Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/2wi31BF5U7-UDSLaw6DK6E_Fp0w.roa
File: 2wi31BF5U7-UDSLaw6DK6E_Fp0w.roa (raw, json)
Hash identifier: ZYNFP3e3ivEZqz4qBiOpXKMI3wyYIW0OB1fFPtPE5rY=
Subject key identifier: DB:08:B7:D4:11:79:53:BF:94:0D:22:DA:C3:A0:CA:E8:4F:C5:A7:4C
Certificate issuer: /CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Certificate serial: 018CC6B8DAD9991F2F3EF1FFB1F75726E718
Authority key identifier: 01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/2wi31BF5U7-UDSLaw6DK6E_Fp0w.roa
Signing time: Mon 01 Jan 2024 20:30:52 +0000
ROA not before: Mon 01 Jan 2024 20:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44427
IP address blocks: 91.199.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:da:d9:99:1f:2f:3e:f1:ff:b1:f7:57:26:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Validity
Not Before: Jan 1 20:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db08b7d4117953bf940d22dac3a0cae84fc5a74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:62:ff:d8:6c:cb:45:ae:e3:ad:b3:b9:16:38:
d7:24:b6:33:69:29:ba:47:91:83:d3:0a:e3:6a:ea:
06:ac:7d:a5:55:94:28:0d:b8:81:1e:8f:39:4f:82:
ab:51:dd:fa:20:17:0b:33:90:90:1b:94:38:0c:b1:
42:42:69:70:af:78:de:00:68:c3:bc:7f:78:2f:2d:
67:9f:ad:94:2e:98:3e:83:39:51:81:56:71:f2:e5:
f5:84:d0:4e:90:86:b8:1b:3f:48:a3:eb:f9:2c:e9:
d6:9e:d5:11:a2:7a:c4:f3:1e:aa:e9:51:15:9c:de:
33:b9:14:c7:2c:de:67:08:f4:1f:55:c0:5c:62:77:
9d:09:d0:fc:02:08:b5:f5:a9:78:24:90:c8:79:bc:
3a:40:a0:59:a5:86:7e:3a:17:1d:4f:2d:fa:39:cf:
37:1a:73:e5:42:ee:87:7e:4f:af:a5:8a:84:44:65:
19:1d:df:2f:a6:4d:da:5b:25:b8:61:25:6f:78:74:
0e:ac:f1:ba:40:76:bd:ae:30:a5:02:37:89:9f:28:
d4:36:97:af:ad:f2:67:6f:93:81:4f:54:4f:43:89:
78:0e:60:5d:54:c8:2b:46:1b:dc:9c:c3:9c:3d:4e:
cf:96:67:ff:66:0f:47:90:01:c9:09:7a:47:01:36:
9b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:08:B7:D4:11:79:53:BF:94:0D:22:DA:C3:A0:CA:E8:4F:C5:A7:4C
X509v3 Authority Key Identifier:
keyid:01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/2wi31BF5U7-UDSLaw6DK6E_Fp0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.119.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:a6:ba:f7:50:64:80:28:70:c5:e6:87:91:25:86:8d:76:68:
37:56:30:1e:36:e3:97:96:31:3a:e3:0b:f1:6b:c9:62:04:a7:
1e:a4:89:92:aa:14:4d:ad:a3:0f:d9:c2:04:5f:cf:87:e6:de:
d5:72:2e:fd:14:74:21:47:63:ef:35:fc:a0:f7:f8:46:7c:fa:
d0:ec:bb:d8:fc:28:03:c2:3f:de:b4:88:0a:76:c4:32:e4:d3:
67:e8:d0:bb:24:50:fe:ee:0e:cd:f2:ac:42:e7:03:20:94:c8:
ae:c6:f8:da:f7:2b:73:79:22:c5:e8:0c:8b:94:d8:32:68:1a:
0d:73:e5:79:14:a0:62:61:1a:20:d0:b1:b1:b9:3d:9d:31:99:
13:ef:33:af:e6:b8:40:c7:a0:8f:a1:1e:44:10:31:cb:0b:2f:
3d:cb:61:de:0d:b4:9e:02:98:a8:fb:50:ee:70:9b:23:99:92:
9b:d1:3d:6d:63:27:d4:2e:8f:fb:d2:7e:c3:d5:af:4c:7e:3c:
74:51:21:f9:6e:fc:8f:c0:aa:56:73:78:63:c7:2f:12:83:2d:
80:13:7a:3b:4c:92:1c:0a:d2:b3:8d:35:62:4e:b6:77:29:ba:
a0:54:29:09:0a:a2:6c:4c:14:d6:2d:46:95:ba:c4:5f:33:6a:
b2:20:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:37:34 2024 by rpki-client on console-fra.rpki-client.org