Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/UvsSwmzMHfe8XHQclu3B1tar4_w.roa
File: UvsSwmzMHfe8XHQclu3B1tar4_w.roa (raw, json)
Hash identifier: AfdGGyaot3GhUrKOko8uNgN5S+tV5IXi28L3HEfVPD0=
Subject key identifier: 52:FB:12:C2:6C:CC:1D:F7:BC:5C:74:1C:96:ED:C1:D6:D6:AB:E3:FC
Certificate issuer: /CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Certificate serial: 018D58876D84A001AC3141AAF5B45B60CD89
Authority key identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/UvsSwmzMHfe8XHQclu3B1tar4_w.roa
Signing time: Tue 30 Jan 2024 04:01:26 +0000
ROA not before: Tue 30 Jan 2024 04:01:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34336
IP address blocks: 91.209.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:58:87:6d:84:a0:01:ac:31:41:aa:f5:b4:5b:60:cd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Validity
Not Before: Jan 30 04:01:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52fb12c26ccc1df7bc5c741c96edc1d6d6abe3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:b5:b1:d0:99:ec:0e:a6:8a:6d:60:cb:7f:
c1:81:ae:17:4d:85:d3:9b:1a:a9:32:55:a1:71:17:
9f:bd:b1:f7:79:4d:9e:4d:69:39:30:63:6a:5a:7b:
b0:60:48:73:bd:73:78:d8:f0:70:b7:07:56:97:b6:
15:01:78:bb:f8:4b:7b:4f:71:3d:b0:25:fd:13:08:
54:42:1b:42:d8:a4:a7:89:cd:e9:4c:0a:bf:85:ce:
d7:9f:7f:23:46:07:d6:51:37:63:b3:82:c2:9c:f1:
fe:c5:82:c2:0e:d8:64:21:f7:56:fe:5d:be:bd:69:
bf:7e:ea:e5:90:bc:9a:cc:a6:af:45:9e:b5:aa:10:
d2:1e:87:db:00:bf:0a:d1:c4:5b:df:aa:17:53:6a:
a6:44:67:c5:eb:13:11:aa:ac:62:c2:7f:e1:c1:20:
87:5d:72:5f:85:58:4c:f9:54:12:a0:58:93:e4:06:
09:7a:65:70:fc:20:a1:c1:39:35:9d:69:ac:e4:9e:
84:f8:96:fe:f3:5d:2e:7c:0f:94:09:27:73:ae:0f:
c2:fe:3e:87:70:c6:fa:5c:3d:81:be:04:8c:db:9f:
46:1c:65:87:4f:25:de:a6:8d:9f:58:98:25:5f:ff:
b4:f8:8c:85:4a:47:0d:c7:1f:0d:37:3d:e6:47:f7:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FB:12:C2:6C:CC:1D:F7:BC:5C:74:1C:96:ED:C1:D6:D6:AB:E3:FC
X509v3 Authority Key Identifier:
keyid:CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/UvsSwmzMHfe8XHQclu3B1tar4_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:65:ed:b6:e3:3f:ec:51:74:8f:1b:11:74:1d:0c:36:a2:c4:
80:c0:e4:5c:fe:4b:73:44:38:bd:00:ca:a2:84:fa:91:86:b1:
67:84:3b:32:2e:e5:4f:a6:e2:b5:d3:a2:aa:cc:fc:54:03:81:
70:12:9f:b1:ff:c9:7a:51:f4:a1:66:45:f0:17:d8:da:b3:b5:
65:4c:e6:b3:98:46:a5:b8:c0:e4:0a:35:67:80:25:c0:44:a2:
5f:ed:6d:6b:9e:fa:9f:d5:0e:05:ac:60:5b:c2:b9:73:31:31:
f6:82:c3:2e:64:c3:c1:09:ac:17:e1:cf:41:0a:08:d3:83:e1:
ce:e6:4a:63:81:00:ab:23:0c:50:06:56:c6:67:05:7d:f5:b5:
0c:cf:c1:26:6a:78:3e:49:54:b2:a1:0b:cf:60:7a:2b:06:cb:
fc:36:0f:af:24:53:0f:5a:ee:99:8c:01:59:74:b3:90:6d:de:
8e:91:2a:fb:7d:8d:db:c2:6f:a3:8e:b6:52:21:c9:48:4f:e5:
ea:2e:7f:33:92:2e:37:21:87:02:1e:c3:96:7a:a9:05:73:aa:
80:d2:ed:e7:01:29:a1:a3:2d:d5:49:fc:fd:53:81:a0:df:c9:
ca:b2:80:1c:fc:a9:fe:1d:c8:80:51:1b:56:1f:49:bd:9f:df:
93:3c:b9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:04:57 2024 by rpki-client on console-fra.rpki-client.org