Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/0mFctPOEYJE8S7RGaayiOrEU8c8.roa
File: 0mFctPOEYJE8S7RGaayiOrEU8c8.roa (raw, json)
Hash identifier: hwTHY/B7fVxmCuhxA9wy4f3xn5f9RIJzVAcHV8BiCRQ=
Subject key identifier: D2:61:5C:B4:F3:84:60:91:3C:4B:B4:46:69:AC:A2:3A:B1:14:F1:CF
Certificate issuer: /CN=ed54b2e75935531278e7bad157c48c8aec43eee8
Certificate serial: 018CF39D7D8DC555BDC6BBA5E301EA2ACBC1
Authority key identifier: ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/0mFctPOEYJE8S7RGaayiOrEU8c8.roa
Signing time: Wed 10 Jan 2024 13:43:53 +0000
ROA not before: Wed 10 Jan 2024 13:43:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2119
IP address blocks: 91.228.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:9d:7d:8d:c5:55:bd:c6:bb:a5:e3:01:ea:2a:cb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed54b2e75935531278e7bad157c48c8aec43eee8
Validity
Not Before: Jan 10 13:43:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2615cb4f38460913c4bb44669aca23ab114f1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:01:e6:f2:bb:46:44:58:a7:14:c8:8a:48:2b:
3a:db:33:89:2c:7f:2d:68:40:84:88:be:91:1c:f0:
ae:35:a2:52:4f:92:c5:2b:0d:74:74:74:e1:fe:70:
83:71:a2:ee:8f:bc:8e:f2:37:00:63:72:22:5a:ad:
8a:b5:b2:01:55:14:53:49:84:19:92:cf:98:4e:55:
9d:35:fa:c2:f3:e5:17:08:a6:f5:53:b8:1d:cb:86:
50:ac:56:c7:1d:7b:cf:a4:81:e4:0c:7a:c2:ac:99:
78:03:98:6e:b9:b1:86:a8:98:ff:08:19:46:5b:10:
b9:c2:3e:89:18:df:30:3f:0c:3f:25:f3:be:fd:a4:
a3:6c:9c:ac:aa:7d:0b:12:06:58:70:06:2d:a3:6e:
09:fb:d5:e5:b5:56:92:8c:90:42:58:02:ee:50:cd:
95:a4:f7:f5:75:e3:65:24:16:61:50:3b:49:48:c4:
5c:0f:58:bf:05:20:11:d8:d7:77:de:f4:ab:cd:5f:
41:49:51:3c:b6:77:5a:c9:fb:ec:e5:85:17:ba:ec:
1d:79:58:78:a2:8d:6d:a6:6f:90:e2:bc:0a:db:85:
58:20:f8:d5:84:e3:1f:bc:71:74:1d:dd:b7:46:c6:
cb:ef:5d:c9:3f:89:65:e9:65:b0:62:51:da:ec:f6:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:61:5C:B4:F3:84:60:91:3C:4B:B4:46:69:AC:A2:3A:B1:14:F1:CF
X509v3 Authority Key Identifier:
keyid:ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/0mFctPOEYJE8S7RGaayiOrEU8c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.214.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a3:32:53:fc:45:c3:fc:5a:fd:97:75:0f:5e:5d:ae:2b:55:
c2:63:06:7f:c2:38:62:77:18:d4:01:f3:d6:bf:91:3a:3a:74:
f3:2d:b5:df:8a:90:0f:b7:59:6f:a5:3f:8f:d5:78:95:18:a6:
b3:4b:ba:56:d3:dd:e6:f0:85:f3:ce:49:78:6f:6c:33:29:54:
b5:da:6d:cc:77:26:dd:2c:5d:9a:96:b7:b9:5f:d9:33:1a:f2:
21:10:a7:5a:58:3c:a5:61:1d:41:c9:fa:0d:c3:4f:45:39:42:
eb:f5:29:37:e8:4f:6f:da:99:c7:96:09:60:91:c4:81:95:07:
3f:71:9c:0f:21:f9:5a:a8:70:1b:ed:8b:c8:31:ad:a3:81:43:
76:74:95:a2:c6:8c:08:5c:b8:aa:c4:02:87:d0:8d:85:48:61:
d1:e1:40:15:31:87:e2:c6:32:8f:b5:66:f8:bc:61:60:64:87:
25:85:9f:31:e2:22:d3:fd:41:2c:30:fa:ee:2f:f5:6d:a0:a9:
91:e5:2d:5f:47:45:dd:88:a8:42:b5:72:97:0b:d5:60:11:d2:
ac:f8:8e:81:0c:6c:9d:89:6b:a1:6a:8c:90:f8:2e:18:03:76:
5d:a3:2f:a3:c4:db:e8:6e:08:35:86:c2:53:4a:e6:b0:44:ac:
84:d4:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:51:59 2024 by rpki-client on console-fra.rpki-client.org