Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/hdFltZAU-rwNZnYdLRngpgTECRg.roa
File: hdFltZAU-rwNZnYdLRngpgTECRg.roa (raw, json)
Hash identifier: XwzEXl1Tl4/0EEuDXlM5jWy553lD6O2N2wY+pzifrHo=
Subject key identifier: 85:D1:65:B5:90:14:FA:BC:0D:66:76:1D:2D:19:E0:A6:04:C4:09:18
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 018CC42495E34F3F9A636A5FCC1218548828
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/hdFltZAU-rwNZnYdLRngpgTECRg.roa
Signing time: Mon 01 Jan 2024 08:29:41 +0000
ROA not before: Mon 01 Jan 2024 08:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203897
IP address blocks: 91.229.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:95:e3:4f:3f:9a:63:6a:5f:cc:12:18:54:88:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Jan 1 08:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85d165b59014fabc0d66761d2d19e0a604c40918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b9:5b:df:7a:1a:b3:39:03:56:85:cb:8f:92:
4c:66:61:5e:e3:79:da:e9:a6:63:16:79:ee:2e:3b:
ee:69:83:ba:10:85:f2:d2:48:2e:77:22:89:8a:78:
19:90:c7:04:80:31:75:16:f7:0c:45:76:81:5f:0d:
ac:73:08:8f:b3:df:eb:cc:99:64:a2:b7:5b:7e:a6:
d6:27:1b:e4:1b:27:0c:8c:95:48:67:4b:6a:02:a1:
3e:e3:c6:57:dc:44:9c:35:7b:fd:82:f1:ee:7e:8e:
80:ea:49:01:00:1d:dd:43:1e:44:dd:64:fc:03:ec:
0a:61:51:31:f2:ae:04:b7:e5:68:23:d3:dc:08:e8:
7e:64:c0:c8:ca:be:43:14:37:61:89:9b:33:c1:d4:
6d:5d:ba:36:a6:85:11:61:6b:32:f4:9b:f9:82:b2:
5c:e0:de:1f:eb:24:b3:db:f6:88:39:36:37:7c:5c:
fd:ee:e9:ed:dd:6d:61:af:6c:d1:cc:c0:67:88:99:
65:97:2b:79:64:63:35:40:b1:44:92:81:6b:5e:6d:
ef:0c:88:96:2f:a4:1e:71:e3:6f:3c:ab:7d:70:fc:
28:f7:2d:0a:55:53:c1:1d:eb:09:fa:42:67:af:99:
15:6f:02:88:0d:65:e8:65:be:a1:6c:32:df:e3:aa:
2b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D1:65:B5:90:14:FA:BC:0D:66:76:1D:2D:19:E0:A6:04:C4:09:18
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/hdFltZAU-rwNZnYdLRngpgTECRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.124.0/24
Signature Algorithm: sha256WithRSAEncryption
22:5d:5a:85:89:3c:51:50:2c:c4:82:46:80:5d:ee:2f:8e:d3:
0f:6d:36:5e:e6:6f:30:8c:26:74:28:db:d5:23:2a:29:4f:16:
b6:16:55:10:10:9a:4e:03:a6:83:3c:7c:8c:5c:21:35:42:ea:
a5:09:30:c9:18:b6:fe:b4:71:7f:bd:ce:d7:51:aa:e7:49:fe:
bd:87:1b:1e:4e:eb:67:1e:b2:96:80:f6:97:c3:00:28:3d:7b:
68:e3:97:9e:e3:99:b9:d7:2a:3f:22:54:42:cd:b4:59:7f:bc:
3f:86:25:20:64:59:20:c8:d0:2a:84:13:a2:a3:89:db:3c:07:
d5:d9:35:37:20:1b:4c:40:25:1e:88:82:43:7d:be:12:8e:9c:
cf:dd:3f:56:57:b6:6b:16:89:16:55:4f:ba:e7:d8:c9:6f:26:
cd:79:d5:e6:7e:1c:94:fb:0a:56:fe:ab:4a:5f:9d:78:1a:73:
4a:7f:21:17:33:30:b1:c3:a5:4f:93:b7:53:f1:83:f7:33:0d:
f9:a6:d6:af:ea:a9:2f:59:70:2d:67:e3:a3:68:77:67:fc:18:
e7:8b:98:a9:39:be:1e:09:d1:9a:6a:c1:8c:f4:fa:5a:5a:1a:
ff:4b:47:16:92:81:bc:ee:2f:4b:fb:54:cb:d6:69:19:20:bd:
09:59:d8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 18:57:44 2024 by rpki-client on console-ams.rpki-client.org