Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/hI24mTvCMuh85081Nx1C31jyVpQ.roa
File: hI24mTvCMuh85081Nx1C31jyVpQ.roa (raw, json)
Hash identifier: DbhjSA9r60lp1mBwkfuaVXtj1kHZaBFPD9BGBSzhED8=
Subject key identifier: 84:8D:B8:99:3B:C2:32:E8:7C:E7:4F:35:37:1D:42:DF:58:F2:56:94
Certificate issuer: /CN=a1020772f628b8fb51f3475136b77feb4b2698be
Certificate serial: 018CC9BCF2AEF0660E5C38674F3965BAB85F
Authority key identifier: A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/hI24mTvCMuh85081Nx1C31jyVpQ.roa
Signing time: Tue 02 Jan 2024 10:34:12 +0000
ROA not before: Tue 02 Jan 2024 10:34:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43566
IP address blocks: 91.199.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f2:ae:f0:66:0e:5c:38:67:4f:39:65:ba:b8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1020772f628b8fb51f3475136b77feb4b2698be
Validity
Not Before: Jan 2 10:34:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=848db8993bc232e87ce74f35371d42df58f25694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:ca:11:b7:93:06:c5:44:fb:e9:32:d9:ed:
f2:ef:15:1a:79:c5:5b:5d:b0:1e:38:54:26:16:16:
c3:e1:d9:81:93:3a:71:a8:4b:7e:4e:35:49:8c:86:
2c:9b:cf:e3:dc:e4:e6:a5:fd:d5:5b:71:5e:5c:f8:
cc:d6:0a:3d:20:e5:4d:82:8c:48:a0:9b:ed:ba:17:
a2:c7:65:c7:a1:1c:25:92:88:54:28:29:a8:d6:b5:
97:69:32:1b:44:f2:ea:6c:e9:44:9c:d3:0e:b6:5a:
32:ac:6b:50:b3:7a:9a:25:f5:8b:d0:bd:39:db:52:
aa:c6:44:95:79:67:ef:ae:a7:45:6a:a9:27:64:f7:
8e:a4:aa:ae:4d:47:5e:06:c6:85:e4:81:c0:04:e0:
93:df:84:ae:8f:5a:ce:7e:8d:f2:f0:d3:b2:92:b8:
10:4e:1b:fb:a5:d5:3d:12:ba:42:20:a3:3a:49:35:
87:12:9a:1c:5d:60:50:a7:c7:8c:82:93:56:c7:94:
de:d8:21:ff:1d:70:d7:64:8a:31:f9:d9:83:9c:7a:
b2:de:d6:7d:4a:58:ab:03:af:65:1e:97:28:cc:11:
a7:57:a7:2a:f0:51:26:d4:de:87:ad:58:97:f0:45:
e2:b7:d1:39:e5:d6:5d:ca:45:db:84:68:f6:9e:07:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8D:B8:99:3B:C2:32:E8:7C:E7:4F:35:37:1D:42:DF:58:F2:56:94
X509v3 Authority Key Identifier:
keyid:A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/hI24mTvCMuh85081Nx1C31jyVpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.83.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b8:f8:7f:ae:6b:a1:26:f7:de:87:7b:be:7e:2f:13:b2:da:
ee:6d:a4:50:db:61:73:32:ba:3f:c2:5c:d6:51:65:0c:c0:ab:
0b:31:01:8b:2c:50:54:84:f4:36:a9:8f:26:58:af:be:83:df:
ea:8c:8e:8e:e9:e1:0f:0c:e3:75:ab:c9:f3:c3:61:28:e5:25:
a9:fe:fe:5b:c7:4a:54:01:26:4f:af:62:7f:2f:68:68:57:71:
df:5d:ae:87:dc:eb:f5:52:a1:0e:72:b8:db:2f:19:8f:7f:e3:
a8:1e:a9:df:4e:67:a3:63:ed:ac:2e:dd:99:45:3e:40:f9:dd:
51:fb:7a:64:f2:e0:e4:5f:79:69:d7:b0:46:aa:ef:7c:74:eb:
3c:db:25:42:67:26:87:86:e8:97:f1:14:82:42:95:7e:47:fb:
8b:08:d2:a6:1e:b5:c5:47:31:db:6d:27:a5:7b:2e:be:fc:cc:
e2:42:9c:f1:ca:3a:ed:7b:22:6b:9a:26:ce:1e:86:c4:c8:bd:
f9:80:41:d1:0f:78:fb:d0:78:de:6e:26:e9:ac:dc:d6:c7:4e:
f2:c3:96:04:b6:33:18:0a:28:39:2f:ba:cd:09:bc:97:d5:9b:
b4:09:0f:ba:67:42:aa:ec:ea:8d:3a:d7:8b:96:81:f0:81:b0:
0b:9e:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:08:20 2024 by rpki-client on console-fra.rpki-client.org