Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/_UG76Zz_SvoSvzF0m3BhxDDOzCg.roa
File: _UG76Zz_SvoSvzF0m3BhxDDOzCg.roa (raw, json)
Hash identifier: jQ/ossc1Zd8YPMpjJDRVtuEk5GqWJYWZlr7AslrreLY=
Subject key identifier: FD:41:BB:E9:9C:FF:4A:FA:12:BF:31:74:9B:70:61:C4:30:CE:CC:28
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 018CC72721CFC52DD222EE05F83E831A96A6
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/_UG76Zz_SvoSvzF0m3BhxDDOzCg.roa
Signing time: Mon 01 Jan 2024 22:31:19 +0000
ROA not before: Mon 01 Jan 2024 22:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43135
IP address blocks: 91.225.55.0/24 maxlen: 24
91.225.54.0/24 maxlen: 24
91.225.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:21:cf:c5:2d:d2:22:ee:05:f8:3e:83:1a:96:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Jan 1 22:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd41bbe99cff4afa12bf31749b7061c430cecc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:80:2c:8e:7c:35:37:45:ca:9c:9e:01:d0:
d4:75:a1:ef:74:14:4d:6b:05:26:93:39:35:51:5f:
b5:f6:36:d1:8f:51:5d:9f:db:9f:9f:5b:09:16:6c:
f1:79:c5:54:85:7e:28:53:7f:75:16:c6:87:d1:d7:
b0:83:0c:2a:53:44:03:7d:d0:3d:f8:c7:42:88:ba:
3e:dd:56:ef:5e:b3:83:c1:cd:98:a8:42:8e:bb:62:
3b:d7:16:26:e9:b3:d2:d3:6d:da:35:3d:2e:24:15:
11:c8:8b:cf:a1:00:49:d4:06:e3:16:aa:1e:aa:1c:
f0:28:2d:d2:56:ff:0b:e9:2c:0c:20:76:e4:dd:24:
c7:ab:27:2e:9d:ae:78:9c:e1:54:b8:de:bd:ce:1b:
97:7b:1b:4a:e3:3c:d6:66:31:2f:ed:51:05:21:74:
3f:2d:cb:b0:71:84:ba:01:7a:b0:c1:da:96:04:80:
d4:65:e1:5c:8e:c8:d9:b3:1a:f5:45:2d:42:78:2c:
1a:07:c4:f9:21:2d:be:f0:04:90:15:e1:ee:00:9a:
e1:f9:ae:e5:0c:2c:ea:25:b2:23:4c:77:b6:a8:df:
19:ff:69:b8:37:98:2c:8b:c0:e0:7d:07:0d:e8:51:
ae:f4:1d:88:97:a6:01:c9:d5:87:84:2a:4e:ed:34:
a1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:41:BB:E9:9C:FF:4A:FA:12:BF:31:74:9B:70:61:C4:30:CE:CC:28
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/_UG76Zz_SvoSvzF0m3BhxDDOzCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.53.0-91.225.55.255
Signature Algorithm: sha256WithRSAEncryption
8a:b8:17:b3:39:02:ac:46:8c:bf:5b:72:65:56:14:e3:3c:87:
ae:17:30:ec:78:fa:eb:ea:a6:57:bf:1b:2b:4e:55:15:f6:99:
d7:5f:f4:86:59:8a:2d:56:62:54:a0:30:73:1b:d3:72:b4:1e:
39:81:a4:b0:71:68:9b:90:88:d2:a2:5c:16:7c:29:92:f3:5b:
d1:b7:06:e1:14:c7:89:08:6d:13:1c:55:cb:0e:39:ad:5a:37:
88:be:ce:c9:53:65:7e:fc:8e:3f:f7:0e:f2:25:4b:75:4e:23:
66:28:41:6a:19:be:35:27:47:9b:c6:0e:4f:c4:db:f4:c3:18:
9b:d8:a7:5c:72:70:2e:51:15:4e:3f:45:13:3b:ff:b9:12:30:
37:81:52:4e:85:2a:b4:25:8e:c9:3b:2a:e7:60:0f:a6:94:27:
4d:4e:61:f4:1e:7a:29:d7:7e:b4:67:ef:d0:86:f3:57:7d:65:
f5:f6:11:14:04:26:91:28:98:a2:41:c8:b5:4c:54:da:7a:5a:
7b:d0:6e:77:85:60:8e:0c:70:3a:86:c5:bd:77:51:04:d7:1b:
26:f1:fa:5e:f8:30:f2:b2:00:74:e9:94:dd:16:75:7b:34:e8:
b6:e9:74:28:24:8f:0e:e8:52:9d:af:ab:9c:59:c9:5e:a1:4b:
99:d7:3b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 19:07:38 2024 by rpki-client on console-ams.rpki-client.org