Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0JU1K4CTH3RbnBPubP0rXDnk67E.roa
File: 0JU1K4CTH3RbnBPubP0rXDnk67E.roa (raw, json)
Hash identifier: QuxBgGrFubWYMWVahdVMNJgaEO26WWW1g10Md4xiZEA=
Subject key identifier: D0:95:35:2B:80:93:1F:74:5B:9C:13:EE:6C:FD:2B:5C:39:E4:EB:B1
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018CC56E2024B59277F4F6544C7A33B78FFD
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0JU1K4CTH3RbnBPubP0rXDnk67E.roa
Signing time: Mon 01 Jan 2024 14:29:37 +0000
ROA not before: Mon 01 Jan 2024 14:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 273069
IP address blocks: 91.109.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:20:24:b5:92:77:f4:f6:54:4c:7a:33:b7:8f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 14:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d095352b80931f745b9c13ee6cfd2b5c39e4ebb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8f:97:27:f8:83:2d:89:38:c5:39:f7:47:77:
dc:6d:d9:c0:e5:3e:9a:f0:94:05:fc:25:88:1e:8c:
33:6d:a3:de:e2:d8:2f:4f:9c:c3:35:b7:b4:5f:9b:
2d:bd:37:e6:63:96:e7:f3:4a:10:23:3d:1e:1e:5f:
13:c8:ca:23:e0:92:65:6e:54:f6:77:31:0e:95:ce:
3b:ba:c3:c5:77:53:9e:44:0b:84:30:45:c5:18:14:
fa:03:be:92:74:21:9b:0d:b0:37:1d:3f:45:ad:c4:
20:99:78:a0:08:8a:bb:f9:25:38:dd:d2:44:d6:43:
4e:c0:39:69:02:be:e3:de:2f:22:a1:cc:e1:d4:a0:
00:e5:e6:b1:5a:90:ca:c7:f3:73:92:02:e8:8d:8e:
03:d1:6e:af:a3:d7:10:41:88:b4:0b:6e:61:c6:1b:
d1:02:23:ab:09:70:b9:2d:0d:f4:8b:b6:4d:c3:c9:
6f:45:e2:32:f1:2a:22:b1:5a:81:4f:70:a8:62:94:
2a:c1:07:ca:f3:a5:ff:cb:93:4e:28:f0:5e:7f:3c:
56:0d:44:c0:58:4c:b5:1b:c4:de:a1:90:bd:58:de:
d9:a8:a8:e4:6b:01:b5:9d:25:88:ae:6d:28:5d:20:
83:a5:af:e0:75:6e:04:84:ea:62:bd:dc:11:65:f6:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:95:35:2B:80:93:1F:74:5B:9C:13:EE:6C:FD:2B:5C:39:E4:EB:B1
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0JU1K4CTH3RbnBPubP0rXDnk67E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.161.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ac:a6:cd:d4:80:6d:50:15:eb:a0:19:f7:c5:8e:1f:b3:0a:
84:e8:ae:f4:8f:a2:f1:27:ef:83:81:18:40:bb:d2:7f:c0:8e:
ae:2b:67:c2:6e:fc:76:fa:bb:29:6a:81:ae:1f:c6:69:b1:3a:
07:06:5c:4f:aa:79:ee:4b:7a:f6:89:2c:a8:7f:22:1c:20:e7:
3f:77:eb:7a:a6:0a:5a:22:a0:f8:ff:8e:76:16:87:8a:27:70:
3f:fd:c5:b5:66:29:c5:84:43:2f:9f:6b:ca:3b:2a:e4:93:16:
9d:4e:85:f6:16:93:f5:df:f3:34:21:60:b3:ea:2f:06:54:87:
a9:31:18:1a:0f:26:71:25:22:7a:00:15:01:8e:64:d2:d1:91:
39:35:bd:26:77:a7:40:b0:4e:97:df:c2:cd:dd:4e:2d:21:91:
a7:41:e9:64:80:96:f6:f6:e8:4a:ab:90:62:a5:c6:78:9d:45:
39:4c:42:ff:51:12:6f:19:d6:4c:9f:0b:2f:d4:3f:d8:28:d1:
a7:b0:67:b0:0d:db:50:1a:e4:64:6a:58:32:25:d7:66:aa:27:
1b:f4:cb:f0:20:5d:71:ec:7d:d4:02:4a:67:3c:48:de:d0:d7:
a7:42:f3:b3:f4:d5:77:6d:24:e7:0d:e0:00:ce:48:e2:78:a9:
75:ba:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:59:08 2024 by rpki-client on console-fra.rpki-client.org