Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/7JriugTXq82kgSyLLPI7UfWi7P8.roa
File: 7JriugTXq82kgSyLLPI7UfWi7P8.roa (raw, json)
Hash identifier: NjWfexXGAT4VViglz4xtfoNNp53B5muRN6bFCEaTEiI=
Subject key identifier: EC:9A:E2:BA:04:D7:AB:CD:A4:81:2C:8B:2C:F2:3B:51:F5:A2:EC:FF
Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial: 018CC79444CBEE97E60B1F13706197A95577
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/7JriugTXq82kgSyLLPI7UfWi7P8.roa
Signing time: Tue 02 Jan 2024 00:30:32 +0000
ROA not before: Tue 02 Jan 2024 00:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57584
IP address blocks: 91.233.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:44:cb:ee:97:e6:0b:1f:13:70:61:97:a9:55:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Validity
Not Before: Jan 2 00:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec9ae2ba04d7abcda4812c8b2cf23b51f5a2ecff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4a:e4:a7:f0:1a:9b:79:e5:dc:25:33:fe:c1:
1e:5a:df:31:71:59:84:b0:e2:0c:5d:0d:94:9b:a0:
e8:95:39:d1:4b:ce:3d:79:51:7b:6c:86:ca:c0:2a:
be:6c:19:07:bd:9d:81:a3:b3:e5:25:23:94:f8:c2:
0d:f3:dd:a7:56:c5:95:5c:bd:4b:e3:21:af:60:b1:
3a:08:04:00:bc:de:cf:cc:b4:bd:a9:f1:80:db:0c:
1c:9e:e6:1f:e7:a3:a5:3b:63:b7:ee:b7:72:f6:85:
29:46:66:02:3d:30:0e:89:70:2a:80:08:0f:9f:75:
5c:90:5c:24:b8:20:a6:42:2d:06:b5:af:27:f4:b1:
c8:53:6c:50:4e:7d:d0:e2:4b:fe:73:bd:9e:a0:94:
c7:7e:38:a4:71:96:67:c1:fd:81:84:03:5f:37:1c:
e1:2a:de:3d:4b:3f:97:3f:83:2b:01:31:a8:bb:0b:
b5:e8:2c:f8:77:7a:ff:8a:9f:9c:c8:32:fc:86:cb:
89:48:cd:92:cc:53:04:93:b8:01:e2:49:73:4a:bb:
c9:6b:20:2d:7e:65:db:fe:6a:10:37:78:93:b1:4f:
34:ef:a9:0d:af:02:f6:de:3f:54:8b:80:f4:f2:9a:
f0:d8:0b:db:c6:13:d3:f2:57:cc:ec:66:6c:5b:e3:
6a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9A:E2:BA:04:D7:AB:CD:A4:81:2C:8B:2C:F2:3B:51:F5:A2:EC:FF
X509v3 Authority Key Identifier:
keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/7JriugTXq82kgSyLLPI7UfWi7P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.68.0/24
Signature Algorithm: sha256WithRSAEncryption
38:7f:de:8f:92:88:5a:e4:8f:8b:9a:2a:b3:ab:a7:d8:43:0b:
c9:95:11:30:61:8b:19:5b:5d:f9:73:b2:03:c8:37:d2:0f:fa:
b3:96:f4:f8:6a:31:ee:7d:8b:5a:0f:f1:c2:21:50:db:c7:8e:
a7:8b:3a:74:fd:95:f2:02:66:e7:3d:95:05:c3:c9:12:bb:55:
96:d7:79:18:71:0a:a3:dc:1f:63:e4:9f:3b:86:5f:99:71:bd:
6d:71:0b:60:a0:24:c7:77:da:a2:37:ea:e8:7e:5d:57:ad:93:
4a:0f:e1:04:06:6a:65:6e:85:b2:b4:3d:e0:1b:d2:13:0a:8d:
ab:b6:54:a5:f8:15:8e:66:d9:ec:06:82:3a:b8:46:75:1e:38:
fd:94:2d:60:93:13:5a:f3:c0:06:3d:42:10:c7:0d:af:c6:39:
ab:eb:d1:2e:2b:e5:7b:6f:97:d0:3a:2c:59:3e:53:3f:97:a0:
de:42:d9:27:f8:23:a1:0d:f3:70:e1:e5:cd:be:21:0f:01:40:
b4:37:f5:f3:66:e8:b9:45:1a:71:b0:2b:59:52:5f:d4:d8:6b:
42:c9:1f:56:36:3f:9b:24:a4:e0:bd:1f:57:3e:81:21:97:09:
3d:29:7a:6b:4e:64:37:48:0c:0f:5b:e4:b1:51:f9:3a:1b:4a:
bf:4e:ac:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:55:07 2024 by rpki-client on console-ams.rpki-client.org