Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/rYeplhaP-bM1vtML5OdP2mTR4zM.roa
File: rYeplhaP-bM1vtML5OdP2mTR4zM.roa (raw, json)
Hash identifier: dcrS48E/evh0i243g2qqBxAi+DhSRS+xTPRC0JW9u44=
Subject key identifier: AD:87:A9:96:16:8F:F9:B3:35:BE:D3:0B:E4:E7:4F:DA:64:D1:E3:33
Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial: 018CC348BB7C42033D525263DC0FF99D7BB1
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/rYeplhaP-bM1vtML5OdP2mTR4zM.roa
Signing time: Mon 01 Jan 2024 04:29:32 +0000
ROA not before: Mon 01 Jan 2024 04:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43522
IP address blocks: 91.198.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bb:7c:42:03:3d:52:52:63:dc:0f:f9:9d:7b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Validity
Not Before: Jan 1 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad87a996168ff9b335bed30be4e74fda64d1e333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:75:7c:9b:c6:57:9f:1b:f2:9b:ae:9c:04:8f:
13:01:e1:1c:20:cc:82:a0:62:13:7f:33:80:c6:11:
b5:aa:40:66:24:0f:c5:ea:82:87:13:f3:18:bf:f3:
33:eb:10:0b:e0:a0:51:6b:1e:62:38:3b:20:84:3d:
a9:47:06:8e:42:31:38:65:0e:86:c5:9b:da:76:47:
c2:4f:32:79:37:a1:ca:b0:b6:f0:96:c4:aa:aa:9b:
a8:9d:12:44:2d:1d:4d:6c:f6:8e:9c:b2:31:05:9c:
4b:ae:4a:18:7c:52:83:30:88:b7:9c:c7:a5:4f:33:
71:a4:d2:36:e9:8e:18:f4:7f:de:14:bb:00:eb:a0:
eb:89:f7:20:03:40:63:d3:9e:e6:ff:de:a2:1c:28:
c9:c1:c2:01:1d:6c:47:e3:d9:2b:02:a0:07:04:38:
11:a9:19:64:2f:85:18:88:20:cf:42:84:94:d4:eb:
81:17:1c:fa:ad:a2:27:57:5b:1b:00:55:9f:0a:ce:
c8:f2:c3:b0:7b:0c:fc:e3:8e:7b:48:aa:e2:89:08:
44:62:dd:ff:dd:61:e2:3b:67:dc:ef:ea:c8:38:e9:
ff:b0:b7:15:0b:39:1b:63:20:66:c4:ab:69:02:4d:
ca:85:28:80:1f:07:41:14:b1:d8:b9:5d:18:67:51:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:87:A9:96:16:8F:F9:B3:35:BE:D3:0B:E4:E7:4F:DA:64:D1:E3:33
X509v3 Authority Key Identifier:
keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/rYeplhaP-bM1vtML5OdP2mTR4zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.45.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:50:3a:27:63:5c:be:a4:76:66:29:4b:67:46:3d:66:e4:d7:
15:10:e2:d5:51:be:7a:0d:f5:9b:d5:67:5e:f2:5f:45:44:99:
61:b0:22:ff:a6:5e:e3:0b:ff:b2:00:0f:65:8b:b5:75:ed:0e:
28:b8:15:7f:d5:b4:79:de:91:ed:03:89:c2:11:7c:0b:c4:ff:
b6:3f:5b:cc:5d:dc:9a:47:5a:f3:aa:10:49:8e:79:c1:21:d1:
f9:ee:3d:0e:15:04:69:77:59:d2:e8:27:9c:a7:cc:74:47:66:
b9:58:47:bd:5c:ff:8a:2d:b9:3a:45:52:ac:b4:23:01:36:52:
bd:8f:1a:20:6a:ab:06:b8:a1:fb:17:67:77:d0:85:1d:49:b9:
8e:a4:4f:91:b0:6c:3b:53:a7:7d:84:ee:65:17:b2:47:77:e4:
b3:a2:01:b9:60:ea:90:1a:d5:34:ff:19:b8:c4:3a:65:65:e5:
2f:94:32:17:1c:86:20:55:c0:47:e6:86:d7:35:31:e6:c1:33:
c0:27:f4:9b:5a:5e:83:89:bd:0a:9f:99:19:78:dc:b2:9d:2b:
56:76:c3:f7:03:c2:58:f0:94:9e:60:45:0e:09:b5:fd:86:84:
86:4c:91:e0:14:f1:34:67:97:09:c2:90:bb:e9:9e:22:d6:8d:
f4:d0:11:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:23:15 2024 by rpki-client on console-ams.rpki-client.org