Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/u4D1o1XupW2SC-i0ocGdOS7eRVw.roa
File: u4D1o1XupW2SC-i0ocGdOS7eRVw.roa (raw, json)
Hash identifier: 4AW31mdFaOjEBeYYEGQfKK9a3peIlMOljIrDDqdd0o8=
Subject key identifier: BB:80:F5:A3:55:EE:A5:6D:92:0B:E8:B4:A1:C1:9D:39:2E:DE:45:5C
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 018CC26D7EB380575BF30014D533D9CAE44A
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/u4D1o1XupW2SC-i0ocGdOS7eRVw.roa
Signing time: Mon 01 Jan 2024 00:30:04 +0000
ROA not before: Mon 01 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198401
IP address blocks: 91.149.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7e:b3:80:57:5b:f3:00:14:d5:33:d9:ca:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jan 1 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb80f5a355eea56d920be8b4a1c19d392ede455c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:ab:16:99:69:91:49:2d:98:8a:19:87:15:
d5:67:fe:c6:06:b3:a5:ea:61:ff:9b:41:df:af:94:
6f:1c:70:27:24:80:05:57:05:54:bb:3a:dc:db:e0:
ec:96:fb:52:b9:32:c2:b4:02:a0:47:2f:bc:22:ce:
3a:d0:f1:07:fe:6b:f9:5e:c6:ba:3e:11:db:66:5e:
9f:46:61:f4:ec:0b:19:58:f1:1a:11:c0:d8:a7:bb:
6d:6a:27:c0:b7:6c:04:cc:fc:c5:e1:1f:21:8e:0e:
6e:d0:ee:a9:b6:40:3a:a3:45:53:f6:65:78:c4:0b:
4e:a4:dd:98:83:b9:27:0a:01:71:45:2b:c4:b3:b0:
7b:96:b5:63:23:52:e5:14:f4:b6:71:e9:24:35:b1:
90:8f:35:eb:c5:65:cf:75:9d:23:4c:ff:1f:72:25:
a2:e1:9d:d8:db:95:c2:b7:29:c6:47:63:60:c3:e3:
06:16:3e:6c:f9:41:bc:78:c9:0b:93:37:7d:6e:a2:
6c:4f:9a:7d:52:1b:bb:7a:66:d9:94:0b:08:ee:d5:
61:f0:f4:e2:1d:78:d3:1b:b7:0b:bf:c1:a0:02:7c:
4c:46:28:05:de:6c:83:65:12:45:33:f2:75:fe:f7:
ad:58:05:c5:a7:e4:30:74:3c:67:13:ca:3c:60:a7:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:F5:A3:55:EE:A5:6D:92:0B:E8:B4:A1:C1:9D:39:2E:DE:45:5C
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/u4D1o1XupW2SC-i0ocGdOS7eRVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.213.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:fb:f2:9f:9d:23:15:c6:2e:c5:ec:cc:6d:ba:7e:9d:27:0d:
e8:93:fd:cc:5d:2e:c2:7b:a4:9a:0c:f2:1c:32:ab:bb:66:59:
b4:34:5f:19:04:4f:53:1b:c7:cd:4d:0a:89:ee:29:98:5d:38:
7c:a3:73:54:bd:dd:d2:e9:6e:a1:f2:61:7b:1d:ad:04:49:12:
c8:9a:fd:60:0d:84:e7:9d:20:7a:8b:3c:59:cc:d9:2f:e7:4f:
60:eb:a5:b2:7c:0e:20:c2:6a:18:35:cd:56:a8:32:8c:0b:96:
61:70:7f:bc:01:b1:21:c3:cb:78:ce:34:3d:6c:88:bd:f4:29:
9d:f9:b6:84:51:51:48:3b:cf:34:ed:08:a7:0c:f0:c8:1e:40:
32:57:80:da:21:6c:82:0c:81:ee:76:d6:47:96:2d:74:79:3c:
35:52:8e:b0:e1:66:95:3e:de:89:ca:3d:74:22:06:0b:6b:7b:
71:2d:a5:d2:da:2a:82:9f:05:50:7e:87:ec:72:44:0d:ff:23:
25:3a:7d:97:7b:a9:61:e5:1b:5f:c2:32:b0:77:6d:a7:f3:b3:
6b:b4:ae:cd:f4:f1:2c:73:25:de:88:eb:9e:d8:a8:2b:7b:9a:
c8:b6:2f:2e:9e:6a:ad:03:7e:a5:42:54:cf:dd:84:04:62:5c:
ac:47:12:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:59:24 2024 by rpki-client on console-fra.rpki-client.org