Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/18olfNomhFNIPfGSHcOYuQw1--M.roa
File: 18olfNomhFNIPfGSHcOYuQw1--M.roa (raw, json)
Hash identifier: HFndyP63ntrqQ6R+DdnSkdEVuCznkXxs/t6eW6PvlhI=
Subject key identifier: D7:CA:25:7C:DA:26:84:53:48:3D:F1:92:1D:C3:98:B9:0C:35:FB:E3
Certificate issuer: /CN=21409e170842785e5e787c3ac27a8844bab76c11
Certificate serial: 018CC493616899A09021914A1AAC6D8E07E1
Authority key identifier: 21:40:9E:17:08:42:78:5E:5E:78:7C:3A:C2:7A:88:44:BA:B7:6C:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/18olfNomhFNIPfGSHcOYuQw1--M.roa
Signing time: Mon 01 Jan 2024 10:30:42 +0000
ROA not before: Mon 01 Jan 2024 10:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47828
IP address blocks: 91.199.134.0/24 maxlen: 24
2001:67c:1824::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:61:68:99:a0:90:21:91:4a:1a:ac:6d:8e:07:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21409e170842785e5e787c3ac27a8844bab76c11
Validity
Not Before: Jan 1 10:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7ca257cda268453483df1921dc398b90c35fbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:a2:92:95:cd:12:22:3d:d3:a2:15:cc:bc:
66:8c:06:74:71:4b:43:df:e0:98:ff:70:bb:72:35:
9e:bd:d7:8d:8e:58:e1:5a:dc:3c:a6:10:fd:89:99:
27:01:b7:b2:a5:ad:c0:66:15:fe:41:01:3d:e2:24:
05:b2:67:8f:d8:7e:57:5d:92:27:e8:e2:83:f1:02:
37:2b:b3:92:ab:c3:2a:f0:1f:11:75:ea:89:ec:b3:
b6:36:18:d0:f0:ae:47:11:36:70:31:d2:ae:8a:0f:
e2:3e:4a:63:fb:d0:59:12:83:fc:a6:d8:58:8f:94:
71:7c:de:df:38:ba:de:7d:87:91:5e:30:d5:7e:c9:
40:c4:e8:fc:b3:1d:64:06:c4:50:72:02:e9:1e:b0:
df:4d:d2:ee:66:c9:f8:ba:5e:cd:c9:98:26:07:14:
c7:ff:9e:68:f3:c9:49:e8:0a:b1:0b:11:49:ec:25:
30:20:b7:af:88:bd:a7:71:37:a2:c0:ea:54:be:a4:
b4:76:da:15:78:40:e6:46:7a:0d:a1:33:78:44:c4:
d7:93:5b:fe:aa:0a:52:0f:7c:75:64:86:4d:fc:b4:
6e:30:63:88:1d:18:9c:9b:be:c6:74:83:ed:d8:78:
5a:61:ea:e6:3c:ad:89:ab:13:8f:36:c0:e3:f1:70:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CA:25:7C:DA:26:84:53:48:3D:F1:92:1D:C3:98:B9:0C:35:FB:E3
X509v3 Authority Key Identifier:
keyid:21:40:9E:17:08:42:78:5E:5E:78:7C:3A:C2:7A:88:44:BA:B7:6C:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/18olfNomhFNIPfGSHcOYuQw1--M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.134.0/24
IPv6:
2001:67c:1824::/48
Signature Algorithm: sha256WithRSAEncryption
90:ee:38:0c:38:10:6b:95:2f:3c:84:33:8a:a2:04:e7:5e:51:
85:38:e6:68:3b:f3:9c:4e:10:46:5c:55:df:7f:22:f7:93:4d:
33:83:b9:61:06:60:96:16:cf:1e:08:73:08:3b:ed:ad:a0:d3:
52:1e:59:c3:4a:14:75:21:1a:f9:ab:cc:d1:35:dc:02:03:29:
c3:08:b4:2e:e3:24:7a:8f:f8:61:5d:f1:2d:69:d9:b8:56:bd:
7b:c3:a3:3f:fe:69:00:dd:56:28:2a:55:f6:29:f1:76:32:e8:
d3:4f:ba:76:f7:87:76:18:74:d6:f1:80:ce:30:04:3b:e7:c0:
90:2e:b2:64:a6:55:79:7c:32:f1:07:89:c7:ac:8c:44:0b:09:
c9:c3:97:0e:08:c3:7b:54:f6:12:20:8c:4a:0a:36:3a:f4:36:
fb:66:58:ea:99:a2:8b:3a:59:94:cb:c9:4e:d0:30:23:bf:98:
b0:16:79:eb:62:14:67:05:b3:67:a3:10:a9:d0:bf:1d:6b:28:
4e:f8:c6:e0:31:b1:be:41:de:4f:1a:09:a1:71:ce:52:6d:ff:
d6:57:ed:9c:82:e5:70:d6:9a:1e:02:f6:63:25:56:01:75:ba:
1a:74:61:9f:59:73:d3:21:8c:1f:48:3a:60:34:2a:0d:70:4c:
62:51:cc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:02:53 2024 by rpki-client on console-fra.rpki-client.org