Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/JI4EqV7JahadsWKZ3qBsRHwJ-_k.roa
File: JI4EqV7JahadsWKZ3qBsRHwJ-_k.roa (raw, json)
Hash identifier: Y/sByGfQI5WUZDQyWWpgA2RiiOeBWRNyzS5KdYdEA3M=
Subject key identifier: 24:8E:04:A9:5E:C9:6A:16:9D:B1:62:99:DE:A0:6C:44:7C:09:FB:F9
Certificate issuer: /CN=e140a047c8b30adc6d9ee326a669dfd011d9b5d3
Certificate serial: 018CC56E2F40216641615BA38AD5FBBAAEA2
Authority key identifier: E1:40:A0:47:C8:B3:0A:DC:6D:9E:E3:26:A6:69:DF:D0:11:D9:B5:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UCgR8izCtxtnuMmpmnf0BHZtdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/JI4EqV7JahadsWKZ3qBsRHwJ-_k.roa
Signing time: Mon 01 Jan 2024 14:29:41 +0000
ROA not before: Mon 01 Jan 2024 14:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 91.132.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/4UCgR8izCtxtnuMmpmnf0BHZtdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/4UCgR8izCtxtnuMmpmnf0BHZtdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UCgR8izCtxtnuMmpmnf0BHZtdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2f:40:21:66:41:61:5b:a3:8a:d5:fb:ba:ae:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e140a047c8b30adc6d9ee326a669dfd011d9b5d3
Validity
Not Before: Jan 1 14:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=248e04a95ec96a169db16299dea06c447c09fbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:19:7e:c7:d0:9e:b8:d1:a0:a3:cd:d4:e6:ae:
f7:04:57:04:67:98:c9:9b:88:12:7c:8e:af:70:c7:
ed:67:ab:9e:7d:fa:c2:f2:24:b9:4b:1d:4c:20:5d:
9a:3a:6d:b5:83:b1:d0:72:5e:3a:05:0a:92:9b:8f:
01:79:01:dc:7e:b3:9c:a8:a0:77:eb:1f:ab:fd:da:
d0:4b:72:2e:6d:15:8c:11:d7:63:bb:d9:67:b1:90:
ad:8e:00:80:46:2b:ba:9c:40:3a:5f:6c:3d:9f:e3:
a0:9c:d5:7e:f0:33:d7:31:5d:d9:f1:f2:02:ab:40:
8b:ff:07:0f:86:83:2d:44:92:b8:3d:9a:82:3d:55:
6a:9d:8b:18:b1:62:31:fb:37:f0:1f:01:ed:bc:d1:
37:8a:d6:71:f8:f2:50:c5:fe:4c:08:a5:97:e9:61:
1e:47:b4:39:f1:d3:d8:e0:16:fe:e9:26:45:18:64:
ef:bc:b3:2a:24:ec:9f:6e:70:46:47:a2:a4:2a:fb:
58:f9:ae:95:13:cb:2c:ea:00:d9:ab:d3:a3:dd:84:
a3:ef:36:79:5f:eb:18:57:fe:60:db:6a:53:1c:73:
00:ff:61:f3:72:5b:40:0a:af:40:9d:3a:8f:12:e5:
62:de:e4:82:74:b0:a4:a7:54:09:2c:e6:be:a6:7a:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8E:04:A9:5E:C9:6A:16:9D:B1:62:99:DE:A0:6C:44:7C:09:FB:F9
X509v3 Authority Key Identifier:
keyid:E1:40:A0:47:C8:B3:0A:DC:6D:9E:E3:26:A6:69:DF:D0:11:D9:B5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UCgR8izCtxtnuMmpmnf0BHZtdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/JI4EqV7JahadsWKZ3qBsRHwJ-_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/4UCgR8izCtxtnuMmpmnf0BHZtdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d2:8f:b8:ea:67:17:48:50:df:60:de:3d:a5:27:45:a7:df:
2c:d7:ce:20:d6:3c:d7:16:14:4f:fb:f6:6f:45:eb:f1:aa:f3:
01:e6:d2:34:b4:9e:d0:73:d2:c0:e6:99:92:27:14:a7:cf:b5:
f3:bf:39:d7:e2:14:a4:8f:a1:af:95:e4:4c:d5:2a:11:cf:08:
79:f2:71:13:cf:42:f0:e9:6d:43:53:46:ee:04:3d:4a:1e:61:
b6:c3:0c:e2:e5:40:b4:d3:6a:4e:aa:14:7a:2a:3d:5f:85:67:
3c:58:c4:3f:c6:ba:03:43:03:b7:21:19:1d:87:1a:cd:69:53:
79:8d:5c:3a:be:a0:23:31:f4:2a:3d:b8:a4:6c:d2:61:b6:2c:
67:96:2e:f5:04:78:84:7c:d1:ba:ea:d1:bb:b7:cc:0e:98:2b:
5c:f3:60:c5:03:ff:6a:e9:0f:45:3f:5b:a4:d0:c8:90:39:08:
b9:7c:b2:9e:ed:c5:d3:30:df:d4:d3:75:cd:45:2e:76:fb:a8:
cc:76:0f:5b:b5:f5:e1:5d:e7:4f:e3:5c:67:43:f2:df:46:45:
71:7a:13:3a:5f:9d:f9:8d:0e:90:37:35:5d:c0:ba:96:d2:1a:
72:cf:21:43:0d:a1:f0:ed:cc:e2:c1:0a:14:b1:9a:33:6a:31:
73:fc:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:12:56 2024 by rpki-client on console-fra.rpki-client.org