Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/DuU1uBwHxDFL5vgUvbCmzhWsThg.roa
File: DuU1uBwHxDFL5vgUvbCmzhWsThg.roa (raw, json)
Hash identifier: s/CUE7C5yLqY6vKrrRTEvcokXoeJkTQZuPuZcZ279rc=
Subject key identifier: 0E:E5:35:B8:1C:07:C4:31:4B:E6:F8:14:BD:B0:A6:CE:15:AC:4E:18
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 018CC56E7C968E5F6384A2DB5BF2259700BE
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/DuU1uBwHxDFL5vgUvbCmzhWsThg.roa
Signing time: Mon 01 Jan 2024 14:30:01 +0000
ROA not before: Mon 01 Jan 2024 14:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47821
IP address blocks: 91.242.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:7c:96:8e:5f:63:84:a2:db:5b:f2:25:97:00:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 1 14:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ee535b81c07c4314be6f814bdb0a6ce15ac4e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:12:ac:bc:ec:d4:f1:ba:77:03:5a:b6:ad:4a:
60:2a:76:81:f0:c3:52:72:52:7d:c9:76:10:b7:ec:
8b:af:48:db:b5:e9:a1:cb:a5:47:03:13:64:fb:3f:
5d:32:23:78:21:53:55:85:35:e4:92:75:e1:3c:e7:
4f:69:ef:d4:b3:75:27:9d:de:ea:68:b3:fb:50:ca:
0b:8e:87:00:30:62:66:ea:78:6a:b8:67:33:bd:60:
2f:4d:16:61:c0:15:b3:78:b9:c2:ba:0c:bf:b3:14:
d6:81:54:e2:0f:2a:3a:a0:73:99:a4:91:62:fd:88:
e1:d3:99:af:af:fe:f6:83:da:f4:32:19:56:11:05:
7b:84:5e:40:88:5f:89:7b:d7:9c:63:5a:c2:ae:7f:
54:92:ea:b8:3f:e8:1e:0a:f8:16:f8:c5:cb:59:2a:
57:bc:35:c2:61:61:c3:4e:83:b2:6d:b1:29:81:63:
c2:3f:d9:fb:c2:71:65:b6:8d:ee:56:4d:02:17:6b:
aa:2a:c1:98:d6:75:33:48:30:0d:8c:7c:fe:43:48:
3d:87:4c:03:d7:f3:f2:74:ce:2d:9f:67:25:7d:27:
5e:e4:d2:1b:d1:3a:9e:80:e1:13:6a:f4:d8:df:5e:
2c:56:5e:cf:e0:49:e3:34:2c:46:34:d2:fb:9e:c6:
0a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E5:35:B8:1C:07:C4:31:4B:E6:F8:14:BD:B0:A6:CE:15:AC:4E:18
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/DuU1uBwHxDFL5vgUvbCmzhWsThg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.242.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c8:7b:cc:07:31:37:e2:d4:55:33:47:10:b5:85:67:3c:be:
26:39:3c:14:e7:c5:9b:83:1c:73:51:68:53:0f:aa:b6:35:e7:
ce:b8:dc:c2:98:95:a1:58:f7:cc:ae:57:b5:3b:52:c8:df:46:
e3:f5:c8:dd:a4:e4:e3:1d:48:ee:b4:05:c3:03:7f:51:09:6b:
c1:74:02:cc:49:21:78:69:73:d3:6a:ea:a9:66:d9:02:1b:9a:
8f:c0:e1:fc:cc:60:ea:87:60:bc:da:4f:02:d3:9a:d4:29:0e:
c5:8e:66:be:79:d1:b0:c4:62:88:27:36:21:7a:c5:2c:71:ab:
f1:24:d1:94:64:30:7c:26:63:d4:37:e5:1a:59:77:22:aa:f9:
a7:d8:2e:4a:e9:5f:ac:40:f1:3a:6c:0b:46:31:1b:77:80:bd:
bd:cf:96:09:03:03:2c:90:86:72:e8:5d:16:7b:a7:30:e8:73:
3f:01:fc:37:2f:70:51:ef:5b:c5:a2:62:4e:4f:ee:22:53:34:
54:0a:e3:47:40:73:cd:14:97:56:2f:ef:51:de:a3:63:6a:59:
1c:66:ce:3f:cc:ca:9a:8d:51:78:af:fe:fb:3d:52:76:ec:41:
ba:86:be:af:f2:cd:32:5c:11:2c:34:dd:5e:45:2c:83:92:b8:
b3:80:dc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:27 2024 by rpki-client on console-ams.rpki-client.org