Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/Uo-ZaL6rwhdEOjT-bTUk79W-l9E.roa
File: Uo-ZaL6rwhdEOjT-bTUk79W-l9E.roa (raw, json)
Hash identifier: 4ZGpddTvgV+MC6HonswfOalN36srOx9HVrIP+htXURw=
Subject key identifier: 52:8F:99:68:BE:AB:C2:17:44:3A:34:FE:6D:35:24:EF:D5:BE:97:D1
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 018CC3B7338FE7EDCF11EB6392DB763AA36A
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/Uo-ZaL6rwhdEOjT-bTUk79W-l9E.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 91.227.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:33:8f:e7:ed:cf:11:eb:63:92:db:76:3a:a3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=528f9968beabc217443a34fe6d3524efd5be97d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:08:06:1a:c8:bb:06:69:e5:c2:8a:e7:25:
10:4e:30:32:2b:a1:a4:4f:75:05:25:44:e6:ce:5b:
d1:fc:d7:e6:c8:11:ce:dd:48:94:40:43:63:e4:ba:
e7:11:71:2e:05:57:f6:a1:31:f5:a9:ee:7b:13:51:
a5:26:f5:87:ab:d3:d9:3a:ed:da:91:29:8f:4d:fa:
a1:5a:35:d8:2a:83:61:a4:6a:bc:2a:ba:d0:f3:35:
57:46:5e:8c:03:1d:2a:22:d6:76:4c:3c:e6:65:fa:
60:7e:83:e3:d8:b7:f3:59:9e:a8:08:eb:9f:9f:0a:
6a:95:9a:1b:0c:46:ee:ec:40:8b:76:b0:93:5f:a2:
48:30:73:69:8d:59:a9:4c:2d:b3:9a:2b:0e:e9:59:
04:84:b7:68:21:04:d9:19:84:df:b3:19:89:1b:6f:
4c:d7:a9:10:5d:e9:27:03:2b:cf:90:2a:94:ad:4a:
37:53:f9:38:bc:c5:c9:25:8c:e6:1e:4a:e7:11:56:
65:d0:f7:10:61:8c:21:a0:5d:74:ff:a7:4a:0b:3f:
e5:6a:f4:c5:af:da:ea:73:a1:9b:27:b4:62:24:ca:
8d:95:17:17:0a:08:70:ca:53:8e:f3:47:24:57:b1:
1a:c5:c0:cb:da:42:dc:34:35:61:54:5e:6c:76:2b:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8F:99:68:BE:AB:C2:17:44:3A:34:FE:6D:35:24:EF:D5:BE:97:D1
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/Uo-ZaL6rwhdEOjT-bTUk79W-l9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.253.0/24
Signature Algorithm: sha256WithRSAEncryption
02:50:cd:12:31:bd:08:ac:ce:d9:3a:cf:de:c7:94:da:9d:d5:
b3:23:4c:95:0b:3b:bc:a0:05:70:3d:78:17:7f:fd:c9:e5:67:
c2:6e:5d:b0:a2:6e:05:27:0d:0f:66:ef:6a:24:37:de:00:52:
98:2f:1c:a8:cd:a6:2d:24:89:e2:b4:5c:cd:00:34:5a:8d:df:
b1:e6:af:f1:31:52:c1:df:df:b0:38:b9:2a:48:cd:72:47:02:
42:0a:d6:8c:ec:8c:72:9d:3e:d6:dd:d1:ed:fb:ad:30:dc:8a:
79:91:7e:75:49:7f:1b:a1:b4:1b:fa:b9:6f:45:77:15:f5:b9:
c7:73:e3:9a:b4:91:53:c4:b7:c9:ad:af:d8:bf:ec:b3:5b:ea:
2b:95:d0:ab:92:a1:d0:6b:72:c7:29:a5:80:63:6a:7d:76:34:
1e:8d:df:fc:a6:eb:2f:6b:bb:41:94:d8:1b:99:d9:bf:88:75:
2f:db:6a:16:19:a4:54:52:de:80:6a:d1:ac:3e:45:0c:bd:31:
12:8f:54:f7:bc:69:0d:1d:d8:c5:1f:c1:d5:01:c1:2d:78:82:
51:2f:32:bc:66:2f:e0:b2:9c:44:9d:78:a2:c7:33:3a:ef:25:
86:70:b2:48:5c:1b:1e:c9:6c:0d:fe:6b:4c:93:d9:f9:a1:13:
80:f7:b6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:54:45 2024 by rpki-client on console-ams.rpki-client.org