Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/5Ty-uz6AxcBSc047Cs_uukA_syk.roa
File: 5Ty-uz6AxcBSc047Cs_uukA_syk.roa (raw, json)
Hash identifier: KeXeuWq+LWbHVypkxQH5KKViprAcpbNZG99G9DKdfBE=
Subject key identifier: E5:3C:BE:BB:3E:80:C5:C0:52:73:4E:3B:0A:CF:EE:BA:40:3F:B3:29
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01921ED59D8ECFEF552ED4D78E43C06480BB
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/5Ty-uz6AxcBSc047Cs_uukA_syk.roa
Signing time: Mon 23 Sep 2024 12:22:48 +0000
ROA not before: Mon 23 Sep 2024 12:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214172
IP address blocks: 91.108.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1e:d5:9d:8e:cf:ef:55:2e:d4:d7:8e:43:c0:64:80:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Sep 23 12:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e53cbebb3e80c5c052734e3b0acfeeba403fb329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:93:8b:2f:a0:0b:fc:7f:33:af:58:8e:66:
03:8c:2c:1c:17:79:2e:1a:83:3f:96:a2:44:3a:f2:
47:11:98:3a:40:b4:3b:50:ad:48:60:f4:06:22:6a:
0b:d2:13:1d:ce:90:04:3c:77:9f:04:f0:b8:c2:ad:
c2:8c:a4:ed:83:b4:7a:8e:97:62:60:77:db:c5:6d:
e9:97:d2:10:43:51:7b:04:62:59:45:c1:29:b4:de:
fa:cd:6e:e3:27:34:8d:db:d4:ab:d2:05:8d:5f:67:
75:10:8c:aa:f5:ed:e6:79:73:59:8e:65:3f:50:a1:
2d:a1:d7:48:39:80:b6:be:fd:d4:89:da:d7:fe:cb:
c9:2b:b5:da:42:f5:38:4c:8f:9d:60:45:1e:f8:31:
9c:89:91:80:36:44:c6:21:b7:ed:d3:42:a6:b2:23:
0c:4c:1e:38:a4:2d:79:3f:23:18:17:71:23:8c:9d:
05:af:29:ea:0b:f2:9f:d5:59:09:e0:c2:15:7f:6c:
e3:77:e5:80:b8:a8:ce:87:74:99:f4:ff:3a:92:d3:
58:6c:a9:4b:a9:0c:0a:e3:a9:fe:9e:5b:39:d8:67:
bb:7b:e0:b2:a1:48:d8:d7:08:20:78:86:dd:46:34:
4b:75:de:db:b6:72:34:77:13:86:7f:ad:85:bf:e7:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3C:BE:BB:3E:80:C5:C0:52:73:4E:3B:0A:CF:EE:BA:40:3F:B3:29
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/5Ty-uz6AxcBSc047Cs_uukA_syk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.243.0/24
Signature Algorithm: sha256WithRSAEncryption
60:02:47:e7:a3:64:de:80:55:45:f3:d6:af:92:bc:92:7e:aa:
87:8c:1d:84:69:ac:cf:c3:c0:d2:6c:41:e0:b4:ff:57:35:e2:
c7:78:cd:9a:71:6a:61:f3:48:89:78:da:69:d0:77:7d:d2:71:
3a:89:ec:80:5f:ac:b9:fc:c1:2c:1c:59:68:af:a3:c1:85:09:
e9:72:88:e6:80:af:2a:90:b0:b0:11:ab:2b:28:ae:2a:91:5c:
46:d7:33:55:24:5e:dd:db:e5:c0:6b:17:f1:1e:93:2a:96:a3:
64:69:cd:75:c8:7d:57:3d:c3:c1:71:8a:bf:f3:72:73:31:8a:
a5:4b:5b:8d:e6:ba:a2:bc:54:ae:01:f9:f3:06:11:a6:2b:c1:
6b:21:02:e2:ad:5e:50:a3:7a:48:2c:c0:f2:05:ee:f2:51:e2:
4a:2f:b2:63:b5:39:6c:dc:89:f6:35:d1:a0:46:dd:ea:58:3d:
c6:d5:15:a5:5a:21:f5:65:fc:00:f0:b8:ed:90:66:92:f1:02:
9d:eb:1b:9e:41:f9:a5:57:2e:98:91:1c:9d:c6:14:b6:ba:9c:
d2:6c:90:e8:e0:03:62:07:92:44:bd:f6:a6:50:a5:7d:c6:c3:
c7:33:91:1f:24:35:97:3c:cc:42:eb:c8:9a:e1:dc:dd:c9:17:
c6:be:38:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:01:16 2024 by rpki-client on console-ams.rpki-client.org