Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/frzljhdYVLPJ0_1e3tbip8gdTLA.roa
File: frzljhdYVLPJ0_1e3tbip8gdTLA.roa (raw, json)
Hash identifier: Wa+hXV9nOJxrLXQQ4h7Pvr2MadaPgTdR8t8vAQMKvAU=
Subject key identifier: 7E:BC:E5:8E:17:58:54:B3:C9:D3:FD:5E:DE:D6:E2:A7:C8:1D:4C:B0
Certificate issuer: /CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Certificate serial: 018CC493513E7394D19D3D1546C07769B79D
Authority key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/frzljhdYVLPJ0_1e3tbip8gdTLA.roa
Signing time: Mon 01 Jan 2024 10:30:38 +0000
ROA not before: Mon 01 Jan 2024 10:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58195
IP address blocks: 91.239.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:51:3e:73:94:d1:9d:3d:15:46:c0:77:69:b7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Validity
Not Before: Jan 1 10:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ebce58e175854b3c9d3fd5eded6e2a7c81d4cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e7:d2:45:f3:25:7d:7f:a1:58:f1:47:ac:33:
58:00:03:9a:21:67:e0:ed:60:5e:e3:97:03:bf:f2:
b0:96:72:f1:08:96:27:12:70:5b:20:30:04:07:af:
02:7e:1d:26:73:57:96:1b:b5:0c:73:be:cf:38:41:
52:6a:8f:b8:9f:63:1c:fe:c4:55:ec:4c:46:59:19:
4c:98:8d:de:4f:31:06:98:f4:0e:59:9f:83:57:0d:
a5:9b:05:d6:4f:fe:55:6d:2b:08:9f:35:cb:62:29:
7b:bd:d4:5b:1c:1f:a2:a5:98:38:3c:21:b4:99:9a:
b1:48:1b:4e:e5:79:55:fe:de:f4:a9:0b:e0:69:7b:
11:bb:37:6f:18:80:d9:7c:7b:c8:bc:ff:84:ba:b5:
ee:85:eb:d7:dd:1c:56:c1:6d:81:d7:5c:e3:09:f4:
c6:b5:39:e7:32:4a:7c:a3:e9:7b:23:de:d6:a3:e4:
bc:01:61:3b:16:c0:c5:1d:be:78:f4:8f:41:33:b3:
bf:b4:ba:17:28:5b:bd:82:25:b5:23:31:5c:ad:55:
16:fc:b2:b9:df:7e:d2:9f:69:c2:d1:66:2b:03:f5:
99:6c:67:95:48:b3:d2:12:17:b7:28:60:22:b7:ec:
b8:46:c5:fb:b7:51:8a:d1:0b:39:0a:c7:b6:2f:f4:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BC:E5:8E:17:58:54:B3:C9:D3:FD:5E:DE:D6:E2:A7:C8:1D:4C:B0
X509v3 Authority Key Identifier:
keyid:45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/frzljhdYVLPJ0_1e3tbip8gdTLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.173.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a5:37:b2:f2:a1:7a:a7:f4:ad:c2:98:09:7c:99:af:39:99:
d7:24:49:79:d1:ff:ab:46:02:21:ca:62:8a:4f:3e:bc:f1:6d:
68:b6:57:88:00:91:18:61:88:bb:94:2b:5e:08:57:63:7a:0c:
ff:de:04:3a:7e:0b:e9:0a:16:9d:2b:3d:92:54:ee:00:58:bc:
f7:57:e1:5d:41:11:1f:fb:37:d8:38:ca:4f:19:48:7a:16:e6:
ad:02:cb:24:5a:15:76:f8:16:a6:fd:62:17:f2:48:93:67:c5:
08:60:fc:1e:65:ec:79:a0:53:09:af:b4:f8:bf:12:4f:c9:97:
21:4d:ac:71:8d:da:71:78:8f:4d:04:1c:30:86:4e:89:ff:18:
2d:1a:ff:7e:4d:45:ba:63:2f:90:b9:dc:1c:a1:69:01:8b:db:
27:c0:12:f2:2a:66:c4:6c:a6:c1:22:c7:3a:19:26:0c:83:e4:
6c:19:5a:1b:e8:10:e5:40:4f:66:b2:50:d4:ce:77:c5:52:ad:
39:3e:a1:72:a8:8b:43:18:a9:41:ac:a8:c2:b0:18:b1:e4:85:
b6:a3:7d:b8:1a:dc:8a:3b:56:97:4f:de:42:93:d0:fc:69:a4:
67:bd:50:ed:46:57:f4:fd:26:98:eb:8c:c6:c5:d9:4d:64:50:
49:a5:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:16:15 2024 by rpki-client on console-fra.rpki-client.org