Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/_TaA45OJKx0v6cd3c1ST6De4ZsY.roa
File: _TaA45OJKx0v6cd3c1ST6De4ZsY.roa (raw, json)
Hash identifier: pHaPqHD4hGpHoPCfDjSmKqRR2Gm4RWTSZ6pWLRehYIs=
Subject key identifier: FD:36:80:E3:93:89:2B:1D:2F:E9:C7:77:73:54:93:E8:37:B8:66:C6
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 018CC500E2E7668CC2DF9159BE64B63F50CF
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/_TaA45OJKx0v6cd3c1ST6De4ZsY.roa
Signing time: Mon 01 Jan 2024 12:30:18 +0000
ROA not before: Mon 01 Jan 2024 12:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51195
IP address blocks: 91.216.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e2:e7:66:8c:c2:df:91:59:be:64:b6:3f:50:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Jan 1 12:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd3680e393892b1d2fe9c777735493e837b866c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a1:91:eb:71:10:bd:41:7d:ca:3d:16:57:1c:
01:b6:c1:f6:31:aa:a7:88:eb:c5:fd:a2:4f:ee:01:
5e:78:2f:e3:f4:88:92:bb:82:64:1c:88:31:78:ac:
9d:35:00:a8:04:0d:d6:06:a2:3c:81:8c:25:0c:65:
06:57:95:96:4c:6c:c7:b8:6f:a8:d4:58:39:f1:83:
eb:b0:a8:29:1b:24:92:11:f3:8e:5e:b3:9f:02:f4:
f5:0c:18:61:c4:55:43:62:1b:17:3d:be:dd:3b:35:
a8:9e:45:ce:df:a8:e5:f7:a4:27:c4:df:e1:42:31:
26:28:fa:05:ee:86:8d:d0:29:f2:08:22:af:b2:b6:
20:dd:0f:0f:f4:55:48:1a:f0:41:f5:c5:16:7f:e5:
a2:ea:8b:c3:b7:9a:45:df:14:2f:47:5f:5c:c7:d9:
36:2e:3e:e9:e5:53:64:24:20:5d:97:65:c4:f5:d1:
d2:3c:49:52:75:a6:04:ae:45:c5:f1:83:5d:36:69:
e3:37:13:4e:4b:b0:c3:94:71:58:c4:5a:30:35:78:
34:2d:c1:b3:72:cc:4f:57:a7:39:95:87:69:f5:7b:
fa:9a:f3:6f:14:9f:a7:db:20:39:6e:c4:bc:95:04:
e0:0a:47:07:82:67:db:dc:b5:1a:53:46:88:fb:2c:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:36:80:E3:93:89:2B:1D:2F:E9:C7:77:73:54:93:E8:37:B8:66:C6
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/_TaA45OJKx0v6cd3c1ST6De4ZsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.199.0/24
Signature Algorithm: sha256WithRSAEncryption
31:21:c5:df:e7:53:0d:a3:eb:b7:c3:e3:c5:0b:68:46:6d:a6:
31:4c:eb:26:21:bb:0f:96:23:71:48:0e:c6:2b:25:80:7d:18:
8d:12:08:74:53:2a:5e:12:8c:e6:48:8c:92:2c:f9:e3:4a:81:
d0:fe:65:10:eb:db:f1:82:42:cc:d4:52:c1:da:b7:45:29:63:
89:29:62:9b:0d:91:22:3f:36:9d:7e:2c:d9:42:4f:43:99:95:
a4:cc:c2:30:6f:c4:01:a3:8f:3a:02:c1:18:95:e4:6b:49:1c:
6e:64:7a:a7:50:a1:81:91:3b:a1:07:2e:fd:05:a7:50:ae:c4:
b1:27:f0:22:b6:19:9c:8d:c6:11:5d:52:b8:92:d7:a6:a3:e5:
fc:a8:cd:b9:a0:69:76:57:f7:c5:b9:a8:e5:63:85:60:b7:96:
f1:ba:8c:5d:39:e0:8d:f0:50:9e:3d:ef:03:92:ba:d9:bb:39:
45:e3:60:57:c4:de:79:42:9f:cf:7a:bd:49:28:30:ff:e6:b3:
e1:3d:1c:ef:2f:e0:1f:43:cf:32:e6:57:15:15:d2:1d:10:7d:
e5:49:51:2b:01:d5:6f:90:4c:65:48:9b:3f:3a:fc:a7:b3:ad:
8d:56:1a:1f:f8:73:af:6e:1e:e6:65:93:32:6a:bf:5c:34:f0:
d4:02:bb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:45:33 2024 by rpki-client on console-fra.rpki-client.org