Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/pXsayMi-qlIrLM2EZsjZFreV-hk.roa
File: pXsayMi-qlIrLM2EZsjZFreV-hk.roa (raw, json)
Hash identifier: bgv1+yI9H0p4OnLPgm9G4E+utHqT7Ynpj6LCfe2orUw=
Subject key identifier: A5:7B:1A:C8:C8:BE:AA:52:2B:2C:CD:84:66:C8:D9:16:B7:95:FA:19
Certificate issuer: /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial: 018CC349384769832F34CECDE1B73F8A8F08
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/pXsayMi-qlIrLM2EZsjZFreV-hk.roa
Signing time: Mon 01 Jan 2024 04:30:04 +0000
ROA not before: Mon 01 Jan 2024 04:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 91.236.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:38:47:69:83:2f:34:ce:cd:e1:b7:3f:8a:8f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Validity
Not Before: Jan 1 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a57b1ac8c8beaa522b2ccd8466c8d916b795fa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:68:3b:e2:46:a7:7d:db:61:d3:17:91:31:
2f:de:91:10:da:59:e0:19:0f:fd:16:fa:89:a5:1d:
0b:14:ac:03:56:dd:33:f7:08:c5:ba:e8:b6:28:53:
e3:ce:17:01:75:a4:67:31:fc:3e:66:f9:79:e7:6e:
c5:45:44:96:39:c7:72:20:11:23:22:cc:0d:07:79:
d1:ea:93:56:54:1f:08:32:bf:72:da:f9:c4:62:52:
7f:89:98:92:cc:3b:5f:b8:a5:ea:d7:dc:54:44:66:
0a:7f:bc:3a:3d:38:ed:96:f4:cd:b9:05:b8:de:58:
b8:c3:a6:39:1d:ae:3f:e8:b2:3e:92:88:58:30:00:
a3:be:95:63:69:1d:c6:72:12:ee:e7:02:f2:22:44:
a7:18:7f:23:94:05:b2:45:68:6e:e9:08:dc:8c:15:
16:7b:52:1c:fb:6b:bf:ba:c7:6f:a8:10:e6:56:75:
7f:23:3e:13:87:1c:41:55:6a:85:85:0e:8e:1d:8b:
47:22:05:92:f3:3f:29:b2:76:57:72:6e:8c:68:a0:
dd:3a:c1:4f:c6:15:a1:9d:43:47:a7:49:ea:20:43:
71:bd:0c:7f:90:78:b7:a8:51:69:a2:ba:2c:5b:71:
79:f8:e1:58:2c:1e:ac:4b:6d:f4:ba:47:84:a8:58:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7B:1A:C8:C8:BE:AA:52:2B:2C:CD:84:66:C8:D9:16:B7:95:FA:19
X509v3 Authority Key Identifier:
keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/pXsayMi-qlIrLM2EZsjZFreV-hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:42:1b:6e:9d:77:03:dc:58:f2:69:3c:83:2f:c0:fd:38:64:
a6:fd:c2:ef:d6:41:83:e0:89:f0:2d:6b:7c:68:11:c6:15:49:
00:3b:08:57:37:ae:a7:48:ee:6f:fb:3a:a7:27:f5:ff:b7:d0:
0e:91:13:c6:16:91:47:1a:f5:67:45:ea:53:24:45:b0:27:4a:
63:f4:39:92:a3:03:20:eb:22:3a:2b:56:82:25:7e:6c:6a:6b:
75:74:64:43:37:8e:f3:18:7f:c3:ae:ed:84:74:23:b9:02:5e:
55:43:05:ba:05:21:e9:86:2f:7e:9d:fb:b3:c8:a2:f9:2e:b5:
67:80:81:88:c4:f6:d3:37:58:43:3c:4d:7d:82:21:04:8e:e0:
fb:5b:16:d5:62:fc:f9:83:bb:ba:93:4b:ff:a6:3b:51:ad:64:
ce:3f:bc:ce:86:9d:4a:7a:b8:ce:00:c3:da:30:dd:b3:60:cb:
73:7e:a3:43:54:3e:4d:5a:46:c7:3b:22:7c:77:49:8e:15:48:
7b:21:68:98:11:e4:6d:40:93:6d:c6:e0:e3:16:5e:ae:86:75:
03:2e:85:1b:b7:c3:9e:fb:19:fb:7b:c5:90:4e:69:b1:5b:6a:
5c:07:8d:9e:8b:af:19:5e:65:49:56:95:82:6e:91:66:21:6f:
a5:95:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:16:39 2024 by rpki-client on console-ams.rpki-client.org