Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/ELBicCL6humip6_Wnx5HmSA1bSA.roa
File: ELBicCL6humip6_Wnx5HmSA1bSA.roa (raw, json)
Hash identifier: Mgejfib1/w8KG7OyVRbifhdEMi+ISrTd/t1xCGAqZ0E=
Subject key identifier: 10:B0:62:70:22:FA:86:E9:A2:A7:AF:D6:9F:1E:47:99:20:35:6D:20
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 018CC5DC18F21132A3A911AF419CDE009575
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/ELBicCL6humip6_Wnx5HmSA1bSA.roa
Signing time: Mon 01 Jan 2024 16:29:45 +0000
ROA not before: Mon 01 Jan 2024 16:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59437
IP address blocks: 91.226.226.0/24 maxlen: 24
2a0c:3c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:18:f2:11:32:a3:a9:11:af:41:9c:de:00:95:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Jan 1 16:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10b0627022fa86e9a2a7afd69f1e479920356d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:5c:cb:0d:19:52:f1:13:ea:98:66:ec:02:
4a:55:22:36:2f:5a:bb:5b:f6:b0:1f:80:67:2f:51:
64:35:8e:d1:eb:8a:4c:97:18:93:6a:13:27:7a:80:
a8:ee:ab:e3:f3:e7:0b:ea:88:32:9e:0a:07:57:f7:
f4:98:92:dd:2c:c9:75:4a:84:86:f9:61:0a:2d:a0:
86:af:f6:f4:06:16:1b:59:42:c5:6b:75:b9:d3:04:
6e:a7:52:8f:b2:55:4e:72:ab:79:43:97:43:5f:24:
eb:17:0e:8e:dd:0d:f0:35:52:92:3e:fb:5a:09:6c:
f9:35:01:95:f4:52:7a:8b:f6:45:66:63:d0:48:d7:
ef:46:e7:71:db:f8:8d:05:63:1a:1f:f1:59:86:a5:
97:7c:92:4e:3f:22:76:3a:48:4a:6d:5f:87:48:5a:
97:ee:98:0d:d5:91:86:82:38:2a:f3:4f:16:23:ff:
fa:cb:65:57:e9:0a:76:46:72:c7:5d:6d:f7:59:27:
47:00:cb:0c:19:49:70:d4:a7:91:17:82:2f:a0:c3:
0a:d0:9e:02:66:43:a1:30:aa:b7:fd:46:9a:af:59:
23:54:e3:f6:84:82:51:bb:19:d9:af:a0:7d:60:c5:
d4:c3:be:38:1d:fd:f1:8d:93:1b:bf:9b:dd:80:64:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B0:62:70:22:FA:86:E9:A2:A7:AF:D6:9F:1E:47:99:20:35:6D:20
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/ELBicCL6humip6_Wnx5HmSA1bSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.226.0/24
IPv6:
2a0c:3c80::/29
Signature Algorithm: sha256WithRSAEncryption
61:da:ca:d0:ba:62:b1:89:1d:ef:8f:ec:b8:35:52:40:29:35:
ba:91:61:ee:45:e9:a3:db:c3:c2:fd:9b:66:04:1a:46:d9:72:
4a:4e:c8:8d:72:3c:d9:3d:cc:3a:a5:af:58:60:29:96:60:0c:
9f:3f:dc:c1:5b:b2:8d:fc:03:12:5c:67:36:a6:c1:69:04:66:
0e:a0:27:f6:b4:39:63:ad:9d:c3:a3:fc:6b:86:a9:3c:cc:40:
06:78:79:dc:c7:ed:ac:12:5f:95:45:c4:50:a5:96:c1:59:d7:
d0:97:ab:24:e2:07:73:a0:a7:68:bb:8e:9e:cc:61:56:58:99:
21:0a:ec:95:18:a8:1c:a2:ee:b5:1e:e2:2d:10:91:f2:04:22:
64:98:de:f7:d8:21:65:3b:4a:c1:a0:4f:c9:bd:ad:b2:a2:d5:
36:0f:8c:63:d6:dc:2e:a8:96:ff:40:51:b3:10:73:ab:c5:8a:
fc:3a:12:a3:2e:c6:cd:15:5b:9b:af:e3:e1:a1:76:a6:01:48:
4d:44:24:9e:1d:22:b6:a1:76:9c:c2:81:3b:c5:46:40:25:d2:
4d:aa:c2:8f:aa:6f:d8:e8:f4:f7:49:0a:b2:ef:00:93:fd:52:
03:57:f7:9c:77:c8:50:b9:c2:8d:04:20:0e:97:e1:38:b6:c7:
06:48:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:12:51 2024 by rpki-client on console-fra.rpki-client.org