Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/91hslGFlI72WiY5wQe5F9ICLD2M.roa
File: 91hslGFlI72WiY5wQe5F9ICLD2M.roa (raw, json)
Hash identifier: HQhoAXfH1KoRIOv0/rlbgiW0WV8f0/rSqd7QCZ3SQ7c=
Subject key identifier: F7:58:6C:94:61:65:23:BD:96:89:8E:70:41:EE:45:F4:80:8B:0F:63
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 018CC94E36218BAF2CBB067D05BFB8436E98
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/91hslGFlI72WiY5wQe5F9ICLD2M.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52468
IP address blocks: 81.199.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:36:21:8b:af:2c:bb:06:7d:05:bf:b8:43:6e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7586c94616523bd96898e7041ee45f4808b0f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:9f:e2:03:37:25:b7:eb:bc:79:ac:a8:5e:
83:17:a3:3f:2e:9d:ce:c1:f4:88:f4:d1:98:b8:11:
25:69:f6:1e:25:31:8f:49:a4:77:8f:ab:1a:35:65:
af:5d:0b:6d:ea:1c:0f:bc:0e:c3:63:22:46:28:fb:
bb:be:3d:3f:ad:63:c0:16:82:fa:ff:9d:0d:f3:20:
12:14:70:47:35:cb:5c:00:6d:75:c1:a9:6c:6e:2c:
ad:ff:2f:16:c7:da:b2:0f:76:cd:1b:86:06:2f:cd:
fe:22:76:fc:84:cd:76:38:c3:1b:9b:ce:2b:56:f9:
d6:5a:a8:92:35:30:42:a0:ce:50:61:26:52:1c:0d:
21:07:96:06:13:64:17:63:82:4c:3e:90:fc:15:01:
31:b2:07:8a:51:fa:ee:a7:1a:d7:da:ff:b7:ca:91:
33:91:50:82:1a:5a:3b:7f:7a:40:b3:c9:57:32:c2:
c3:89:68:83:b2:ef:a5:6a:1a:b0:da:39:2a:c1:e2:
e2:be:32:4a:6e:d8:88:8e:10:81:9b:9f:74:33:1e:
d9:59:5f:02:f7:02:f6:59:8d:0d:36:c0:bb:3c:0e:
85:14:87:d4:eb:38:58:92:1c:83:7d:07:87:64:26:
df:99:2b:c8:33:2b:be:f6:17:39:a9:e0:c1:08:e6:
0f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:58:6C:94:61:65:23:BD:96:89:8E:70:41:EE:45:F4:80:8B:0F:63
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/91hslGFlI72WiY5wQe5F9ICLD2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.115.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:fc:4e:d4:eb:98:c1:86:28:4e:a4:5b:57:c5:21:51:8b:f8:
6e:1c:74:7e:ba:24:9d:ae:30:49:fb:b6:29:32:2b:dc:83:1f:
3c:29:ba:00:ba:4c:6f:ae:d9:4d:0b:0c:ca:cb:08:47:45:27:
a8:61:c4:78:47:47:94:2c:53:f6:09:ad:f7:f0:51:c4:ab:13:
0b:e2:30:b2:42:c1:3d:06:05:c3:67:a6:3c:e4:9d:84:ee:a1:
45:14:a4:9d:c6:87:34:1c:02:3c:01:8b:13:38:ee:78:98:d1:
fb:1c:c9:bb:17:ea:79:b1:82:98:fe:44:53:a4:19:34:51:a7:
bb:1e:3d:9c:16:94:9b:07:6d:0e:90:26:b5:c6:d8:cc:fa:ac:
9e:b6:59:f9:80:2e:98:b3:8a:8e:fe:6e:fa:71:2a:70:58:53:
60:28:40:aa:d5:f4:f9:1b:dc:94:68:04:bf:b4:c8:01:e0:8f:
90:8f:71:4f:dd:d2:79:40:43:09:2d:50:bd:73:a3:14:f4:ea:
c6:88:90:de:7b:c3:59:85:29:87:a2:2b:c9:75:1a:0a:47:ba:
de:b8:d8:54:17:ff:c3:49:57:57:f5:fc:54:d2:52:c1:88:33:
0d:67:99:7d:e2:27:64:d6:6b:84:89:43:7e:ed:c9:53:26:25:
81:70:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:33:33 2024 by rpki-client on console-ams.rpki-client.org