Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/oCIoIDnKe9sDUQ4rdq0LftoSIyY.roa
File: oCIoIDnKe9sDUQ4rdq0LftoSIyY.roa (raw, json)
Hash identifier: GMqwL/UzexMNXUPcQjSe8tF8xDmZwxc/YUEVW0869wA=
Subject key identifier: A0:22:28:20:39:CA:7B:DB:03:51:0E:2B:76:AD:0B:7E:DA:12:23:26
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018CC6B7ADC7E7F9FFBF98FCB9FFEDF2AF77
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/oCIoIDnKe9sDUQ4rdq0LftoSIyY.roa
Signing time: Mon 01 Jan 2024 20:29:35 +0000
ROA not before: Mon 01 Jan 2024 20:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26548
IP address blocks: 91.229.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ad:c7:e7:f9:ff:bf:98:fc:b9:ff:ed:f2:af:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 20:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a022282039ca7bdb03510e2b76ad0b7eda122326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:3a:e0:7f:12:ec:70:0f:d3:04:91:69:33:
c0:12:d3:e4:62:6c:e2:fe:f3:8e:65:10:93:ce:69:
00:c1:dc:1b:86:a0:95:c0:79:ca:55:b1:05:9c:b6:
b7:c9:56:ac:a0:79:9a:5e:e3:e1:80:0a:62:d5:7f:
ad:35:a3:ff:78:7b:67:4e:e8:94:a7:e1:75:fa:48:
00:16:bf:cd:fd:e0:9a:36:e7:a9:5b:a4:91:49:9f:
39:d0:65:d1:f1:01:5f:a4:65:b5:6d:de:28:59:b9:
0e:12:8d:6f:4e:1e:e7:2a:3e:4f:22:85:ff:c5:8a:
0c:6b:ca:67:c1:df:fd:e4:6a:ba:4e:f9:f7:92:51:
dd:b4:4d:fc:b8:21:6e:d6:2a:08:11:6d:26:b3:62:
2b:78:99:64:9f:db:c5:14:0b:3b:ed:81:e3:a0:84:
ef:1f:ab:61:4a:d9:b4:7d:b0:47:6f:76:5a:47:a4:
57:c7:1b:40:ec:88:05:a1:18:1d:b0:1b:03:8e:9e:
35:82:85:4a:4c:f0:ca:86:24:50:60:d8:cf:2b:70:
93:99:55:3a:ec:f1:3b:45:e3:04:ad:a7:f0:d0:9a:
a3:5f:8e:85:a2:1d:50:19:0c:92:50:bc:71:9c:61:
4c:de:6b:78:02:4a:63:7c:78:69:8f:f2:df:dc:a1:
98:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:22:28:20:39:CA:7B:DB:03:51:0E:2B:76:AD:0B:7E:DA:12:23:26
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/oCIoIDnKe9sDUQ4rdq0LftoSIyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.104.0/23
Signature Algorithm: sha256WithRSAEncryption
58:46:5f:4a:30:34:90:29:d2:e4:e6:96:3b:4c:e3:70:34:5d:
3a:8b:52:06:ab:e7:77:bc:da:89:72:08:d2:61:21:a5:eb:9f:
9f:73:f6:b9:2d:5b:d4:de:58:52:ae:6a:43:5a:84:e9:f4:55:
2d:83:3f:c1:ad:f2:ae:6b:32:81:bb:b6:07:01:5b:d4:e7:37:
82:de:20:34:cf:f6:46:ae:ad:d6:4d:53:f0:9e:0a:0d:ff:a4:
8d:a6:c6:dd:5f:a1:d9:f7:a5:7d:c7:34:f9:55:70:86:56:d2:
a2:2c:99:b8:8d:48:a1:70:a6:8c:c3:0e:a1:29:3d:aa:50:08:
dc:81:bc:4d:99:d7:24:0b:d8:40:0c:6e:bb:d2:4f:1d:d6:56:
f8:ae:29:83:9b:61:91:b9:8c:84:6d:99:52:41:fc:63:df:82:
80:a5:df:b4:9d:f4:ad:db:9f:ac:7d:62:07:db:91:ad:5a:8f:
2f:03:9c:46:fc:2a:25:48:08:f1:5b:41:37:2d:45:a1:24:d1:
5b:da:ae:48:df:8e:55:95:fb:9a:90:29:f0:78:32:a4:c6:59:
c3:c8:5a:03:91:8b:53:93:68:08:15:09:87:cd:9f:23:0a:61:
86:26:7b:b6:b7:e1:72:cc:26:62:9a:9e:d3:7b:2c:0e:c3:da:
0e:f8:f5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 22:44:20 2024 by rpki-client on console-ams.rpki-client.org