Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/U_TMZYmT1FVNxj1FJ_CupGE14xA.roa
File: U_TMZYmT1FVNxj1FJ_CupGE14xA.roa (raw, json)
Hash identifier: QBWEIvvFg5QobUjyQk/WALf8xqQXtXNGSal11RkWBzM=
Subject key identifier: 53:F4:CC:65:89:93:D4:55:4D:C6:3D:45:27:F0:AE:A4:61:35:E3:10
Certificate issuer: /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Certificate serial: 018DE700C241C20636171FAE8137A07A1F5E
Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/U_TMZYmT1FVNxj1FJ_CupGE14xA.roa
Signing time: Mon 26 Feb 2024 20:00:02 +0000
ROA not before: Mon 26 Feb 2024 20:00:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 91.227.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e7:00:c2:41:c2:06:36:17:1f:ae:81:37:a0:7a:1f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Validity
Not Before: Feb 26 20:00:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53f4cc658993d4554dc63d4527f0aea46135e310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:fe:d6:53:2d:92:86:2f:d8:8d:dd:d9:f2:
7f:c2:f0:7d:70:c7:4c:7c:19:15:22:42:26:1e:d6:
04:14:cb:cb:1e:ab:b2:22:ff:79:de:86:21:5c:23:
0c:5b:37:b1:6c:50:33:80:e6:7f:06:ba:0c:89:e9:
7b:c2:54:33:9a:07:f9:59:97:e9:22:89:f7:e8:ef:
af:43:6d:e5:c6:99:fe:37:80:27:40:eb:eb:d2:d8:
a1:46:b5:72:18:a2:8f:3b:12:96:63:5c:85:21:8d:
fc:9b:2c:38:58:af:23:86:d8:0c:7f:7b:1b:a6:f1:
1a:b9:4f:d8:5c:e7:27:04:44:2d:e9:60:4e:7f:ab:
3b:e8:27:a2:9f:20:53:bc:ee:50:50:4c:7d:48:ba:
81:65:b9:64:54:e1:8a:1b:f1:7f:25:4d:8f:42:09:
bc:33:15:0a:9f:69:bd:81:9f:ff:f7:17:27:ef:e6:
d2:9c:a3:2d:4e:a8:b4:64:44:e0:f4:5e:c9:25:11:
ac:b3:cd:35:97:b2:5d:02:c9:78:98:b7:2c:c5:44:
68:49:7d:f4:03:ca:10:6c:46:ba:f5:59:94:00:07:
6c:c3:f7:0b:46:10:c2:e6:f2:cd:ab:80:48:b9:c6:
0a:02:4d:22:f6:35:ae:7b:16:0c:da:2d:ff:da:55:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F4:CC:65:89:93:D4:55:4D:C6:3D:45:27:F0:AE:A4:61:35:E3:10
X509v3 Authority Key Identifier:
keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/U_TMZYmT1FVNxj1FJ_CupGE14xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.186.0/24
Signature Algorithm: sha256WithRSAEncryption
32:08:f8:32:a7:09:1c:34:aa:6d:f7:27:d1:a4:04:e7:74:16:
d1:02:df:13:49:ee:63:e6:c5:f8:fd:a2:4c:39:c1:02:b9:85:
c9:62:8a:98:a9:33:66:1e:14:eb:0c:f2:d0:7d:15:52:c4:fa:
fc:6c:36:6e:7d:f3:d5:e0:3f:87:cb:32:f8:23:94:fd:99:ec:
7b:28:cc:88:67:fb:b6:50:43:26:44:d4:46:00:cb:33:54:60:
bc:7f:0c:88:1d:80:aa:e8:61:42:f6:c6:93:1d:43:a7:f7:01:
12:1d:39:e4:23:30:d1:9c:e5:ca:65:63:9d:18:bb:45:bd:a4:
9c:21:3c:13:3b:d4:d1:47:c1:b2:91:7c:3a:12:f4:6f:1c:b3:
45:f8:33:53:de:0b:6b:1f:46:a0:ac:ba:42:77:18:97:30:1c:
c8:85:8d:84:a2:85:ea:f7:47:2e:8e:16:bf:5d:af:c5:a5:28:
bc:2d:ef:84:49:e7:85:d2:a3:2b:86:67:0b:88:de:9c:49:fa:
25:ca:e0:f5:02:af:59:2a:62:aa:d1:f9:28:fe:1a:3f:1d:87:
ec:37:d5:4b:44:a7:9e:87:bd:84:6f:47:73:4a:32:05:44:e7:
71:87:f0:61:a9:a2:a6:78:17:85:d6:b5:e5:b4:68:ea:2e:e8:
91:9e:a8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:26:14 2024 by rpki-client on console-ams.rpki-client.org