Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/UVNDKWgKPtDkDA9YrVzI37a4HyE.roa
File: UVNDKWgKPtDkDA9YrVzI37a4HyE.roa (raw, json)
Hash identifier: WUXB6Iv9EyEkPslg+0XXIvQXThm3nJXaVF+OvHu+7dM=
Subject key identifier: 51:53:43:29:68:0A:3E:D0:E4:0C:0F:58:AD:5C:C8:DF:B6:B8:1F:21
Certificate issuer: /CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Certificate serial: 018FA9A5217E9AC2A59AE614AEF7FD0EFB83
Authority key identifier: F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/UVNDKWgKPtDkDA9YrVzI37a4HyE.roa
Signing time: Fri 24 May 2024 08:08:42 +0000
ROA not before: Fri 24 May 2024 08:08:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209120
IP address blocks: 91.213.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a9:a5:21:7e:9a:c2:a5:9a:e6:14:ae:f7:fd:0e:fb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Validity
Not Before: May 24 08:08:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51534329680a3ed0e40c0f58ad5cc8dfb6b81f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:58:7c:f7:b3:69:c4:bf:89:e5:77:f6:7e:
82:49:ac:42:b2:c9:dc:72:82:8e:04:3e:e7:38:f9:
75:78:5b:2a:4d:8a:f8:60:8c:5c:f4:a2:75:0b:cc:
d3:56:92:0c:77:87:5b:07:2a:d6:27:77:86:7b:45:
68:69:14:40:7e:65:7f:76:fd:42:f9:98:81:26:88:
56:2c:cb:fc:24:a5:bc:68:9e:39:f3:97:6e:61:b7:
5d:d2:b3:e4:cb:cf:6d:54:b6:fe:d5:b5:52:b0:9d:
39:dc:64:af:62:26:24:d9:e1:5e:32:f4:fa:5d:28:
18:93:dc:03:1b:9b:9e:2c:26:18:4c:26:69:e9:29:
d4:5e:bb:52:6b:62:e2:af:a5:5c:e1:85:f3:9a:63:
1d:1c:c0:5b:e6:84:d8:a1:14:91:8c:d9:06:02:23:
4b:7f:c1:5b:37:ce:a8:09:25:c9:1e:8e:58:19:9d:
fe:a7:6a:4e:8f:7b:b4:94:94:ef:cc:41:f0:74:45:
bc:10:a2:b9:df:16:b2:79:7c:63:82:2d:8c:fc:ea:
c3:cb:ba:77:ad:78:29:b7:e7:0f:34:52:f8:f4:56:
05:bb:6a:b7:b9:b1:ce:b3:ff:93:8d:31:fd:32:a6:
57:eb:99:58:fe:f3:7b:23:c7:41:f9:2c:5b:32:91:
d4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:53:43:29:68:0A:3E:D0:E4:0C:0F:58:AD:5C:C8:DF:B6:B8:1F:21
X509v3 Authority Key Identifier:
keyid:F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/UVNDKWgKPtDkDA9YrVzI37a4HyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.247.0/24
Signature Algorithm: sha256WithRSAEncryption
89:9e:39:f8:22:2b:34:76:f8:cd:fa:ca:67:75:84:5e:d1:39:
c3:f6:7c:13:4c:cb:e6:0c:fb:67:61:fa:4a:a4:f5:c5:be:46:
60:11:e6:e7:60:d0:90:b6:7c:d1:fe:f5:b1:79:16:6b:e7:45:
3a:e0:5c:16:c2:09:78:b2:dd:a4:d4:fb:42:d3:72:ba:56:f3:
25:23:b0:87:e0:04:33:0f:41:5d:ee:da:2f:bf:b4:4d:bd:06:
d2:10:46:c0:c5:f7:bd:38:ae:ff:38:02:51:92:c8:68:9c:17:
ce:04:36:8f:3f:fc:e3:e5:96:cb:b4:76:e6:59:01:e5:f2:7e:
ee:37:d8:e1:23:b7:2d:12:ce:16:87:82:4f:b0:70:45:f2:e1:
75:c7:0c:4a:95:a1:c9:17:91:20:53:0b:2f:3f:8e:ee:ae:87:
6f:78:5b:54:c7:de:71:ea:dd:69:33:a2:d3:fc:49:9c:76:7b:
c4:05:7b:a6:8a:c0:bc:5e:da:f4:e6:6c:c9:bc:ec:7c:1a:fa:
6f:3c:8f:38:03:0f:04:57:d7:31:70:f5:d1:ab:33:12:8a:7a:
e9:ff:a1:09:8c:16:13:04:6e:6c:30:21:66:79:41:fb:11:5e:
ef:49:f2:95:8d:01:31:71:6e:dd:25:a9:8e:27:4a:8c:2f:ed:
dd:f2:f3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:46:43 2024 by rpki-client on console-fra.rpki-client.org