Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/H8RJfYofQhSGm7OSSSDAfbeRCGg.roa
File: H8RJfYofQhSGm7OSSSDAfbeRCGg.roa (raw, json)
Hash identifier: UGb8v8Vo2+nrZ8gb0c6gmM2XVkM1R5J6tasjgbU34lc=
Subject key identifier: 1F:C4:49:7D:8A:1F:42:14:86:9B:B3:92:49:20:C0:7D:B7:91:08:68
Certificate issuer: /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Certificate serial: 018CC493013E764872707A6D1D110CD395EF
Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/H8RJfYofQhSGm7OSSSDAfbeRCGg.roa
Signing time: Mon 01 Jan 2024 10:30:17 +0000
ROA not before: Mon 01 Jan 2024 10:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49636
IP address blocks: 91.213.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:01:3e:76:48:72:70:7a:6d:1d:11:0c:d3:95:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Validity
Not Before: Jan 1 10:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fc4497d8a1f4214869bb3924920c07db7910868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0a:a4:b0:67:a4:fa:e1:8d:e1:d2:4a:17:62:
da:6a:e7:22:b2:96:67:02:e0:e4:50:34:97:25:79:
f7:81:d3:8b:14:26:db:99:f6:b7:8c:d3:63:2c:3d:
c6:99:3b:30:c7:5f:1f:cf:29:6f:c1:14:7b:f7:fd:
5b:6e:54:b9:de:50:71:83:f8:ab:db:62:68:0e:58:
0e:57:7c:c4:a9:59:2c:35:92:09:c4:9d:d4:ee:2c:
92:4a:c1:46:8e:ce:ea:e3:0c:b6:c0:fe:72:bd:22:
93:6e:d0:a0:59:bd:23:08:2d:d9:0a:ba:c1:f0:97:
ee:b5:f0:9a:ba:c7:64:ad:7d:6c:0f:8e:86:e3:75:
02:b1:fa:d2:ce:32:58:f8:5c:22:2f:e7:a3:d6:aa:
d8:f4:dc:3e:66:e0:d9:dd:ee:82:68:4d:ff:5e:b9:
5a:55:b2:97:b6:e7:91:ab:7e:eb:d4:13:d3:a6:b2:
4d:9e:e0:89:fc:94:e8:a5:b9:8b:5d:e1:5d:d4:22:
c3:78:36:6a:b6:a5:a4:56:8c:0b:d4:47:1c:06:01:
e3:90:09:fc:11:90:6a:a4:9c:03:18:88:b2:ff:00:
1f:b7:a5:90:ff:fd:26:b7:fc:5e:87:c8:f8:38:75:
aa:3f:ae:b3:a6:4c:b6:fe:c5:99:80:8b:a1:07:5f:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:49:7D:8A:1F:42:14:86:9B:B3:92:49:20:C0:7D:B7:91:08:68
X509v3 Authority Key Identifier:
keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/H8RJfYofQhSGm7OSSSDAfbeRCGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.80.0/24
Signature Algorithm: sha256WithRSAEncryption
39:73:fb:24:87:00:fa:e4:f0:65:a0:62:7a:62:5c:66:cc:71:
d4:e1:93:d8:aa:1c:25:d4:e6:ad:4f:91:9e:db:8f:e2:11:fd:
0a:b4:31:9d:d6:8f:4f:a6:18:b5:2f:b6:14:af:3f:a3:22:79:
8e:26:9c:f6:aa:e3:f8:cf:35:f6:14:be:40:9a:45:a2:c9:15:
68:86:03:48:25:0e:8c:28:e3:2f:46:29:46:24:eb:51:f4:e8:
e1:8a:12:3d:46:88:9e:88:75:d6:15:34:a3:43:d6:90:d1:0f:
24:9b:2f:c2:ed:07:a6:bb:4b:cc:6d:df:dd:d9:11:9c:f3:d0:
e6:75:15:f6:3f:1c:ea:13:d6:b3:16:95:e3:45:e3:03:76:b3:
41:3d:30:09:80:68:66:f4:94:47:63:13:53:2d:2d:8d:67:d1:
32:2f:e1:fb:24:8a:9e:3d:84:21:cb:bd:6d:45:2b:44:23:57:
e5:53:a3:0c:b9:ef:f5:f2:1f:cc:b4:cc:26:aa:00:67:74:de:
58:5a:8f:c1:12:83:53:fc:2a:80:86:67:7d:22:c1:3a:07:5e:
51:3e:2f:09:ee:fb:1c:ee:2b:cc:a5:1b:30:3d:b9:c1:4a:59:
5b:2d:9f:6d:f8:ce:8d:2d:81:0f:da:9a:9d:72:fa:cb:fc:df:
98:e9:49:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:21:14 2024 by rpki-client on console-ams.rpki-client.org