Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/Uihw2v7NgzbVo4rzX88d8hmffxs.roa
File: Uihw2v7NgzbVo4rzX88d8hmffxs.roa (raw, json)
Hash identifier: D2V/gJNPSGtRlbqdf9aZrSlJwqlujgwjsslljOtBDws=
Subject key identifier: 52:28:70:DA:FE:CD:83:36:D5:A3:8A:F3:5F:CF:1D:F2:19:9F:7F:1B
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 018CC3B732EDD9EE146CA504D7B8C7D487CF
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/Uihw2v7NgzbVo4rzX88d8hmffxs.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42675
IP address blocks: 91.226.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:32:ed:d9:ee:14:6c:a5:04:d7:b8:c7:d4:87:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=522870dafecd8336d5a38af35fcf1df2199f7f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:89:25:c1:34:9a:9f:c4:72:af:e5:10:19:d5:
54:e5:bc:05:ef:09:9a:09:08:75:d3:24:98:31:b5:
5f:9a:38:f2:b4:6f:b1:06:4c:a0:af:96:35:0e:72:
e2:b2:e9:1b:66:8d:e5:be:7e:be:cf:aa:1a:f4:e0:
a8:04:7a:aa:3f:e5:17:d2:d1:a5:4a:a1:8e:ef:86:
77:8f:65:39:d6:5d:05:b2:d5:22:56:a2:8e:3e:bf:
08:be:f3:79:82:7e:ce:5d:3b:16:b2:8e:7e:94:54:
4d:26:a1:14:29:44:01:e6:7c:0f:67:73:7a:57:cb:
31:db:02:29:89:1e:e7:19:5a:5e:e1:3d:02:24:aa:
55:91:c9:a1:8d:1f:75:c6:ea:1a:ac:35:ca:f3:1a:
ea:f9:e1:07:ce:16:10:0b:e2:c7:a5:fd:03:ef:cd:
87:ce:d9:6b:22:6d:90:44:15:c4:0c:fb:b0:cc:47:
21:82:79:a3:3a:a3:6e:e3:56:8b:c1:0b:63:68:59:
46:25:9c:c3:11:a6:6d:e7:d3:ec:f2:c0:c2:4a:33:
18:fb:54:90:1d:d4:9a:87:f4:30:35:a3:80:17:86:
6a:10:5d:97:79:a6:fd:bb:e6:c5:41:b1:80:62:ae:
f3:35:f3:4f:5e:ad:ea:22:6e:d0:2f:13:19:e0:cf:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:28:70:DA:FE:CD:83:36:D5:A3:8A:F3:5F:CF:1D:F2:19:9F:7F:1B
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/Uihw2v7NgzbVo4rzX88d8hmffxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.221.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:0d:b3:03:3b:3b:2a:ac:fc:91:ea:d0:f7:e1:ae:dd:bd:69:
55:9d:62:f5:31:b2:e9:53:3d:60:50:3b:1d:19:47:08:09:01:
33:e8:2b:8c:50:02:7d:33:51:f5:f1:3b:ae:d3:b5:75:80:e3:
79:fd:d5:f6:dd:e7:be:35:5e:11:44:57:f3:41:78:b5:9a:30:
32:d8:5c:70:50:5e:e9:d6:3e:3e:0c:5c:96:db:13:2a:0e:1c:
d3:93:3c:bc:63:7d:f9:15:7a:9a:e1:11:eb:be:8f:ca:64:8f:
98:2a:34:77:96:70:2d:ad:a4:9e:03:cf:7b:fc:9e:60:89:f8:
95:a5:cc:47:b7:33:da:38:0b:9a:8c:d7:06:61:ef:5e:c4:24:
0b:33:02:e3:63:db:a2:53:da:b7:2f:11:a0:43:62:c2:c7:f8:
ca:97:69:c4:7f:a3:e4:8c:e2:5f:0f:94:5e:7c:26:9e:93:ca:
33:95:67:c5:84:a2:67:d5:6b:9d:ac:ab:20:d2:3c:46:c7:4a:
f8:88:4a:cb:ec:b7:8b:a0:68:2d:e5:44:ac:e2:e1:79:e0:3c:
7d:8a:72:96:45:be:44:d9:c9:1f:f3:2a:ba:86:20:81:9a:32:
e4:b6:ac:d4:9e:24:25:03:b9:53:85:aa:b4:12:5d:d8:65:c8:
31:3e:75:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:09:25 2024 by rpki-client on console-fra.rpki-client.org