Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/nTlewr6i3K6BdlHNcWOfkAPkKVY.roa
File: nTlewr6i3K6BdlHNcWOfkAPkKVY.roa (raw, json)
Hash identifier: sZw4UONYHMLBi6zmbF32Z3ETyj6M1OAzIwOO1A8KhhY=
Subject key identifier: 9D:39:5E:C2:BE:A2:DC:AE:81:76:51:CD:71:63:9F:90:03:E4:29:56
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BB5BF5E09CAB47936C357CF62DF1A
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/nTlewr6i3K6BdlHNcWOfkAPkKVY.roa
Signing time: Tue 02 Jan 2024 12:35:11 +0000
ROA not before: Tue 02 Jan 2024 12:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25154
IP address blocks: 212.91.19.0/24 maxlen: 24
212.91.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b5:bf:5e:09:ca:b4:79:36:c3:57:cf:62:df:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d395ec2bea2dcae817651cd71639f9003e42956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:c1:f1:4d:80:8a:c1:c2:97:d7:5d:c5:7b:
46:a6:75:e5:f9:b5:73:28:c3:8e:3c:47:21:e5:6a:
49:a2:be:f9:88:3d:ce:3b:8c:e3:aa:38:e5:66:96:
fd:b8:a7:b1:20:e4:03:03:af:8a:3b:0c:f8:e2:0f:
28:3c:74:3c:f6:19:b9:98:fd:bf:b4:6a:46:50:ba:
6c:fd:57:4f:47:b1:3f:95:d8:35:2b:d7:ee:1f:40:
e5:d6:fd:b3:ba:17:00:64:65:42:87:7f:71:90:dd:
d9:97:59:6b:49:d2:3c:7c:27:f3:28:4d:f0:3c:db:
83:05:94:b3:61:57:06:8f:f7:a5:ed:f2:35:4b:7a:
3c:fd:47:11:ef:0d:31:45:ac:05:f2:39:6e:b1:7c:
7a:c9:f7:e0:4e:f1:37:7c:d3:78:a9:db:8a:cc:f0:
a2:0e:23:55:4d:75:07:a0:45:39:e3:6f:b8:51:f1:
69:40:88:d3:5e:2f:c8:c7:4f:be:00:97:c2:68:cd:
e5:33:70:18:ed:2b:e2:39:f5:b5:02:ae:e5:27:38:
83:20:1e:21:58:a3:d4:00:27:1a:62:16:e4:0b:5e:
86:15:98:dd:68:c6:cb:c5:24:11:c1:e0:b1:90:d6:
a6:91:a1:bc:41:a4:3f:c6:22:d1:c2:69:44:e6:61:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:39:5E:C2:BE:A2:DC:AE:81:76:51:CD:71:63:9F:90:03:E4:29:56
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/nTlewr6i3K6BdlHNcWOfkAPkKVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.18.0/23
Signature Algorithm: sha256WithRSAEncryption
10:5f:b0:53:d9:7a:f6:75:a5:dc:cd:1f:35:7f:a4:4f:5c:90:
db:a6:3d:14:94:72:0e:27:a7:03:ac:87:51:ba:14:69:10:00:
7e:0b:28:d2:17:17:ec:9b:dc:87:dc:fd:d5:9f:67:78:a5:19:
96:5b:45:ae:9c:68:73:d7:b8:8b:4c:fa:db:7d:61:30:92:c1:
a8:5d:c4:28:58:f6:8f:88:e7:82:d3:24:d0:72:bb:ae:96:05:
3e:4e:40:46:f2:ac:d6:9d:57:d4:ec:cb:a5:50:4d:5e:17:55:
66:5f:3e:9a:fc:81:83:47:c6:d3:b4:5c:fa:9b:8c:fc:5f:24:
09:e3:09:ee:3d:c1:1b:41:13:3c:4b:4c:0d:6f:17:2d:a9:39:
f7:66:b3:70:33:60:f0:e2:e8:3e:2a:1d:27:3a:70:56:0d:a9:
80:d2:3e:ca:89:2a:50:b5:fc:98:f2:55:fa:da:29:01:29:f3:
84:ff:d5:87:a6:28:4c:e2:aa:5a:bd:c5:e8:90:1c:53:30:fd:
ba:8c:45:42:41:66:50:9d:29:ad:89:75:47:66:d0:b1:86:4d:
62:08:e8:2c:51:17:d0:b8:7a:5c:40:86:e0:bc:d9:9f:53:de:
1c:04:6a:40:85:50:31:93:a6:7f:d8:9e:31:6f:d5:26:60:6b:
f4:01:21:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:32 2024 by rpki-client on console-ams.rpki-client.org