Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/UinKlJEuaGaXD7NgfXQekgTGK8Q.roa
File: UinKlJEuaGaXD7NgfXQekgTGK8Q.roa (raw, json)
Hash identifier: FUzeKZUq9DWkZI//mzfW48jXf69JKABsurDNx2IB4s4=
Subject key identifier: 52:29:CA:94:91:2E:68:66:97:0F:B3:60:7D:74:1E:92:04:C6:2B:C4
Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial: 018CC8714207B1A5056422987F9E92F9A622
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/UinKlJEuaGaXD7NgfXQekgTGK8Q.roa
Signing time: Tue 02 Jan 2024 04:31:54 +0000
ROA not before: Tue 02 Jan 2024 04:31:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209383
IP address blocks: 91.217.30.0/23 maxlen: 23
91.223.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:42:07:b1:a5:05:64:22:98:7f:9e:92:f9:a6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Validity
Not Before: Jan 2 04:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5229ca94912e6866970fb3607d741e9204c62bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:da:87:29:6b:83:9d:86:44:5a:5e:3b:48:11:
4b:84:a4:02:99:7b:5d:47:80:e5:2c:0a:85:23:e6:
cb:7f:96:32:19:71:c2:f5:7d:5d:7a:7a:dd:9b:3b:
c6:30:03:cf:56:59:e5:bf:09:39:c2:22:66:a9:54:
b7:10:5d:8e:ea:29:b2:7c:6a:16:62:5d:0a:5d:1f:
31:a9:34:05:99:6f:0a:29:55:0b:9b:63:2a:75:80:
33:d6:14:32:cc:61:08:a3:83:c1:c1:df:87:69:22:
a5:7e:95:38:53:26:b0:7b:d0:36:81:61:e9:e6:59:
f8:99:85:2f:b5:86:17:16:6f:6a:69:c2:5a:a0:d8:
10:c9:1b:04:97:30:d1:bf:b6:1f:e3:15:72:e0:a9:
0d:2b:a9:ba:0c:20:04:68:eb:17:09:a0:29:63:58:
24:7d:1a:04:5e:ad:70:6a:cc:36:2e:f0:f9:cd:eb:
47:68:4e:4e:dd:c5:5a:ae:e6:7e:b2:e3:e3:cc:78:
83:80:11:4f:71:18:ea:86:b1:a8:5a:89:5e:2d:e0:
c9:f1:96:dc:c2:27:7f:13:d7:6c:17:15:f4:51:56:
64:04:dd:66:2f:43:86:4d:54:4b:79:fb:db:e2:06:
49:f2:fc:be:11:af:bc:c6:64:78:6e:90:0e:82:7f:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:29:CA:94:91:2E:68:66:97:0F:B3:60:7D:74:1E:92:04:C6:2B:C4
X509v3 Authority Key Identifier:
keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/UinKlJEuaGaXD7NgfXQekgTGK8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.30.0/23
91.223.140.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d2:99:c1:7d:f7:ba:c0:c9:55:d7:9d:0f:2b:ba:66:39:1c:
1e:e2:8d:b3:d7:ab:0b:6a:83:b3:95:e4:89:89:ad:1d:2e:a8:
8e:fc:43:d1:cd:5b:d1:09:73:3a:48:b0:6c:83:a2:69:1d:a6:
d8:0f:c8:f4:93:02:7a:07:0d:73:4d:38:f8:32:1e:07:40:db:
56:18:c7:dd:9e:5c:a5:d1:21:17:cc:80:0a:a5:f2:c5:ab:ec:
91:bb:48:43:c5:9e:38:49:08:06:99:2e:26:cd:f8:11:f5:ce:
0b:52:5b:fd:c9:c7:04:17:1e:1f:28:d1:40:77:83:cb:05:8b:
85:16:b8:1a:46:f1:49:3b:69:72:3d:4d:6c:63:5c:aa:b1:0c:
7e:be:93:e0:62:99:5d:78:60:b4:de:10:e6:00:5a:8f:37:06:
fa:f3:0b:9d:bb:1a:9b:83:f8:49:3b:06:88:58:bf:6a:7a:11:
43:b8:30:29:10:af:b0:14:37:c5:a4:a8:70:ef:64:e6:60:fd:
f1:7e:82:3f:7f:04:88:2e:9c:c3:cd:3f:37:2c:90:3e:00:02:
b0:18:f6:02:da:eb:1d:27:5d:b5:69:30:63:fa:81:f5:cb:a9:
89:b9:10:0c:d7:ab:ae:1e:ef:e9:1a:40:70:59:84:a5:16:58:
c7:b3:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:17:58 2024 by rpki-client on console-fra.rpki-client.org