Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/ulzFEABpj3W4MgmEUXlVDFEnVpU.roa
File: ulzFEABpj3W4MgmEUXlVDFEnVpU.roa (raw, json)
Hash identifier: 4rTktBKhjVFWQWXeh0K3HuG8bEoz21TGjAOcfw7caHc=
Subject key identifier: BA:5C:C5:10:00:69:8F:75:B8:32:09:84:51:79:55:0C:51:27:56:95
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 018CC8DF537028C7E7E7250F376C431292D9
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/ulzFEABpj3W4MgmEUXlVDFEnVpU.roa
Signing time: Tue 02 Jan 2024 06:32:08 +0000
ROA not before: Tue 02 Jan 2024 06:32:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56962
IP address blocks: 91.242.235.0/24 maxlen: 24
212.24.121.0/24 maxlen: 24
2a11:2740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:53:70:28:c7:e7:e7:25:0f:37:6c:43:12:92:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: Jan 2 06:32:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba5cc51000698f75b83209845179550c51275695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:98:6d:f1:b8:a3:5e:a9:21:73:ba:d6:d4:
43:15:9b:ea:ab:8a:05:6d:b9:c6:b7:10:4b:23:27:
a5:00:25:9b:0f:55:4f:c5:46:c1:9f:86:fe:f5:57:
63:88:d7:64:d6:c1:5c:4d:be:ae:f6:db:7b:1d:d3:
93:53:01:70:55:81:64:48:54:f4:f4:8a:7c:b8:e9:
94:9a:cf:0c:a2:2c:b7:ba:68:7b:43:e5:2e:9c:61:
2d:c2:78:88:77:3e:6d:ce:b8:b7:cc:23:a8:96:6f:
de:b2:e2:63:8a:76:f1:e9:6f:d1:75:c9:f3:3f:c2:
d7:28:58:86:27:23:98:67:d0:9d:21:27:37:f3:1a:
1a:26:6c:dc:e6:a4:12:19:c0:b5:42:dd:13:1c:93:
35:76:3c:13:d1:19:b8:ca:ec:9d:09:d7:1d:b6:41:
e6:6b:6e:9f:81:07:44:e0:86:cb:35:a0:07:ca:30:
15:64:37:af:44:96:03:a0:1a:cc:d3:e4:d1:4c:2a:
5a:92:51:4a:28:e3:db:09:7d:8a:a3:de:70:e8:36:
8b:a9:b9:2b:2d:bf:42:79:79:98:0a:06:3c:0c:93:
c5:24:18:ef:2c:e7:9c:66:99:39:13:f9:ab:88:2c:
c5:76:ef:1b:0a:25:a0:71:db:58:5d:5c:00:aa:2e:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5C:C5:10:00:69:8F:75:B8:32:09:84:51:79:55:0C:51:27:56:95
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/ulzFEABpj3W4MgmEUXlVDFEnVpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.235.0/24
212.24.121.0/24
IPv6:
2a11:2740::/29
Signature Algorithm: sha256WithRSAEncryption
06:78:b4:35:0a:01:5c:5d:e1:c4:41:d5:81:a1:a0:9a:f2:46:
f3:38:41:1d:80:d3:64:47:24:21:19:06:e6:1c:c1:a3:80:1a:
23:1f:d2:ff:b8:9c:8c:05:44:0e:f1:f5:be:2c:55:d7:de:37:
3d:32:8c:65:97:f2:b5:e2:39:cc:06:d9:5a:5c:45:0d:6f:04:
64:5e:60:5b:d6:a2:b4:5a:db:c7:10:62:64:75:e0:fd:29:a6:
19:dc:96:bb:b2:eb:d0:dc:bf:15:79:05:34:88:4c:6a:13:64:
90:1c:96:3f:92:88:4e:cb:db:47:d9:fd:ce:b5:94:cc:8b:0e:
3c:7a:79:08:9f:c7:40:35:5c:01:89:f9:d5:ca:8b:1c:8e:8a:
2e:0c:16:28:ca:a0:d4:8f:a4:e8:2c:4e:4b:15:5d:ad:f9:11:
05:9c:9c:18:e4:bc:a1:d7:02:b7:27:01:80:85:43:3e:12:d6:
3c:32:07:a8:81:b3:96:5e:9d:43:d4:7e:d3:3e:1f:6a:1f:f8:
1b:32:ad:4e:27:0b:a9:97:34:5a:2e:63:3f:b5:20:50:74:f3:
f6:b9:58:67:ad:66:3b:f5:f3:c1:c1:e1:4d:01:3d:ee:33:6e:
fc:f6:1d:6f:72:7e:9f:91:19:a4:db:11:cf:dd:ad:a4:e1:a5:
c2:02:b4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:31 2024 by rpki-client on console-fra.rpki-client.org