Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/ugbhVJYiLZ2tF_OQCFOFVRB5zqw.roa
File: ugbhVJYiLZ2tF_OQCFOFVRB5zqw.roa (raw, json)
Hash identifier: iXL3C2bOR47H+4x/c4DBH/byY4TqOZNTB1faZXGATIs=
Subject key identifier: BA:06:E1:54:96:22:2D:9D:AD:17:F3:90:08:53:85:55:10:79:CE:AC
Certificate issuer: /CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Certificate serial: 018CC500723CA570F932294F2986EAFABBD5
Authority key identifier: E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/ugbhVJYiLZ2tF_OQCFOFVRB5zqw.roa
Signing time: Mon 01 Jan 2024 12:29:49 +0000
ROA not before: Mon 01 Jan 2024 12:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48943
IP address blocks: 91.211.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:72:3c:a5:70:f9:32:29:4f:29:86:ea:fa:bb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Validity
Not Before: Jan 1 12:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba06e15496222d9dad17f390085385551079ceac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a5:9a:2d:16:00:97:67:be:22:d9:b7:dd:59:
fe:94:2a:8d:53:39:49:48:a2:f0:44:6e:b2:db:ba:
b2:e6:c2:bf:e2:3e:92:b8:58:78:a9:f4:b7:fb:c3:
ba:bf:5b:0d:18:54:5e:c1:20:c2:86:fb:73:b9:f5:
ec:b3:ea:01:27:8b:71:c1:95:ea:b6:31:a8:20:a3:
46:1a:fe:e0:ca:8c:a0:1e:73:65:04:3f:e3:ba:0d:
cb:25:8a:ac:cc:38:96:bd:a4:65:67:a7:4e:ce:3c:
07:8e:bc:79:3a:49:3d:50:3e:d9:a6:25:3a:83:43:
c0:3a:d7:0a:52:57:84:57:ef:31:0a:8c:3f:ac:42:
8d:2f:95:60:d8:49:5b:f2:21:ed:f0:90:cb:71:44:
b5:f0:33:98:4a:bf:0f:46:a6:41:41:c9:7d:d4:f9:
11:ae:01:af:5a:68:ca:de:89:9a:c5:13:2f:54:4c:
5d:ce:ae:aa:51:3d:8d:e6:7f:d9:39:5d:25:f4:9b:
7e:6c:56:d7:7a:21:88:c1:5d:b6:61:a5:8f:30:8a:
4b:67:7c:c6:f0:19:70:e5:83:d9:17:73:c7:63:df:
c1:59:5f:d8:db:70:f6:86:ba:ec:41:ec:07:a6:be:
ef:9e:d6:05:8f:ae:f6:ac:9d:18:84:28:83:ea:ba:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:06:E1:54:96:22:2D:9D:AD:17:F3:90:08:53:85:55:10:79:CE:AC
X509v3 Authority Key Identifier:
keyid:E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/ugbhVJYiLZ2tF_OQCFOFVRB5zqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.32.0/22
Signature Algorithm: sha256WithRSAEncryption
66:a8:b8:34:5b:58:77:f1:a9:14:22:c0:2f:f2:26:28:48:13:
04:6e:f3:fa:7d:29:0b:e9:c9:d9:73:f8:64:9b:5d:bd:64:2a:
e4:bd:dc:78:42:6d:f5:63:c0:d6:0f:5a:d9:1d:52:02:22:15:
f4:ba:ac:d0:09:d7:e7:c0:01:5f:f4:f0:86:2e:c2:a6:0d:c0:
d5:d4:16:91:e0:bb:3e:63:11:a3:f3:cd:6c:9d:fa:b7:88:b5:
a1:c0:cf:06:18:a2:3d:e6:56:10:67:73:4a:71:e8:ca:3f:1d:
d0:38:81:a4:71:5d:d1:b7:db:27:92:e1:ba:56:19:5d:11:b2:
c9:f4:6e:6d:b0:4d:4d:55:6b:54:c4:96:cb:a2:7f:ab:70:f4:
61:ba:a0:1d:41:ad:5d:04:7c:4b:c5:25:a0:f9:83:d4:aa:4e:
5f:12:3f:14:16:44:cc:3d:95:08:48:fa:0f:ba:94:a1:4b:7a:
fc:fb:7f:ec:d7:4f:7c:bf:14:88:ab:82:2d:25:0e:65:c4:f0:
dc:94:72:c1:35:53:3f:f1:5a:fe:31:71:9d:18:f2:85:e3:2a:
3d:66:c2:60:da:44:ad:4c:94:6e:37:ee:d5:35:cf:db:8e:ce:
f6:ff:09:5a:f3:9d:bd:be:b9:0a:4e:57:ef:43:72:cd:6d:6e:
3c:1a:38:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:40:16 2024 by rpki-client on console-fra.rpki-client.org