Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/uI19goGgOdv56r27gyNLoOu7fK8.roa
File: uI19goGgOdv56r27gyNLoOu7fK8.roa (raw, json)
Hash identifier: aRMcCZp6MU/f16sSAZBSSpBFMChXSvZTJUWHCtQ3+qI=
Subject key identifier: B8:8D:7D:82:81:A0:39:DB:F9:EA:BD:BB:83:23:4B:A0:EB:BB:7C:AF
Certificate issuer: /CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Certificate serial: 01942067FCC900D0DD7B44ADD082F2858D94
Authority key identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/uI19goGgOdv56r27gyNLoOu7fK8.roa
Signing time: Wed 01 Jan 2025 05:47:53 +0000
ROA not before: Wed 01 Jan 2025 05:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39704
IP address blocks: 91.208.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fc:c9:00:d0:dd:7b:44:ad:d0:82:f2:85:8d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b88d7d8281a039dbf9eabdbb83234ba0ebbb7caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ce:b5:fa:61:0a:88:4d:14:2e:5f:00:41:7a:
2e:16:01:7e:4b:a9:88:9a:c0:3e:57:7c:74:8b:36:
9f:6a:5e:7e:20:44:96:88:63:de:39:75:71:77:24:
ea:49:13:c1:59:f3:1a:2e:44:a6:8f:9e:e1:94:c0:
6c:7c:a5:68:10:64:68:93:9b:c9:27:5f:18:73:53:
8b:bb:77:a7:eb:18:0c:e0:7a:73:46:4b:85:9b:a3:
ba:23:21:34:77:8a:a8:e7:e6:5a:07:09:1d:9a:ae:
e5:1a:d2:f7:e5:25:31:87:77:2f:9f:b1:78:5a:26:
1c:d7:d4:50:ac:4f:88:8f:92:3a:fd:8a:a1:ca:e0:
31:5b:33:e6:48:23:9a:c5:de:6b:91:7c:54:3b:4d:
a5:9a:57:6f:bb:36:70:65:b3:9e:73:54:57:65:05:
d4:f4:f2:18:35:e4:8e:fd:2d:c4:e6:15:7d:b8:f1:
21:14:b1:57:b3:83:85:b3:f6:57:89:42:4d:07:69:
43:9f:9b:33:19:24:9c:d2:a7:01:3a:e7:bd:4b:e6:
08:ec:04:2a:c9:9f:b4:42:e0:04:75:64:95:79:d4:
cb:20:7e:06:9f:c1:b1:5c:3d:6e:c6:17:50:45:ac:
f5:3f:8c:6f:bb:65:2e:71:34:1e:17:9a:fc:6b:2f:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8D:7D:82:81:A0:39:DB:F9:EA:BD:BB:83:23:4B:A0:EB:BB:7C:AF
X509v3 Authority Key Identifier:
keyid:78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/uI19goGgOdv56r27gyNLoOu7fK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.60.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:60:db:da:17:50:c2:f6:31:00:0b:7e:75:01:32:03:f4:ec:
07:9c:6c:b3:4a:9f:60:7e:c8:19:03:f8:f4:a7:c1:80:c8:4c:
70:1d:77:b9:78:9e:96:dd:82:e7:96:91:83:ea:1e:ab:c4:7a:
ac:de:93:de:4d:42:e0:ef:11:6c:82:fa:27:4a:4a:e4:eb:61:
4a:eb:be:fa:d5:ba:8a:d6:c8:77:87:d8:f3:bc:e4:60:52:40:
db:fc:5b:a9:f4:ec:bb:b4:bc:db:50:42:e5:54:f1:7b:9e:86:
dc:12:c6:44:c7:0a:71:65:4f:3b:09:6e:34:b5:b1:84:33:ca:
e1:45:16:29:65:ea:9a:1a:be:a6:ee:fa:8c:9d:25:b6:45:d4:
67:b8:f3:59:c8:e7:88:ef:75:0b:9e:51:6f:95:77:49:9f:8b:
08:55:30:aa:0e:7a:b2:9b:7c:8e:15:8c:73:8d:b8:1a:3f:09:
c4:ec:bb:ed:cf:6f:d6:4d:59:40:f9:12:7e:89:e9:56:f4:16:
d1:65:82:8e:74:06:e6:0b:25:64:53:f6:b8:32:ff:21:e5:31:
3e:25:59:d8:64:e2:ff:4d:e3:b0:b1:74:1a:d1:d1:f6:11:65:
bc:ae:a8:f9:d1:83:be:25:12:bd:bc:a4:b5:75:83:4c:c7:f2:
7a:bb:0e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:18 2025 by rpki-client