Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/fnUd64RcqArIIMKsWntgqJ5zvvQ.roa
File: fnUd64RcqArIIMKsWntgqJ5zvvQ.roa (raw, json)
Hash identifier: IvC5iacG5hnTqxMgGBc2F7V8HIDDO0UYlxAH9DpLjTE=
Subject key identifier: 7E:75:1D:EB:84:5C:A8:0A:C8:20:C2:AC:5A:7B:60:A8:9E:73:BE:F4
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 018CC26D0C9ECF5C5073E92A2FD089BA0C7D
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/fnUd64RcqArIIMKsWntgqJ5zvvQ.roa
Signing time: Mon 01 Jan 2024 00:29:35 +0000
ROA not before: Mon 01 Jan 2024 00:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50599
IP address blocks: 91.219.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0c:9e:cf:5c:50:73:e9:2a:2f:d0:89:ba:0c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Jan 1 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e751deb845ca80ac820c2ac5a7b60a89e73bef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:14:87:a4:3c:17:81:9b:3d:62:4a:8f:8d:
1e:72:49:d0:11:5b:04:db:69:73:ee:56:24:94:55:
1c:fd:72:cb:10:51:1f:e9:65:c2:7d:e6:6f:88:b2:
03:17:8c:5c:83:f1:51:de:5f:64:d6:8f:70:48:ef:
e4:87:05:cb:39:65:dc:16:5e:4c:e5:20:84:51:21:
03:3f:e2:28:ba:5c:67:ba:03:67:ca:f3:41:12:1f:
ec:72:c7:9e:b6:7d:7b:13:c9:bb:ec:2c:30:f9:8c:
e1:ea:93:bc:9b:2d:df:65:38:ab:c5:0b:3e:42:c6:
96:b8:0e:58:be:ff:a1:24:00:09:7e:fb:1b:e2:88:
d6:9f:2f:42:a1:2f:13:90:77:06:18:0d:bf:e6:12:
2b:2a:19:d4:a3:a5:d1:07:2c:69:aa:28:9d:35:40:
0d:72:0f:2f:c2:aa:00:90:55:2a:62:4e:b5:dc:87:
17:08:61:57:11:d4:d3:34:a1:14:89:32:b0:61:d2:
8f:41:33:92:82:82:64:88:14:50:f9:78:25:5f:9e:
07:d6:f6:c2:b6:ad:46:6d:90:c9:37:d9:52:59:97:
53:f1:e5:10:64:94:bc:9e:10:b4:7a:69:23:4e:28:
03:1f:ac:23:61:6c:53:31:41:7b:5a:4d:53:83:60:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:75:1D:EB:84:5C:A8:0A:C8:20:C2:AC:5A:7B:60:A8:9E:73:BE:F4
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/fnUd64RcqArIIMKsWntgqJ5zvvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.184.0/22
Signature Algorithm: sha256WithRSAEncryption
01:6e:3f:81:b5:29:39:11:20:9a:47:ec:b4:1e:48:19:d9:d9:
32:b8:02:07:20:6a:83:93:17:a1:1a:1d:a6:9c:0c:3c:a4:1a:
18:55:6e:86:85:86:be:f0:38:81:55:a1:bf:d2:d9:18:50:ac:
c6:eb:5b:44:85:ae:b7:70:85:3d:fa:28:74:9f:81:36:fc:9d:
8b:f3:f1:c5:5c:41:e9:cf:16:88:d1:b2:cb:38:b9:81:39:22:
41:56:08:94:21:c6:63:f8:11:a6:37:b3:19:81:c0:54:9b:60:
8b:d8:70:e2:fd:cc:db:df:14:7d:d2:96:f4:39:de:e1:51:12:
db:42:af:07:51:57:da:65:ea:a2:d5:84:c1:b6:a7:ec:c8:90:
40:be:d1:0a:94:d2:d6:f1:e5:e7:dc:27:7d:4e:fd:60:7e:3f:
a0:5f:27:ea:b6:20:9d:5b:fa:9b:79:12:1e:e9:58:98:b1:d0:
d3:06:a8:e4:0f:bb:62:50:3a:d2:b5:6d:7e:f0:4d:cb:97:f5:
55:68:3c:9d:69:1b:2a:00:cb:a9:b2:25:c4:a5:9d:41:da:ec:
3e:d4:78:88:b6:1d:65:e9:cf:10:fc:1c:b3:2a:30:72:f2:5d:
01:1f:4a:3b:e9:d9:61:ee:f6:6c:57:f6:3d:ff:d0:ed:15:18:
32:0e:13:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:42:33 2024 by rpki-client on console-fra.rpki-client.org