Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/_UouLM5RCHVFqEODs_RaX2vsZ-M.roa
File: _UouLM5RCHVFqEODs_RaX2vsZ-M.roa (raw, json)
Hash identifier: MAyDBaIrHdBxJs+dCG0Wn4LDM7AwPiyISiqgrb8xntA=
Subject key identifier: FD:4A:2E:2C:CE:51:08:75:45:A8:43:83:B3:F4:5A:5F:6B:EC:67:E3
Certificate issuer: /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial: 018CC8DE79399CA342BB11E324898A291F8F
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/_UouLM5RCHVFqEODs_RaX2vsZ-M.roa
Signing time: Tue 02 Jan 2024 06:31:12 +0000
ROA not before: Tue 02 Jan 2024 06:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 91.102.184.0/24 maxlen: 24
91.102.185.0/24 maxlen: 24
91.102.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:79:39:9c:a3:42:bb:11:e3:24:89:8a:29:1f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Validity
Not Before: Jan 2 06:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd4a2e2cce51087545a84383b3f45a5f6bec67e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:40:a5:0c:9e:4b:51:35:09:7f:f8:67:0f:
c3:6a:05:e8:70:1d:2d:83:12:0b:f2:81:94:1c:7f:
b5:82:e0:51:01:43:ab:56:3e:ce:0b:48:33:fc:bc:
e6:e1:d8:49:33:66:5d:5a:4b:aa:6a:3a:b5:b2:ec:
93:80:12:cf:ec:b8:2f:0a:09:66:c9:dd:00:8c:ca:
cb:5e:f2:ef:59:76:a3:31:ed:70:66:b4:77:80:6c:
8e:f9:03:49:a8:13:29:8c:c4:5c:eb:31:cd:13:b2:
eb:55:61:56:64:e6:c0:49:41:e4:db:00:3b:d8:32:
8c:3d:7f:be:d2:fe:d8:8a:f7:2a:73:5f:86:7b:c0:
d7:88:bb:91:2c:ab:e7:0b:42:9c:a5:df:7b:f4:1c:
3b:26:cd:eb:2c:8a:6b:35:29:86:de:82:55:f9:5e:
9c:4e:5f:bc:45:40:80:d8:b9:92:cc:8c:e3:80:04:
6c:67:ce:b1:13:fd:15:99:6d:f8:db:61:c6:79:64:
22:6b:d7:53:68:68:74:49:a2:13:8b:f7:bd:1c:f9:
05:72:56:d5:d5:07:f6:44:6d:34:26:ec:27:43:7f:
9c:c6:c7:54:a1:50:ac:72:ff:ff:7e:cc:10:9e:f1:
f3:4b:8f:f3:e6:c6:05:c6:04:98:fc:d6:21:8f:be:
88:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4A:2E:2C:CE:51:08:75:45:A8:43:83:B3:F4:5A:5F:6B:EC:67:E3
X509v3 Authority Key Identifier:
keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/_UouLM5RCHVFqEODs_RaX2vsZ-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.184.0-91.102.186.255
Signature Algorithm: sha256WithRSAEncryption
18:e5:1f:f4:dd:a1:ad:d0:a0:0f:a9:42:42:96:4b:08:15:a8:
44:d0:53:e5:26:26:1f:6f:4b:22:3c:c6:df:95:5a:e1:e4:45:
19:ef:df:b2:30:0c:a3:b7:d1:64:13:99:61:a1:12:12:a9:92:
ca:dd:e4:a6:32:9f:5e:d7:e1:41:69:7e:1f:ad:69:31:fc:eb:
ed:2a:ef:dd:5e:9b:69:c6:d6:e3:5d:42:b4:06:3d:b2:16:a1:
e4:c6:0c:ab:89:67:fe:5b:e9:0d:f4:24:64:52:dd:8e:71:3b:
f4:82:3c:fd:ea:0d:5f:b9:73:b3:1b:4a:3e:dd:4d:c2:8a:9c:
6c:ec:81:fa:ab:27:ef:08:46:bc:47:a6:8e:97:d7:3e:6a:44:
a3:c3:00:e4:96:69:95:f0:6e:8e:46:c1:76:19:ca:b3:95:bf:
d7:a7:ad:b0:66:14:6e:45:d8:5a:e7:de:0a:8f:1c:b4:bb:77:
6a:f2:fa:de:6f:94:21:5c:e0:5b:d5:de:04:1f:f7:6d:b5:6a:
4b:17:f5:3d:c7:ef:37:6b:80:91:9f:25:33:61:d7:e3:1d:84:
44:d6:c7:b8:a2:a9:b3:bd:ec:90:4d:1a:03:2c:47:de:10:68:
f4:28:bd:d6:d2:94:fb:00:a7:a5:dc:49:36:24:0f:f6:a9:ee:
f6:78:22:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:40:32 2024 by rpki-client on console-fra.rpki-client.org