Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/IXUniQOuTGZA2YukI1HFBrTejbg.roa
File: IXUniQOuTGZA2YukI1HFBrTejbg.roa (raw, json)
Hash identifier: 11OyDR3wuZYHtRhb/X/hse2aIQRHuAUz+ETU6uPig7o=
Subject key identifier: 21:75:27:89:03:AE:4C:66:40:D9:8B:A4:23:51:C5:06:B4:DE:8D:B8
Certificate issuer: /CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Certificate serial: 018CC26D84DE1384ED5505023DD640C2D6C4
Authority key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/IXUniQOuTGZA2YukI1HFBrTejbg.roa
Signing time: Mon 01 Jan 2024 00:30:06 +0000
ROA not before: Mon 01 Jan 2024 00:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48312
IP address blocks: 194.26.116.0/24 maxlen: 24
91.207.140.0/23 maxlen: 24
91.202.234.0/23 maxlen: 24
2a11:1a00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:84:de:13:84:ed:55:05:02:3d:d6:40:c2:d6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Validity
Not Before: Jan 1 00:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2175278903ae4c6640d98ba42351c506b4de8db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:4e:27:da:a7:1e:31:3e:c1:43:2b:a4:c8:
10:fe:d0:f6:d4:9e:1d:80:8d:59:82:24:d3:de:b6:
a7:c4:3e:0c:f0:29:c7:61:c3:a9:78:96:f5:c1:a6:
1c:13:27:2f:b1:24:6e:79:b9:05:6f:ec:88:0d:04:
3c:54:5c:90:4a:b5:15:87:1d:92:4c:57:26:1c:df:
df:f2:8a:74:57:49:d7:35:54:b4:08:87:1d:f6:68:
4d:34:50:22:56:55:b4:86:1a:7f:85:ae:f6:d3:f8:
24:90:d6:ca:ab:f3:9c:c9:a5:c6:fd:67:57:f7:aa:
1a:48:c1:2d:a9:fe:d6:51:a0:a3:75:6f:9d:43:a3:
dd:a6:79:ae:d4:df:73:bc:86:e8:39:34:84:2f:e5:
48:57:c4:c1:ca:2b:18:2e:60:13:f9:4c:d2:2c:71:
56:1c:c3:7b:eb:0d:29:8c:fe:b1:ba:58:40:d2:2e:
d4:c7:42:12:2e:04:55:20:39:fe:96:76:81:b3:6f:
8a:62:10:79:ff:9b:4f:d7:37:e1:ea:7a:ac:e7:27:
b1:a2:8e:5a:66:c6:c4:65:5d:ea:6a:18:a0:9e:ca:
17:c6:84:f7:eb:39:7e:ab:cc:bd:75:43:af:8f:a1:
0f:f5:26:90:c9:27:03:2d:a4:1e:8f:29:b9:db:a0:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:75:27:89:03:AE:4C:66:40:D9:8B:A4:23:51:C5:06:B4:DE:8D:B8
X509v3 Authority Key Identifier:
keyid:6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/IXUniQOuTGZA2YukI1HFBrTejbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.234.0/23
91.207.140.0/23
194.26.116.0/24
IPv6:
2a11:1a00::/29
Signature Algorithm: sha256WithRSAEncryption
01:94:e7:19:39:93:24:ae:b5:14:50:1d:ac:22:9d:28:4c:c8:
72:98:7f:f3:7e:53:04:17:c8:dc:ac:1e:f1:b2:c1:07:5f:c4:
5a:b8:30:c3:82:da:f6:91:b1:fb:6c:d7:2b:2d:dc:be:48:6c:
62:1f:e2:4b:e3:ce:87:99:84:54:30:cb:17:2a:3a:e7:f6:b3:
c9:cb:3a:db:a1:8f:80:de:03:96:ba:e3:04:08:e2:cc:19:30:
d9:2c:72:9a:ca:bb:a6:d7:42:f9:a1:b1:f4:cb:ea:92:77:b4:
28:00:35:97:ef:35:af:62:6f:49:61:56:e6:8b:fd:83:d8:8d:
3c:fc:4c:1c:d1:57:20:85:6c:e1:ce:98:a3:cf:e9:e5:a9:8a:
3e:49:24:91:c6:dc:9a:50:7b:96:44:4c:5b:ca:7a:23:aa:29:
1c:07:e7:a0:c0:c1:ad:7c:3f:26:90:24:e8:cc:67:78:f8:97:
04:56:18:a1:21:83:38:06:9d:bf:be:fb:4f:78:cd:62:0e:c9:
15:b6:05:ac:b1:9c:78:14:81:e5:5e:98:22:2a:a5:f4:a2:7b:
6b:96:b7:26:a7:83:81:04:27:95:15:22:b1:4a:a1:04:63:51:
0f:1b:39:a2:22:12:15:6d:04:85:f0:c6:3d:d3:88:8b:ce:4c:
35:49:ef:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:05 2024 by rpki-client on console-ams.rpki-client.org