Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/UYDxzmpaTGgP8-Zd_G7wSXwSnMw.roa
File: UYDxzmpaTGgP8-Zd_G7wSXwSnMw.roa (raw, json)
Hash identifier: Zq71Y3kZqS1DjA/P9v/qmkbp25PeI4KazxkcbUG0zo0=
Subject key identifier: 51:80:F1:CE:6A:5A:4C:68:0F:F3:E6:5D:FC:6E:F0:49:7C:12:9C:CC
Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial: 018CC94CB1DE89DCF9558FF4246A6E0A6699
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/UYDxzmpaTGgP8-Zd_G7wSXwSnMw.roa
Signing time: Tue 02 Jan 2024 08:31:35 +0000
ROA not before: Tue 02 Jan 2024 08:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198108
IP address blocks: 91.216.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:b1:de:89:dc:f9:55:8f:f4:24:6a:6e:0a:66:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Validity
Not Before: Jan 2 08:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5180f1ce6a5a4c680ff3e65dfc6ef0497c129ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:cb:de:e9:57:85:23:75:9d:d3:02:82:07:
e9:28:57:23:56:55:1d:51:07:f9:7b:c1:41:70:73:
4b:6d:9c:b3:93:d0:51:73:6b:09:7b:39:9a:56:03:
c6:19:79:53:b1:33:a0:74:fa:88:b6:d6:bd:1d:66:
cb:1a:23:04:f6:63:0b:f2:d4:9c:39:9e:9b:cc:55:
90:8f:09:3a:6e:35:78:bd:eb:16:d5:5f:3f:9a:0d:
8a:f3:bd:97:84:45:6f:8d:97:ef:8b:06:be:1c:b5:
b4:e9:4a:e7:d5:33:4c:09:89:88:22:0c:3b:22:ff:
23:79:e8:86:e3:fc:2e:86:6a:9e:7c:9b:1e:2f:bb:
a3:62:4b:ef:26:f2:cf:33:d8:c8:cc:2f:c4:7e:45:
e9:0a:4a:86:73:91:6f:cf:f6:b3:29:23:37:17:4c:
ca:70:9b:0c:84:3c:fa:57:cf:ca:b0:82:bc:d9:6c:
05:38:37:de:ec:1b:44:d3:8b:70:35:47:b6:ae:47:
63:06:db:84:6d:df:e6:86:e1:27:2e:d3:6a:1b:de:
d9:87:f5:88:73:76:f9:80:47:d7:97:33:72:e3:a6:
f4:af:b8:e9:10:33:50:eb:0f:12:28:0b:6c:64:dc:
50:76:d7:1a:a5:a7:8a:58:98:b0:c8:df:7c:52:29:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:80:F1:CE:6A:5A:4C:68:0F:F3:E6:5D:FC:6E:F0:49:7C:12:9C:CC
X509v3 Authority Key Identifier:
keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/UYDxzmpaTGgP8-Zd_G7wSXwSnMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.232.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d6:24:f6:5a:e4:38:4d:cc:a5:29:61:88:eb:34:7a:17:da:
2d:3c:32:cb:4e:2f:fd:a0:5b:b6:e8:89:73:55:76:b2:c4:9e:
53:b9:3f:37:48:82:87:44:2b:da:e5:35:ba:de:f5:b1:2f:b0:
73:b5:ea:2c:28:91:90:f5:1e:2c:dd:66:2c:27:f1:c3:ac:28:
e3:01:f3:7c:61:c3:d6:22:2f:0c:99:48:78:f4:e5:ed:de:42:
44:a5:33:82:a2:b2:98:56:d5:6f:e4:30:f7:cd:c8:d3:9b:0b:
5c:c4:b1:ec:f3:9f:9b:26:79:b7:90:f1:9f:73:95:ad:fe:74:
fe:61:3e:3e:62:e6:15:f8:5e:46:6e:bb:86:5d:c4:f3:6c:fe:
8b:96:a0:21:cc:e4:8e:33:a5:71:86:4c:75:a4:3a:43:be:00:
7e:24:c0:eb:4d:59:fa:fe:c4:89:c8:fa:d1:4f:a9:77:6e:ad:
29:8a:98:ce:79:25:80:e2:e9:d4:5c:cf:01:f6:87:1e:44:06:
a6:b9:de:d9:15:b5:91:b3:fa:04:98:9f:c3:ee:01:ff:d4:b1:
99:5e:6d:ec:cb:eb:d1:cb:56:db:cb:0c:c2:da:5d:7e:79:b1:
be:c8:8d:f9:48:fa:6d:ef:98:46:54:fd:fb:40:7d:29:9b:a7:
6c:77:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 10:14:01 2024 by rpki-client on console-fra.rpki-client.org