Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/orzdPNB69q7F10soDx5OI1pgULc.roa
File: orzdPNB69q7F10soDx5OI1pgULc.roa (raw, json)
Hash identifier: vgJ5clTmPzmPLcdxdxg5YuN0a3qHNYtz21hy3UMfo1g=
Subject key identifier: A2:BC:DD:3C:D0:7A:F6:AE:C5:D7:4B:28:0F:1E:4E:23:5A:60:50:B7
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC7951FB643B0054A1F2D7AAF25C7708A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/orzdPNB69q7F10soDx5OI1pgULc.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 91.234.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1f:b6:43:b0:05:4a:1f:2d:7a:af:25:c7:70:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2bcdd3cd07af6aec5d74b280f1e4e235a6050b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:ed:a2:d1:39:e0:98:bf:cd:ac:8f:73:bb:
2b:c7:c1:cd:c2:7d:5b:b8:cd:2c:86:10:65:4d:fa:
c4:1b:ab:06:3e:c2:1b:c6:a1:0e:07:64:f4:e7:2a:
a5:bb:47:7f:2a:19:a4:38:e5:41:62:2a:2b:93:a4:
b1:97:96:23:f1:72:1d:d5:26:d3:28:49:94:63:52:
44:b4:1e:ee:2f:3c:39:42:2c:d5:82:57:1b:3a:e1:
d3:e5:c9:ae:6b:66:5e:bf:34:ad:65:b0:38:09:91:
7e:33:ef:02:99:ec:f6:df:99:4b:ff:83:f5:3d:9a:
0e:3f:46:27:ad:1a:5f:fb:d5:6d:41:18:61:04:7e:
d7:d7:14:14:d9:e6:f4:ac:44:f2:85:8b:36:7c:28:
a6:1a:d4:0c:31:d4:f3:86:2d:62:25:00:6a:c7:db:
eb:76:74:40:b7:04:46:53:5b:05:0a:a1:84:d9:01:
cd:49:f9:8e:b5:4c:23:62:88:63:92:63:cc:10:f4:
d5:e2:7d:11:06:89:53:32:8f:23:28:74:26:ad:ca:
9c:44:c7:e6:d9:7a:09:be:bb:dc:07:ab:c4:6e:3d:
18:58:64:74:04:ee:92:78:ae:78:ce:bd:34:6e:33:
7e:5c:a2:e7:bd:19:10:88:9f:67:04:a5:fb:36:8c:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BC:DD:3C:D0:7A:F6:AE:C5:D7:4B:28:0F:1E:4E:23:5A:60:50:B7
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/orzdPNB69q7F10soDx5OI1pgULc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.254.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7c:bc:7a:4b:92:1b:06:b3:0e:3e:82:94:aa:87:44:a1:d4:
7a:93:4e:c5:77:40:a8:bb:db:7a:7e:f1:a6:c5:7b:e8:07:d9:
98:78:81:c1:91:6a:42:1e:77:b6:f5:1a:cd:a1:9f:27:b3:26:
62:3f:9e:4e:dd:6b:94:fe:53:61:91:6c:51:57:22:7d:e5:21:
23:0c:ba:0e:b7:9e:f4:b9:f3:94:87:0f:ea:ae:81:21:57:ca:
1c:69:d5:98:56:2f:f4:22:50:7c:2d:9c:da:fc:d3:cd:07:d2:
93:69:46:2d:d9:bf:2b:e3:ed:bd:6f:6c:71:1b:4c:52:17:27:
63:7e:78:d7:6d:e8:a5:2b:96:ee:8d:a3:df:b3:d5:5d:b7:cb:
89:57:57:9c:5e:85:6d:83:29:50:0a:c7:36:47:52:99:fa:b1:
63:e6:84:98:9e:91:a4:15:5b:5e:49:2f:f2:ac:de:f7:b9:f6:
19:8a:0d:b1:92:39:03:48:a4:9c:25:fb:94:5d:2b:20:12:e3:
05:84:a4:49:83:4d:13:74:84:69:5c:03:fd:56:eb:a5:e4:16:
7e:66:eb:a8:7b:cd:1e:35:ca:3e:1b:fd:68:52:22:00:d4:41:
94:4f:e2:a0:88:c4:e0:94:69:e8:8c:98:26:3a:70:f1:44:b5:
32:18:a3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:48:18 2024 by rpki-client on console-ams.rpki-client.org