Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1-qVtmVYnNF0BwPXjKi6js7gjv-w.roa
File: 1-qVtmVYnNF0BwPXjKi6js7gjv-w.roa (raw, json)
Hash identifier: h7UIkapx2KkXXgz4T/N7Jo9EUiFbiYHRjmO+XUt8pzg=
Subject key identifier: FA:A5:6D:99:56:27:34:5D:01:C0:F5:E3:2A:2E:A3:B3:B8:23:BF:EC
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 018CC9BC34C346C5BC41680E3D83963D0F1A
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1-qVtmVYnNF0BwPXjKi6js7gjv-w.roa
Signing time: Tue 02 Jan 2024 10:33:23 +0000
ROA not before: Tue 02 Jan 2024 10:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209014
IP address blocks: 91.196.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:34:c3:46:c5:bc:41:68:0e:3d:83:96:3d:0f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Jan 2 10:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faa56d995627345d01c0f5e32a2ea3b3b823bfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2f:88:2b:a4:23:a0:49:95:22:b8:f7:fd:df:
06:ce:ab:13:50:11:50:a7:3a:06:06:63:d4:a8:39:
0d:8f:43:35:a9:be:03:e0:ad:54:d3:35:d8:1c:47:
30:0b:f0:2c:00:20:f3:e2:99:6e:2e:a1:bc:51:47:
6c:87:72:dd:ee:58:ac:cf:1d:a1:40:64:23:bb:8a:
05:b2:ed:a0:03:db:82:5f:8f:28:02:b8:ac:78:8b:
39:a9:44:14:e6:d9:21:15:e5:cc:84:77:9c:af:01:
ed:76:6a:fa:f5:f8:71:fc:ca:98:e0:3f:a8:23:5d:
ae:9e:cd:f5:98:68:dd:70:dd:a0:16:dd:16:df:c1:
13:c5:42:e3:04:61:36:52:42:69:b7:8d:d2:97:a2:
59:f0:d4:6b:76:ec:49:c4:b7:fa:f0:b9:de:17:2c:
ef:fb:7c:17:cc:41:5a:93:4c:0a:cc:ee:20:96:26:
e8:ee:59:52:83:4e:fc:1b:37:f0:c6:d5:af:ac:f6:
1b:b9:1c:c1:1f:34:ee:8c:1d:ec:60:38:41:8e:73:
8e:47:28:ee:18:c7:50:ce:56:02:f8:84:13:2d:f0:
aa:ac:1f:41:d7:f0:b1:05:cb:14:c9:0e:2c:0c:32:
7a:34:b8:e2:4a:ea:df:4e:24:e4:2f:eb:37:81:ff:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A5:6D:99:56:27:34:5D:01:C0:F5:E3:2A:2E:A3:B3:B8:23:BF:EC
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1-qVtmVYnNF0BwPXjKi6js7gjv-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.155.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:34:2c:0d:fd:94:4a:e4:9b:d9:b3:5f:9d:cd:aa:bb:13:17:
bb:84:9a:0d:34:1a:77:10:bb:30:98:0d:fc:d4:1b:7c:24:9a:
3c:95:bf:3c:32:d4:d7:4f:1a:d8:17:9c:11:a6:36:54:63:d9:
4f:05:5d:ae:32:0e:b5:36:b7:8c:c6:c5:0c:fb:3b:4c:6b:66:
bf:22:5d:22:0a:94:dc:1d:4c:d3:50:85:28:10:9f:f6:e2:c8:
76:f4:c5:a2:c5:f7:72:8e:57:fd:c9:18:1b:d8:a5:9e:a0:51:
41:d7:1c:58:43:7f:ac:66:f1:32:b8:db:dd:9c:85:82:3d:8a:
e8:85:37:46:b8:30:7d:a7:f7:5d:50:79:d1:7c:e0:21:5a:62:
e1:cd:16:20:91:ac:c8:25:2a:05:96:98:3e:b5:99:c9:e8:30:
79:eb:1d:dd:a1:94:cc:7c:59:7b:37:4b:e3:b1:69:d1:0a:b8:
7c:9a:8f:97:7f:05:44:0a:fe:62:35:c8:5b:b9:35:6c:06:3a:
d2:5e:10:34:ec:d3:47:04:9f:f0:43:f9:43:a5:49:4e:79:71:
3a:f6:84:0a:e8:63:f3:34:84:62:3d:dd:d5:47:c0:e7:3b:2c:
b8:70:fc:f6:18:00:53:0e:f7:d8:5c:db:3c:35:0d:9f:db:b7:
88:cb:e6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 10:57:18 2024 by rpki-client on console-fra.rpki-client.org