Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/UWd5z3Flv5pBPD8qWf3IQbpc-Mg.roa
File: UWd5z3Flv5pBPD8qWf3IQbpc-Mg.roa (raw, json)
Hash identifier: yTav2cL5IqwqxUtuT45GaBA+XS+4snC9uPlVVN8GvEk=
Subject key identifier: 51:67:79:CF:71:65:BF:9A:41:3C:3F:2A:59:FD:C8:41:BA:5C:F8:C8
Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial: 018CC56E324E1ECD1281CA0D493319925898
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/UWd5z3Flv5pBPD8qWf3IQbpc-Mg.roa
Signing time: Mon 01 Jan 2024 14:29:42 +0000
ROA not before: Mon 01 Jan 2024 14:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44189
IP address blocks: 91.199.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:32:4e:1e:cd:12:81:ca:0d:49:33:19:92:58:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Validity
Not Before: Jan 1 14:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=516779cf7165bf9a413c3f2a59fdc841ba5cf8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:2e:64:83:88:e0:0d:2f:50:c6:1a:71:99:
2a:f1:09:d9:e8:f7:62:ec:d5:28:c3:e8:02:0a:e3:
3d:dd:93:e6:05:82:22:12:3e:31:d6:e9:81:b0:02:
0a:4c:9b:93:00:e8:43:06:ed:b0:ca:51:97:6b:5f:
2b:8f:8e:fb:29:46:16:7b:4f:5d:97:f5:fc:e7:2f:
a9:5b:6d:3f:37:01:83:ca:91:f2:ef:48:05:ea:7f:
74:66:6b:ec:6f:7d:0f:89:ac:5e:06:31:14:f7:af:
09:c9:d8:81:bf:70:e6:0d:74:79:35:1d:40:c3:62:
85:33:71:49:62:02:23:76:a4:03:31:e6:54:c1:ea:
a0:9e:62:1a:3c:8b:5c:41:22:6d:3b:b6:5a:ac:81:
18:d6:e7:f5:38:d7:49:33:dc:20:6f:e7:7a:e6:d0:
61:4e:bc:45:63:05:5c:c9:eb:1d:a5:77:08:d5:ed:
72:96:32:79:75:7c:50:a4:73:62:b3:c9:d2:11:1b:
ec:2b:30:7e:26:8e:64:d2:83:75:87:9e:83:27:7e:
72:61:c7:a9:72:c4:63:69:9f:c2:41:85:d2:e7:c7:
53:2d:e4:3a:9c:f9:fa:9c:21:ef:28:bb:7f:0e:fa:
19:9b:f3:01:08:86:f9:52:a9:ee:0d:46:84:c0:5a:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:67:79:CF:71:65:BF:9A:41:3C:3F:2A:59:FD:C8:41:BA:5C:F8:C8
X509v3 Authority Key Identifier:
keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/UWd5z3Flv5pBPD8qWf3IQbpc-Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:09:58:6d:92:de:d9:0e:cb:19:3e:10:84:50:75:8c:e9:31:
58:23:9d:0a:2e:69:e8:01:36:d6:6c:6e:84:69:aa:3a:11:47:
b6:a8:00:ed:b7:72:b7:4e:41:b7:9c:56:7d:a5:05:82:c1:13:
5c:3f:0d:d8:f6:cf:1e:8b:54:68:35:29:47:9d:b7:df:9a:e9:
8a:96:01:97:ed:b2:1a:cf:78:d9:41:43:b5:8f:26:a1:2a:1a:
46:4a:9d:f4:3d:5e:46:5f:93:a4:be:69:6c:59:de:8f:b8:6a:
1b:e4:86:07:e5:bb:76:cf:01:a9:31:89:13:d6:34:af:04:90:
94:dc:ed:03:5a:d1:6b:cb:c4:d4:e8:93:61:c3:4f:c3:5b:c3:
a4:f7:fc:98:78:ce:8b:49:bb:b4:56:f5:5f:f7:9e:1b:30:8d:
38:d7:d2:6c:fd:db:01:cc:ed:8f:94:f1:eb:8a:24:5a:0a:4d:
e7:f1:a8:b5:2e:88:b5:8e:c5:33:09:ab:c8:cd:ab:66:82:fc:
6a:70:bd:c9:4c:3f:a5:c6:b7:f4:4a:09:f2:5d:ab:7e:eb:50:
40:22:2f:0c:3c:22:01:fc:a7:86:ba:64:7c:f8:31:d9:da:10:
83:a3:db:3c:65:3f:6a:2c:3d:41:86:1f:65:e3:0e:26:26:43:
0e:c2:15:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:08 2024 by rpki-client on console-ams.rpki-client.org