dd:7b:8f:cf:17:c9:07:8a:07:3f:64:dc:
d0:49:c1:ff:2e:c7:af:b6:d4:75:79:30:ec:a0:80:59:3b:fa:
d5:a0:3c:19:d3:71:d0:14:35:68:0b:3e:ae:9b:9b:14:d6:04:
e2:4d:ce:29:6c:bf:7f:9e:24:0a:16:ff:a9:f3:08:b0:86:a8:
ea:8a:5d:b4:f3:30:32:3c:64:9f:3d:7c:1b:ce:14:1c:6a:a2:
db:7d:10:90:d5:4e:c4:e3:45:8d:af:3d:1e:12:f3:7c:d9:7a:
68:8a:73:2f:33:39:f6:3b:6c:95:f0:76:ac:8f:b7:ba:9c:06:
e9:ff:d5:c2:51:9d:c2:a8:f7:cc:5d:33:db:12:6e:a9:87:9a:
8c:cf:7e:7c:48:11:3c:30:30:e9:24:e2:7e:f8:78:41:ba:4b:
8e:a7:a9:fa:20:28:ca:90:0d:82:1f:f0:e8:e5:1d:9c:ff:69:
2c:f7:e4:52:50:02:34:d1:38:7e:35:26:32:5e:b6:cf:6e:8d:
09:f1:2e:13:60:27:c6:18:5b:7e:90:e3:db:ce:f6:29:e5:08:
6c:8c:d5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:42:16 2024 by rpki-client on console-ams.rpki-client.org