Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/DY99eaji8NtHKGo3yuiSQ-5VHsc.roa
File: DY99eaji8NtHKGo3yuiSQ-5VHsc.roa (raw, json)
Hash identifier: f40QwNpaax+h56CpPEw1wCqAJMFiD2QVYavqTtlwOdo=
Subject key identifier: 0D:8F:7D:79:A8:E2:F0:DB:47:28:6A:37:CA:E8:92:43:EE:55:1E:C7
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 018CC8DCD9B45CDD90619A9EAA4DB9AEBF3B
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/DY99eaji8NtHKGo3yuiSQ-5VHsc.roa
Signing time: Tue 02 Jan 2024 06:29:25 +0000
ROA not before: Tue 02 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61243
IP address blocks: 91.250.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d9:b4:5c:dd:90:61:9a:9e:aa:4d:b9:ae:bf:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d8f7d79a8e2f0db47286a37cae89243ee551ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:d1:ff:38:c7:99:b3:46:3c:d6:03:94:3f:
af:5f:ae:63:69:91:94:e2:6f:b9:b6:19:fe:f5:e8:
2c:83:8e:d2:87:b1:82:84:99:e3:fb:b3:da:c8:a3:
3a:9c:e3:9a:53:3b:b5:0a:8b:f4:51:21:f0:5a:74:
37:03:1f:b1:23:30:4a:bb:64:3e:f5:33:7e:0e:fa:
18:31:24:5d:12:21:92:b6:ae:8e:e1:65:bc:b7:2d:
02:3b:38:f3:ea:cd:fd:d4:de:43:08:b6:ea:16:16:
dd:ce:dc:76:33:4f:66:84:f7:bd:b3:0c:e8:31:91:
7f:e1:74:79:41:38:03:49:bc:be:08:62:49:a9:75:
cb:8d:c8:01:9d:37:59:55:79:90:5c:0b:ee:55:06:
94:c6:f5:45:19:53:14:31:a0:6b:26:7f:da:5f:eb:
d9:1a:85:f7:64:dd:21:6c:43:10:0f:ce:8a:60:8d:
95:e0:cb:6d:88:5b:dc:4e:fc:ed:10:49:2f:9e:ae:
ad:3e:99:d8:84:bb:d9:ed:4d:a3:7a:0d:9f:b3:51:
46:df:15:a9:f4:7c:42:79:b6:2e:2b:97:f4:3a:d6:
13:8a:23:65:7b:c3:6e:20:70:d7:aa:f9:2d:13:f6:
6d:8f:31:93:b1:04:ed:2c:38:72:53:d7:41:28:52:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8F:7D:79:A8:E2:F0:DB:47:28:6A:37:CA:E8:92:43:EE:55:1E:C7
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/DY99eaji8NtHKGo3yuiSQ-5VHsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.252.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:3e:2c:be:b4:2c:f8:0c:15:e2:47:e2:83:fc:65:1e:95:dd:
42:4a:b9:e6:59:b8:3b:2f:7c:10:30:8b:d8:7b:21:2d:41:74:
a2:f3:4f:15:41:60:44:88:61:4e:47:7e:1e:6e:50:e7:9d:b3:
fb:b8:91:70:36:d8:bc:05:3a:88:c4:0b:98:4a:96:fc:11:18:
31:4f:35:e5:0c:46:db:07:2d:0f:aa:88:d1:95:e9:fe:8f:88:
e5:9e:f8:3f:c2:db:b3:a7:a1:c9:c9:ec:25:6c:c7:3f:fa:3a:
17:db:0b:3a:30:86:a7:3b:20:13:47:20:01:94:3f:82:b6:ba:
44:fc:34:8e:8b:6b:82:50:1f:3a:76:90:fc:68:bf:23:82:53:
6e:b1:da:a1:4a:12:f0:2f:d9:70:eb:d0:e6:f7:4f:55:ac:f9:
05:b7:69:30:75:a1:18:d0:18:42:30:68:75:df:04:fa:2f:04:
85:32:4a:74:01:22:1a:a9:26:98:97:96:5f:47:6c:13:cc:ca:
85:4f:3c:6f:1c:a0:ff:73:6f:bb:a9:a6:ac:ec:ab:b8:6d:5c:
d2:63:26:e8:4d:2f:0b:23:43:66:5f:7b:3c:6b:f0:91:d2:d8:
9d:62:36:4d:97:53:1a:49:0a:80:12:76:d5:4f:54:28:30:19:
a6:57:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:58:21 2024 by rpki-client on console-fra.rpki-client.org