Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/C8zPWK5lo-aR-ZACBytIrevAjS8.roa
File: C8zPWK5lo-aR-ZACBytIrevAjS8.roa (raw, json)
Hash identifier: dUforf/wQNMmUCQt2bL884iMpxnRNpaGzWXvx9Lo0xs=
Subject key identifier: 0B:CC:CF:58:AE:65:A3:E6:91:F9:90:02:07:2B:48:AD:EB:C0:8D:2F
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 018CC3B6F14146B309D55B8435C8CCE07084
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/C8zPWK5lo-aR-ZACBytIrevAjS8.roa
Signing time: Mon 01 Jan 2024 06:29:55 +0000
ROA not before: Mon 01 Jan 2024 06:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44591
IP address blocks: 91.199.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f1:41:46:b3:09:d5:5b:84:35:c8:cc:e0:70:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Jan 1 06:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bcccf58ae65a3e691f99002072b48adebc08d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9e:8b:92:c2:85:05:75:0f:2a:11:ab:f0:af:
73:e5:af:d7:ac:37:5e:d5:84:8d:89:a0:9a:56:56:
48:f3:f9:f7:5a:ac:9a:a5:a2:c4:e8:85:c8:a8:d1:
15:bf:29:ab:98:0d:20:7c:fa:0d:59:90:3d:ca:5d:
3e:0b:bb:10:a5:c9:3b:f4:38:d9:5c:cb:cf:c4:32:
71:c9:90:95:fe:b3:9b:19:2f:e8:7f:14:21:7d:de:
87:3a:b2:e6:3a:20:3e:86:cf:71:c5:a0:45:33:e5:
23:36:b5:70:7b:28:cf:02:57:7c:56:8d:2b:19:2c:
cf:5c:e2:6b:d4:b9:27:9d:98:9c:2f:19:73:22:2f:
e5:14:a0:69:5d:a8:83:c3:62:54:21:d3:80:5e:6d:
b6:11:bc:7d:89:20:34:7e:8a:f5:f8:e7:e8:53:e0:
2b:a4:42:ef:ac:60:f7:07:d7:08:84:80:61:41:7f:
7d:24:49:28:dc:59:d5:97:ad:0f:ff:07:b7:a0:73:
c9:03:27:b1:10:55:bc:e1:85:f1:0d:63:37:a7:bc:
02:3b:6c:f6:57:01:d6:ef:0a:cd:50:ab:7b:ed:a1:
06:e2:cf:f3:94:97:6b:2d:a7:44:d0:89:8a:25:37:
7a:8b:de:7a:d9:55:a4:d7:9e:92:dc:4b:8a:3c:4c:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CC:CF:58:AE:65:A3:E6:91:F9:90:02:07:2B:48:AD:EB:C0:8D:2F
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/C8zPWK5lo-aR-ZACBytIrevAjS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:40:53:97:85:1b:7d:5c:46:49:c1:66:70:72:86:1e:85:61:
44:15:8a:df:7a:89:b1:46:d0:4e:c5:21:35:5f:0f:c1:3d:42:
0d:16:28:54:20:5e:10:1b:49:c2:97:c7:36:4b:07:84:46:a9:
7e:b9:ec:83:88:a2:15:1a:a9:dd:94:74:ac:33:a5:ab:0a:95:
1a:65:e2:7c:86:63:65:6c:cc:31:d5:f2:ab:c4:d0:e2:82:c3:
53:af:d2:f9:a9:51:9c:68:81:f5:2c:a8:50:b5:8e:a7:65:00:
d4:34:6b:64:c3:a4:a4:98:cb:6c:07:09:35:3a:f4:f9:ae:2d:
d3:99:08:7e:3f:b3:1f:b9:84:e0:af:6d:3c:14:7a:a5:fe:fb:
df:b2:ef:79:a8:71:58:dd:d2:98:65:5e:32:8f:00:9a:ce:01:
89:d7:84:71:b9:d1:28:a2:c7:61:4c:9a:a0:24:4a:2e:1a:72:
f1:61:9d:85:30:cf:c1:84:2b:de:64:d2:45:8a:50:c4:90:b5:
b6:69:33:b4:98:32:f9:05:4f:95:f2:80:52:c4:5a:a1:75:5b:
2e:d6:cb:07:8d:44:e0:e7:bc:6e:27:85:d9:bb:f3:99:05:94:
10:ad:31:1c:f5:9d:2c:57:e9:b9:f1:b3:4b:ad:9e:c2:8b:a7:
20:88:0f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:53:57 2024 by rpki-client on console-ams.rpki-client.org