Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/hGi216auyYf-auMlg1pdWmCyocI.roa
File: hGi216auyYf-auMlg1pdWmCyocI.roa (raw, json)
Hash identifier: mE/1SOhxa6skcLf/vmSUJorMpJgp+U5ItD0lryNWhq4=
Subject key identifier: 84:68:B6:D7:A6:AE:C9:87:FE:6A:E3:25:83:5A:5D:5A:60:B2:A1:C2
Certificate issuer: /CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Certificate serial: 018CC2DAC28707E08B5C9C062ED1C148ED08
Authority key identifier: D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/hGi216auyYf-auMlg1pdWmCyocI.roa
Signing time: Mon 01 Jan 2024 02:29:25 +0000
ROA not before: Mon 01 Jan 2024 02:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44730
IP address blocks: 91.213.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c2:87:07:e0:8b:5c:9c:06:2e:d1:c1:48:ed:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Validity
Not Before: Jan 1 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8468b6d7a6aec987fe6ae325835a5d5a60b2a1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:66:5a:7c:4a:73:ec:d0:3a:69:ef:5f:4f:79:
75:24:30:17:76:bc:52:00:91:54:d4:6b:3f:39:d9:
ab:42:1b:be:21:5f:8e:d4:40:4c:13:16:eb:70:ef:
03:6b:6b:86:c6:29:52:c7:1c:8e:d4:43:af:b6:53:
31:8e:61:f7:97:73:dc:c4:28:39:ad:b9:18:c5:99:
99:65:11:4b:95:c3:2f:12:20:36:ed:9d:c1:ca:63:
a1:13:d1:c1:2c:c3:aa:24:82:6e:5a:16:36:19:eb:
d7:71:5f:96:6f:fa:8f:c6:aa:80:99:e6:22:0d:5a:
f4:f0:2a:76:10:3b:ac:ac:54:b8:d3:c3:e5:74:64:
7e:43:36:1e:51:e1:c6:a2:df:ce:6a:e1:de:ff:32:
01:f7:89:93:50:4d:47:d1:47:f9:c2:09:8a:0f:95:
cc:38:98:84:b1:c6:5d:0a:2d:43:bb:0c:5a:fd:60:
c1:29:7f:c1:8c:67:c3:e7:6b:fc:50:4d:e7:91:8b:
ae:0a:97:64:4d:36:19:ef:00:b9:19:00:bf:78:2b:
8f:60:a5:a9:6d:45:d9:81:9f:b2:bd:db:dc:eb:be:
36:f0:d4:cc:95:ce:9e:91:dc:95:c4:05:40:8d:7d:
9a:dc:72:85:db:df:af:c2:aa:b0:2b:01:a6:f6:fe:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:68:B6:D7:A6:AE:C9:87:FE:6A:E3:25:83:5A:5D:5A:60:B2:A1:C2
X509v3 Authority Key Identifier:
keyid:D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/hGi216auyYf-auMlg1pdWmCyocI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.241.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:c9:97:6a:e7:1e:f9:0e:bb:88:fc:d8:f8:7d:c9:c7:c0:75:
54:a4:69:bf:4c:46:4c:5a:47:d4:1e:15:21:10:a0:13:db:38:
71:6f:96:db:de:d5:2a:b3:93:c5:5e:2e:f7:ed:32:1f:bb:a4:
30:e7:c0:9b:80:84:5d:7d:36:49:a4:21:6f:41:bb:34:0d:2f:
34:77:28:c6:98:68:fe:9c:14:10:e5:b1:35:63:01:31:62:1a:
bf:ea:dd:4c:60:5a:19:d7:fe:22:07:b3:d4:fa:28:2b:c3:54:
9d:3c:01:e0:bd:e8:87:c1:e2:96:92:12:ad:06:48:51:cf:af:
3b:ac:4d:b4:f1:08:28:e5:51:b3:ab:44:48:79:5b:15:eb:6f:
28:e1:59:9f:72:f9:aa:eb:52:d8:64:98:8f:82:b1:44:8b:3e:
26:11:d4:5a:8f:c9:67:a8:c7:df:5e:f0:61:8d:64:73:d4:e9:
51:d7:a8:9b:f2:a9:97:ed:88:41:d4:e1:98:e6:1f:98:f9:9b:
75:cf:05:e6:06:a6:c6:6b:d8:88:dd:1f:ed:36:c7:4a:30:d2:
ea:7c:af:2c:12:db:05:38:28:3b:53:9f:a3:a2:a4:9a:7a:1c:
4d:18:e7:e2:c8:55:ff:68:6e:b9:a7:92:56:c6:27:54:e6:b0:
b7:1d:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:09:45 2024 by rpki-client on console-fra.rpki-client.org