Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Sd-HFIo5J7Vc6LSqMWZrES8NEiU.roa
File: Sd-HFIo5J7Vc6LSqMWZrES8NEiU.roa (raw, json)
Hash identifier: kuizoLSB81TA+i+m0E0Yb2kHgOnBsumZFl4l861gtXQ=
Subject key identifier: 49:DF:87:14:8A:39:27:B5:5C:E8:B4:AA:31:66:6B:11:2F:0D:12:25
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 018CC8011C732194B9475A79A42E71938786
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Sd-HFIo5J7Vc6LSqMWZrES8NEiU.roa
Signing time: Tue 02 Jan 2024 02:29:25 +0000
ROA not before: Tue 02 Jan 2024 02:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34549
IP address blocks: 91.234.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1c:73:21:94:b9:47:5a:79:a4:2e:71:93:87:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jan 2 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49df87148a3927b55ce8b4aa31666b112f0d1225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:a2:93:fd:be:db:61:90:88:b8:a9:85:24:
cd:78:67:8f:ba:59:f9:5f:0a:a6:86:01:85:b7:f9:
61:c8:50:48:19:d3:b4:14:2b:54:5d:54:e4:3a:ba:
c4:0a:cf:9e:c3:d9:4a:c9:c8:4c:45:52:b1:67:53:
8d:8f:0c:b5:c4:56:a6:0a:83:0d:df:23:fe:d4:96:
51:a4:7b:ac:88:1b:44:e0:4f:ab:de:da:e2:19:07:
85:f6:71:d8:a0:66:24:da:80:0f:4c:ea:07:41:7e:
4c:55:3e:a6:9c:14:50:1d:de:20:f1:4b:d0:ad:dc:
b1:57:93:32:38:c7:85:48:b6:90:76:06:21:17:19:
31:22:82:df:fa:32:f2:64:c2:78:7f:0c:ae:d3:c8:
39:2d:ef:88:b7:45:3b:a9:eb:f0:20:8a:ce:92:4b:
c9:27:cc:64:21:ee:d7:a8:74:e9:d0:3f:2f:ae:20:
2f:4e:26:21:b3:8c:03:9e:a2:53:ee:e4:28:bc:88:
48:d9:5b:81:3b:cd:db:4a:08:88:5b:c2:fc:4e:6f:
23:69:cc:cd:94:4c:9f:e6:c7:dc:bd:95:0e:c3:ca:
4e:b7:b4:df:95:e9:03:c9:ad:f4:56:73:0e:4a:cb:
e4:5d:37:50:8b:16:a5:e1:8b:d4:1b:b1:08:b9:03:
92:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DF:87:14:8A:39:27:B5:5C:E8:B4:AA:31:66:6B:11:2F:0D:12:25
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Sd-HFIo5J7Vc6LSqMWZrES8NEiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.22.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6e:7e:cb:1f:fc:31:77:7c:8e:a1:32:c2:a0:73:45:0d:6b:
57:27:6e:b2:bc:0f:74:3f:1a:d2:a0:00:c0:7f:cb:2d:0b:56:
b6:60:0c:10:af:60:28:41:ba:73:af:59:cc:8f:53:69:1a:36:
27:26:24:61:fe:2b:6c:fd:56:3a:db:c8:06:c9:7d:6e:d7:a1:
0c:29:81:69:1d:ae:e2:6d:d4:37:d3:17:03:42:d0:81:cb:6d:
a5:34:87:96:48:26:f7:f1:d8:01:ba:f1:24:6c:25:52:c4:5f:
74:be:b8:66:50:a2:bb:ff:ef:46:47:6c:1f:3e:ea:45:10:c1:
a9:5a:52:6f:8e:04:af:99:ec:04:26:0c:f8:60:70:a2:b6:84:
4e:f9:fb:52:32:ab:32:ee:07:f9:c8:70:30:30:2b:71:06:12:
01:7e:76:46:11:9a:a5:58:fb:43:2d:1c:9c:78:7c:e0:b7:be:
d7:ac:f4:6d:3c:6a:6e:c4:7c:ae:cb:90:67:2d:4a:75:20:bb:
f9:8e:cb:5e:3f:6b:a7:10:3f:07:24:73:5f:7f:eb:d5:b0:62:
aa:67:9c:0a:5d:fd:6e:0e:5b:c0:5e:9e:2a:dc:1f:94:96:98:
38:73:2d:ae:82:28:fd:61:0b:24:78:e5:4f:bb:00:82:0a:70:
8c:99:65:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:43:53 2024 by rpki-client on console-ams.rpki-client.org