Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/8p5cCOtwawpUsaw4yCDZEZEB8A4.roa
File: 8p5cCOtwawpUsaw4yCDZEZEB8A4.roa (raw, json)
Hash identifier: +rLyUspWLMMa3XGuyhA/iTmGW5HutdWRBJJNWjY3dYU=
Subject key identifier: F2:9E:5C:08:EB:70:6B:0A:54:B1:AC:38:C8:20:D9:11:91:01:F0:0E
Certificate issuer: /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial: 018CC6B784B990C46085AD9B9E9DA96CA413
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/8p5cCOtwawpUsaw4yCDZEZEB8A4.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29397
IP address blocks: 91.224.240.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 10:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:84:b9:90:c4:60:85:ad:9b:9e:9d:a9:6c:a4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f29e5c08eb706b0a54b1ac38c820d9119101f00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0c:da:5c:73:e7:66:45:a9:0d:53:c8:ee:3a:
b4:cd:61:3f:fc:2d:07:35:f8:b3:53:13:26:ee:4d:
c9:9a:10:16:b6:fc:29:74:7e:d2:8f:8a:fb:c9:d1:
33:87:c5:b7:57:25:75:2d:fc:2d:8b:10:7e:4e:6c:
46:9e:aa:3c:a2:7c:8a:53:01:8f:5e:5a:44:b9:31:
98:b8:61:91:62:d7:ef:f7:87:a1:f7:06:79:3f:e5:
41:19:3b:d1:b5:a9:26:9c:db:95:43:e9:69:c0:fb:
dc:3e:3a:06:6a:77:71:fb:69:dd:1b:12:7f:43:a6:
14:35:0b:28:27:37:e6:aa:92:94:4d:04:24:32:47:
d7:1a:d6:b1:e1:45:79:33:31:fb:1c:25:cb:1f:03:
74:93:5f:3a:b9:50:35:54:8c:b4:d1:19:ee:e8:cf:
63:7e:64:dc:c5:73:c5:1e:75:e9:7c:c3:e3:54:82:
af:1d:20:e0:d1:59:bb:83:fb:7c:f2:a1:20:d8:ca:
65:3a:4e:2d:37:85:fd:4f:8e:d5:da:29:e5:fa:e3:
30:af:e3:eb:25:e8:b9:5f:1d:6a:72:6b:7d:e2:f8:
d9:77:a9:56:0f:98:ae:45:42:1c:9e:89:29:8b:cc:
52:3c:47:e4:e2:6c:a7:40:12:0a:0f:85:46:da:7c:
ab:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9E:5C:08:EB:70:6B:0A:54:B1:AC:38:C8:20:D9:11:91:01:F0:0E
X509v3 Authority Key Identifier:
keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/8p5cCOtwawpUsaw4yCDZEZEB8A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.240.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:ca:1b:ef:9a:a8:8c:55:94:1a:5b:7d:67:c2:da:4c:b6:9f:
bd:ac:7d:c4:b3:98:33:fe:be:0a:0f:84:32:12:02:80:83:7b:
a8:2c:26:26:de:55:bd:24:93:27:2f:f0:28:e5:27:22:d3:3b:
20:e3:cb:bb:c2:9f:d1:27:9d:2e:89:4c:0e:bf:3c:32:6f:b3:
2f:da:58:c6:f7:e9:f8:27:7d:8f:4f:fd:b3:4a:3b:ea:48:d6:
b5:87:0d:78:04:8c:40:8e:85:d9:3d:b4:b8:d6:83:3f:7b:9f:
06:2a:0b:f6:6b:bd:d3:68:e0:bc:43:97:31:6b:26:45:92:4d:
f1:34:f6:d5:b0:17:a3:77:cb:30:ef:66:23:1a:c4:8b:60:f1:
e3:9d:40:29:37:d6:80:0a:5d:af:7f:81:03:a0:64:60:12:55:
7c:94:7d:ae:d5:c3:0b:6d:6c:0a:55:da:f3:f3:a4:36:a8:e4:
95:d5:98:de:3b:2b:a5:96:bf:1a:b3:c3:6b:d8:ac:eb:0f:a8:
58:e8:5c:91:e4:f8:22:9d:3c:37:f7:a1:06:ce:c8:35:f5:7d:
9e:de:5b:1e:b5:a7:8c:bd:0b:35:fb:70:0e:fc:ba:ba:b4:9c:
70:5b:50:41:a0:a8:7e:0c:cb:77:0a:e0:91:bd:90:53:32:4c:
45:d5:58:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:06:51 2024 by rpki-client on console-fra.rpki-client.org