Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/RzNVuMXf9uQ_3ERpykVtGFwjdLw.roa
File: RzNVuMXf9uQ_3ERpykVtGFwjdLw.roa (raw, json)
Hash identifier: SmP9ukQdRHY1zmZ9vU26ZS/6EtGITI1tXIVx5W0Ky9A=
Subject key identifier: 47:33:55:B8:C5:DF:F6:E4:3F:DC:44:69:CA:45:6D:18:5C:23:74:BC
Certificate issuer: /CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66
Certificate serial: 018E13F313D2D1493AA2CEAED3A765841F5B
Authority key identifier: AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/RzNVuMXf9uQ_3ERpykVtGFwjdLw.roa
Signing time: Wed 06 Mar 2024 13:28:01 +0000
ROA not before: Wed 06 Mar 2024 13:28:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56513
IP address blocks: 91.224.172.0/23 maxlen: 23
91.224.172.0/24 maxlen: 24
91.224.173.0/24 maxlen: 24
2001:67c:548::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:f3:13:d2:d1:49:3a:a2:ce:ae:d3:a7:65:84:1f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66
Validity
Not Before: Mar 6 13:28:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=473355b8c5dff6e43fdc4469ca456d185c2374bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:de:7a:5c:ca:a7:dd:b8:42:9d:a3:97:dd:2c:
a0:90:90:0c:2b:96:a8:fb:e9:39:4c:53:d4:ef:b7:
25:2f:eb:9e:3d:69:81:c6:5d:e9:0a:63:75:49:06:
46:82:b7:d5:b3:9b:70:83:3f:66:c3:d3:cd:38:f5:
4e:be:c1:4d:54:1f:72:92:73:9a:36:3f:7c:8e:0e:
fe:aa:17:15:af:ef:21:12:f5:31:08:91:ef:10:09:
88:71:59:d3:89:93:94:5f:27:ca:90:6e:13:12:c4:
59:be:41:d5:0a:9f:06:aa:54:af:e6:ec:21:a6:d0:
97:45:1b:36:34:fa:77:5f:9f:7e:8c:d0:25:70:0a:
af:1d:7d:6a:83:7e:75:61:9d:d6:58:8d:d2:14:9c:
23:86:ad:6d:f5:43:d3:d9:35:c3:97:16:31:9d:27:
a9:79:9f:7b:50:ce:ac:13:ec:1a:94:aa:c1:85:0c:
b0:5b:a4:d8:f1:88:f5:c5:87:88:18:7d:80:4a:47:
92:f9:95:26:98:e4:64:b0:6e:b9:ae:a0:c8:70:17:
b9:cb:a4:c2:b4:f3:ec:b2:72:31:5d:04:dd:b7:0c:
03:fb:5b:80:5d:0e:d3:0f:a3:38:43:68:bb:ee:e5:
fe:90:c9:86:2f:66:8b:8b:b4:c6:ee:b9:b0:92:56:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:33:55:B8:C5:DF:F6:E4:3F:DC:44:69:CA:45:6D:18:5C:23:74:BC
X509v3 Authority Key Identifier:
keyid:AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/RzNVuMXf9uQ_3ERpykVtGFwjdLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.172.0/23
IPv6:
2001:67c:548::/48
Signature Algorithm: sha256WithRSAEncryption
60:2d:31:cd:7e:58:9d:49:ad:09:5b:12:80:81:8b:24:a2:f2:
42:03:1a:05:3b:66:08:97:60:87:70:fb:d0:a1:97:11:5d:6a:
ed:ac:57:3b:7a:69:13:6b:e1:cf:42:ea:28:14:25:57:5b:4b:
4f:a7:9e:98:d9:21:ab:75:75:2b:3d:e2:4b:55:a9:74:0a:14:
bb:bf:d3:ff:2f:99:2d:59:5e:56:b4:cf:4e:08:c3:6b:df:f2:
95:70:a8:13:f7:e1:e6:49:28:1f:22:d0:4e:bb:72:fe:06:fe:
7e:a9:66:4e:3e:0f:fb:f1:8d:2d:65:13:83:70:b4:5a:7b:30:
6b:4f:41:33:f3:4c:cc:f3:65:f4:88:b2:ed:ae:31:b2:aa:ee:
19:4b:51:6e:9c:90:cc:c3:41:14:eb:6b:f7:a3:9a:2a:ac:de:
fe:6e:5d:3d:43:5d:e9:87:b3:a0:cf:89:78:5a:ac:64:db:60:
41:46:85:09:a2:5a:a8:97:f9:30:a6:33:f9:ac:ed:f1:d7:e5:
3a:dc:e0:07:d2:50:b4:18:34:85:c0:be:06:d1:f4:7f:ef:e4:
ce:f9:e5:34:03:26:87:25:e0:8b:85:81:f0:7c:8d:24:95:fd:
f8:b5:b8:d9:16:46:9c:63:96:1a:df:fd:1b:83:8c:e2:19:0e:
14:e9:91:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:36:31 2024 by rpki-client on console-ams.rpki-client.org