Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/5uhC0eheUBN6rQ3XMshXev9dztw.roa
File: 5uhC0eheUBN6rQ3XMshXev9dztw.roa (raw, json)
Hash identifier: 3pdKrxYISUIVhc3EQm/wrrgszalD60ktw7eJwZxPSB8=
Subject key identifier: E6:E8:42:D1:E8:5E:50:13:7A:AD:0D:D7:32:C8:57:7A:FF:5D:CE:DC
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 018CC64B4EC11108489A2D325B4FA00F78D2
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/5uhC0eheUBN6rQ3XMshXev9dztw.roa
Signing time: Mon 01 Jan 2024 18:31:13 +0000
ROA not before: Mon 01 Jan 2024 18:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 91.188.192.0/22 maxlen: 24
217.68.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:4e:c1:11:08:48:9a:2d:32:5b:4f:a0:0f:78:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Jan 1 18:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6e842d1e85e50137aad0dd732c8577aff5dcedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d4:e9:a0:57:56:e5:ac:fc:f3:71:e0:2c:5e:
33:3b:30:8f:b5:1a:04:06:c3:74:27:a5:74:45:ed:
2c:e1:58:01:d1:5a:fe:ca:92:ab:e0:44:19:b8:72:
83:72:6f:d3:20:89:4d:72:bf:42:93:34:80:4d:ae:
4d:ce:cf:49:f0:3f:ab:bc:5b:be:a0:fb:2d:c3:0a:
ca:11:d2:8f:e9:e1:9b:cf:a1:65:11:20:6b:8e:9a:
49:cd:d2:ee:91:e3:fd:4e:85:2e:fa:a1:cb:67:43:
92:a0:aa:87:7f:92:e5:90:c8:40:4d:20:45:ef:1a:
d2:8a:6e:03:c2:3d:5e:17:86:a5:4c:95:db:5c:e3:
98:22:c8:04:c6:ff:be:a3:01:37:f1:58:54:99:8d:
a5:d5:f1:5d:84:ed:2f:26:33:99:1f:ca:58:45:a0:
48:97:8b:f2:64:c3:a9:4c:bf:67:e6:54:8b:c8:7f:
f0:b4:10:22:c5:1e:1c:9c:71:5a:41:ae:47:04:7b:
4a:6c:cc:3d:98:78:d6:dc:05:c8:a4:d6:6c:6e:28:
80:f9:0c:82:81:51:a1:fa:fd:4e:a2:3b:01:20:7d:
ce:a1:04:6a:be:2f:e3:63:dd:35:c2:98:21:00:06:
e7:b3:24:f9:42:f4:c8:d5:58:02:d3:20:63:77:bd:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E8:42:D1:E8:5E:50:13:7A:AD:0D:D7:32:C8:57:7A:FF:5D:CE:DC
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/5uhC0eheUBN6rQ3XMshXev9dztw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.192.0/22
217.68.208.0/20
Signature Algorithm: sha256WithRSAEncryption
98:cb:d6:93:61:e6:af:1f:20:73:75:e6:5e:08:62:58:9c:1a:
8d:14:17:c1:2d:69:d0:ed:9a:44:f2:fb:70:c9:76:1f:20:f8:
d0:d7:d2:8a:99:32:65:a8:b6:4d:f2:c7:81:06:33:55:1d:85:
ca:51:94:a7:d7:33:24:97:05:57:f8:fe:74:46:40:80:2c:5e:
93:12:01:8d:95:df:5a:2e:f3:ef:02:09:2d:b9:d9:26:a3:9f:
39:5a:27:2a:28:f8:38:a1:37:2d:1f:c4:15:10:c7:23:99:4c:
51:d2:f8:32:6b:61:5d:09:e3:00:95:2e:7a:67:8c:69:4c:5f:
a5:48:2e:90:29:39:9d:af:64:3d:6a:5e:c1:f2:0d:56:26:a4:
f9:9f:fe:a0:ba:5b:d2:88:e4:e0:fb:12:31:43:ea:a0:4d:4c:
06:41:1c:ec:33:1b:65:dd:60:f8:c1:63:6c:52:85:64:0c:28:
9e:c5:4b:1a:06:ec:b3:56:ae:cf:cd:fa:8d:2c:94:0d:89:e0:
12:81:c9:0b:93:7b:e1:ce:ca:67:09:3a:f3:88:b1:e9:42:12:
a9:0c:82:cb:e8:18:df:0b:56:c4:79:73:a8:61:0a:62:1b:33:
0f:33:0b:df:6e:7f:a7:10:f1:36:c1:00:1f:f5:d3:d6:e4:27:
88:0e:26:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:13:20 2024 by rpki-client on console-fra.rpki-client.org