Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/VwjjYtPJvgGgurfm49UOwUpmg4s.roa
File: VwjjYtPJvgGgurfm49UOwUpmg4s.roa (raw, json)
Hash identifier: zO1nITNSUWukRq5vohXTTqxaT7ZA+0Q19wugr5lcWk4=
Subject key identifier: 57:08:E3:62:D3:C9:BE:01:A0:BA:B7:E6:E3:D5:0E:C1:4A:66:83:8B
Certificate issuer: /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Certificate serial: 018CC94D6CF38E4519F0536C52B71CD89103
Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/VwjjYtPJvgGgurfm49UOwUpmg4s.roa
Signing time: Tue 02 Jan 2024 08:32:23 +0000
ROA not before: Tue 02 Jan 2024 08:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197602
IP address blocks: 91.224.178.0/24 maxlen: 24
91.224.178.0/23 maxlen: 24
91.224.179.0/24 maxlen: 24
2001:678:f58::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:6c:f3:8e:45:19:f0:53:6c:52:b7:1c:d8:91:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Validity
Not Before: Jan 2 08:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5708e362d3c9be01a0bab7e6e3d50ec14a66838b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:96:6f:ad:6b:52:c3:69:f8:c8:8a:d7:c5:
15:53:c5:12:45:c0:b1:b8:47:1b:6c:ae:27:3f:77:
aa:1c:89:fc:d3:65:c0:98:b8:1b:07:7f:12:ff:97:
5b:99:0c:73:28:6d:09:98:98:e6:a1:31:fe:41:b8:
9d:e4:99:b9:6a:c0:7e:e2:85:b8:ac:f0:5f:ac:37:
be:9c:17:bb:d6:56:95:40:08:57:b0:27:c7:ec:fc:
75:6a:31:c4:03:9f:d7:51:6b:88:96:a2:23:ba:e1:
aa:38:aa:7d:ad:55:f8:06:43:fa:7d:d0:f3:de:e9:
63:09:4b:61:20:97:9f:5a:29:67:9f:86:49:d0:86:
17:e2:01:da:8e:7c:63:fe:61:37:7c:91:36:a4:9c:
d9:e3:76:bb:76:48:4d:b0:3a:47:2c:bc:ac:35:c0:
19:ff:1c:16:2f:83:74:45:1c:b2:e7:9c:8b:07:d1:
ab:20:4d:e9:12:31:30:33:25:76:ff:ac:be:61:b8:
ed:ea:24:8b:08:2c:02:75:25:c4:09:43:42:0f:8a:
97:35:55:97:c3:af:89:ad:57:85:ac:99:c8:f6:03:
28:ad:82:48:25:75:b2:66:18:55:bd:b7:54:33:0f:
04:c0:6c:17:50:81:2b:00:b9:5e:01:dd:a4:0c:c9:
b7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:08:E3:62:D3:C9:BE:01:A0:BA:B7:E6:E3:D5:0E:C1:4A:66:83:8B
X509v3 Authority Key Identifier:
keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/VwjjYtPJvgGgurfm49UOwUpmg4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.178.0/23
IPv6:
2001:678:f58::/48
Signature Algorithm: sha256WithRSAEncryption
33:6a:c5:b1:0d:92:cd:2b:22:8d:ab:0f:fe:a3:99:48:b1:1d:
de:04:24:1c:6d:9b:f9:a1:b1:6a:e0:d4:c3:76:d8:f8:4c:11:
15:3f:9a:ae:68:50:7b:8f:16:3c:2d:1b:71:83:cf:b3:d2:ef:
7e:ec:b0:89:1b:e4:bd:2f:2f:46:fd:9c:7f:56:25:87:89:b4:
43:d0:8c:01:da:23:5b:eb:07:a4:29:9b:20:e2:51:2f:80:01:
ea:6b:7c:11:c2:7d:ef:2a:44:b8:12:40:c6:b1:df:ed:ef:9d:
e7:71:14:b7:91:e0:fc:45:cb:1e:2d:aa:15:9f:e3:58:ff:5c:
ea:9e:89:8e:85:a2:b2:2d:e4:cb:e5:33:85:bf:2e:39:ea:f8:
65:d6:ee:9a:1c:0b:08:97:2d:94:d0:1e:2f:18:0a:1c:a3:ed:
dd:fb:e5:71:93:e6:83:48:fe:31:69:db:10:1c:0d:5d:99:e8:
00:06:16:72:6d:ab:e7:1d:56:d9:b8:5d:bd:d2:1c:9b:a9:1f:
0a:53:9c:df:63:76:51:33:e8:43:57:22:07:bd:90:a0:dc:1d:
62:67:c5:d8:3c:a9:7b:0a:6d:c4:b5:a4:92:b2:c6:43:e6:24:
8d:f3:86:66:ee:14:90:23:4c:da:b8:a5:be:78:cf:4a:cc:f4:
d4:3f:08:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:59 2024 by rpki-client on console-fra.rpki-client.org