Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/1e-elSqQ0Nppch3j2GqWFKIMyyo.roa
File: 1e-elSqQ0Nppch3j2GqWFKIMyyo.roa (raw, json)
Hash identifier: GvM+AdoPPJ8mP0XZoVABum3FmGgZIp+NFOLE4Ln4iic=
Subject key identifier: D5:EF:9E:95:2A:90:D0:DA:69:72:1D:E3:D8:6A:96:14:A2:0C:CB:2A
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 018E1D91D8D762E2199A0B66C9133981A283
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/1e-elSqQ0Nppch3j2GqWFKIMyyo.roa
Signing time: Fri 08 Mar 2024 10:18:01 +0000
ROA not before: Fri 08 Mar 2024 10:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51345
IP address blocks: 92.42.101.0/24 maxlen: 24
2a13:1c40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1d:91:d8:d7:62:e2:19:9a:0b:66:c9:13:39:81:a2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Mar 8 10:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5ef9e952a90d0da69721de3d86a9614a20ccb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:3f:4b:2b:41:ff:64:d2:09:76:be:f7:50:
94:21:e7:82:77:3c:b8:50:91:62:48:f0:70:e7:88:
a3:cc:9a:22:aa:b3:55:be:e1:25:85:77:60:c6:a7:
1d:b2:6e:8a:7a:f2:f2:9d:c5:fd:bf:fb:1f:9b:6e:
5e:c5:c5:dc:e6:22:d3:9e:1c:7d:84:ad:99:06:9e:
6b:8e:30:d1:bb:27:e4:90:06:1e:d4:e9:7a:52:de:
d7:38:f4:0d:89:e8:e3:c8:48:2f:3d:db:39:bc:38:
a6:04:45:70:ba:a6:77:2d:d7:a3:d1:d3:07:ba:95:
c1:4c:3e:64:c8:a5:28:6f:c1:7c:15:e4:8d:e4:5d:
c4:de:0f:e4:93:84:04:eb:b6:4c:b5:04:41:bb:2e:
47:f2:f5:38:25:c5:fa:a5:63:a6:83:77:60:89:e1:
4c:88:33:10:4f:a8:dc:4c:3b:13:59:cd:8f:28:fb:
18:22:8f:dd:bb:95:44:77:89:f0:26:c2:49:44:0e:
8c:2e:ec:ac:03:0a:18:03:fc:9a:24:63:29:9a:66:
51:08:d5:d7:48:66:1d:1f:e1:70:b7:15:a1:b8:89:
d3:8c:81:56:fa:b9:81:ca:8c:98:c0:f0:47:83:68:
d5:4e:87:8c:59:a0:9f:a0:34:dd:75:a8:bf:c5:b6:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EF:9E:95:2A:90:D0:DA:69:72:1D:E3:D8:6A:96:14:A2:0C:CB:2A
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/1e-elSqQ0Nppch3j2GqWFKIMyyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.101.0/24
IPv6:
2a13:1c40::/32
Signature Algorithm: sha256WithRSAEncryption
ae:b6:23:8a:5c:32:b7:58:5b:c8:45:5f:56:04:68:41:48:aa:
2c:45:83:75:0d:ff:5a:03:df:af:ab:26:a8:d0:ed:c4:b9:a8:
a5:85:64:bb:26:7f:f7:2c:74:cc:01:c9:24:32:26:77:d8:2e:
a6:b4:73:52:f9:e1:c7:a2:0f:85:99:e9:2a:c1:14:c4:6f:a6:
7f:f4:11:31:aa:bf:a8:e1:89:f0:12:23:4d:d2:9b:2f:49:3e:
1e:1a:32:62:5b:03:72:42:88:0c:68:c6:cc:9a:47:8e:f7:7c:
e4:4b:f1:3a:39:2b:d2:2d:f0:b5:b1:27:f0:85:7f:9b:6e:19:
ce:e6:6f:7d:a2:b5:eb:20:ba:f0:bf:dc:36:5a:cf:f9:22:a0:
22:ea:e9:04:21:df:86:06:50:12:79:b0:0b:34:5f:f2:58:30:
4f:c8:31:c7:d9:33:5d:43:2f:83:5d:dd:88:95:7b:c0:dc:09:
9b:86:d9:4d:d5:12:ad:dd:9f:0f:da:e4:79:e3:09:92:fe:d9:
14:b7:03:d6:7b:f5:96:92:e0:52:7a:25:d5:61:c8:8f:24:f4:
f1:6e:8c:eb:04:48:ee:77:00:91:f9:e3:13:3e:0e:b5:91:ce:
0c:9d:61:c1:55:80:95:99:c4:11:4a:93:9a:df:89:18:a5:d8:
b5:c9:74:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:44 2024 by rpki-client on console-fra.rpki-client.org