Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/aNXqmCzLbQnouT_jT1G1K7EstME.roa
File: aNXqmCzLbQnouT_jT1G1K7EstME.roa (raw, json)
Hash identifier: 8EnLT68MmT6qhkBXpPOlCTp8EieWlpovGv0PlCXvaIw=
Subject key identifier: 68:D5:EA:98:2C:CB:6D:09:E8:B9:3F:E3:4F:51:B5:2B:B1:2C:B4:C1
Certificate issuer: /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial: 018CCA2A33D3ED0F98A361D090127C3365BF
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/aNXqmCzLbQnouT_jT1G1K7EstME.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198915
IP address blocks: 91.240.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:33:d3:ed:0f:98:a3:61:d0:90:12:7c:33:65:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68d5ea982ccb6d09e8b93fe34f51b52bb12cb4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:45:27:b1:fb:3f:25:47:87:3b:18:6b:aa:
ff:c3:fc:62:c9:62:4d:24:46:81:59:79:d9:02:3b:
3e:91:56:cc:c3:d8:08:5e:ce:a9:83:da:4e:08:af:
8e:be:06:33:7a:25:18:ee:37:b3:11:a1:2b:33:a9:
f0:01:73:63:b6:8e:b4:13:21:37:05:8b:0e:fa:a7:
c3:46:c7:73:7b:49:12:1b:03:03:70:c6:bd:93:2a:
93:77:d3:4d:48:60:83:c2:97:ca:89:d4:54:37:0b:
99:49:da:d8:57:7e:a7:d6:9d:32:48:01:87:37:6e:
01:34:33:cd:a7:a9:8e:0d:27:37:7b:47:8c:af:c2:
06:c9:19:3f:81:fb:d6:e5:3f:62:30:aa:ca:82:0e:
ec:28:15:d8:84:08:6d:25:1e:b4:e6:e7:74:40:ee:
8f:66:2e:88:d2:32:d7:86:e9:93:46:47:a2:5d:1b:
65:da:b5:3c:c9:9a:f3:e2:37:d0:81:f0:0d:1a:bb:
53:d3:15:7a:e4:e6:7e:b1:c2:23:3d:a3:76:d9:c5:
b8:79:89:68:6d:f4:dd:dc:42:11:bd:78:ef:b4:cc:
bf:e3:37:b8:e5:96:eb:f8:08:01:c1:36:df:a7:1e:
c4:31:6c:f2:34:89:ad:a2:9d:1a:e2:a3:32:de:2b:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D5:EA:98:2C:CB:6D:09:E8:B9:3F:E3:4F:51:B5:2B:B1:2C:B4:C1
X509v3 Authority Key Identifier:
keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/aNXqmCzLbQnouT_jT1G1K7EstME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.70.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5e:24:18:6a:6b:01:1b:01:9b:1c:3f:fe:da:0a:99:ee:c9:
ac:8b:75:65:4b:18:3f:ff:1b:bf:bc:ea:5b:b3:20:6a:23:68:
92:0a:c5:39:81:bd:07:c9:96:34:60:73:4a:a3:68:d4:c7:df:
fa:b4:01:54:31:2b:18:95:2c:8b:cd:38:44:97:d0:5a:8f:43:
54:cb:0e:0f:fd:69:7b:5f:1b:e6:14:61:1b:9c:ec:a3:9f:09:
90:62:88:11:00:36:4a:eb:43:5b:98:88:81:88:52:b9:60:1b:
68:a1:4f:07:93:14:fa:f7:02:e1:86:39:74:1c:ed:72:6a:eb:
71:21:e1:97:d7:d1:45:40:0f:d8:07:0c:36:8d:33:f2:6a:e4:
55:a8:6a:bf:63:6e:b7:ce:ab:2f:2f:67:0c:91:df:20:5b:5f:
0b:6f:29:be:dc:7f:4d:d1:ca:41:3e:72:43:5a:46:b8:2f:00:
1d:b0:79:61:ef:97:ca:f3:c1:e2:d9:07:cb:70:91:a4:ba:cd:
c5:53:16:65:d3:4d:c9:39:4e:72:a6:87:c3:82:66:45:98:6d:
17:08:36:e7:3f:ee:97:ef:6c:7a:f6:71:13:78:49:fa:33:1c:
c9:02:1f:e9:78:0f:7d:2b:b9:7d:4a:e9:ec:79:6f:6e:c0:c0:
51:73:58:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:28:27 2024 by rpki-client on console-ams.rpki-client.org