Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/cMW_i3UrT7rGNFk9XAnbh2dSzfI.roa
File: cMW_i3UrT7rGNFk9XAnbh2dSzfI.roa (raw, json)
Hash identifier: BTtrIk++E6D8ysZKyEy+Mk/ALfIe8YEiF1w1L3AGy1c=
Subject key identifier: 70:C5:BF:8B:75:2B:4F:BA:C6:34:59:3D:5C:09:DB:87:67:52:CD:F2
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 018CC8014A3B32C594D8C0E78A0C84677114
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/cMW_i3UrT7rGNFk9XAnbh2dSzfI.roa
Signing time: Tue 02 Jan 2024 02:29:36 +0000
ROA not before: Tue 02 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50321
IP address blocks: 91.238.104.0/23 maxlen: 23
91.238.105.0/24 maxlen: 24
2001:67c:1528::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4a:3b:32:c5:94:d8:c0:e7:8a:0c:84:67:71:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Jan 2 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70c5bf8b752b4fbac634593d5c09db876752cdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:31:72:1f:37:ad:90:e6:20:57:64:a7:19:
06:37:c3:49:ab:7a:fd:3e:21:96:bf:d8:7a:96:4f:
38:c6:a1:dc:e6:5e:af:1d:df:7d:fc:8d:d1:ed:c8:
91:43:2f:62:00:96:a8:98:ae:95:0b:7a:a6:be:09:
f4:be:dd:e4:82:51:8a:57:d3:ee:13:0e:1b:8b:de:
53:25:0c:bf:0f:ee:35:61:4a:dd:10:3b:51:b5:75:
02:5e:18:99:4d:03:68:a7:74:27:7b:cd:1b:21:aa:
f5:49:a4:13:c2:f2:20:9d:e4:10:4f:dd:60:86:cb:
a3:e2:70:92:9a:c9:a2:69:60:5d:c4:e4:fc:20:a0:
3e:f4:00:f5:02:49:11:12:fe:e1:53:a2:06:f4:5b:
73:9f:aa:8f:11:99:60:25:16:3a:4c:96:6c:27:37:
58:ec:b1:b8:8f:aa:05:05:0e:75:82:0b:b0:bb:59:
d6:6c:43:dd:68:53:68:ba:06:3f:f9:11:1c:fd:df:
c2:be:02:5f:e6:5c:10:8c:ad:69:7b:d7:a3:f1:bc:
c4:da:9e:c6:d3:a3:c0:49:40:d2:38:24:49:08:b5:
68:dd:f8:05:75:3b:e9:80:b6:20:25:52:a4:af:76:
5c:ec:2c:69:75:36:b8:e2:d4:9b:7e:4e:76:95:9e:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C5:BF:8B:75:2B:4F:BA:C6:34:59:3D:5C:09:DB:87:67:52:CD:F2
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/cMW_i3UrT7rGNFk9XAnbh2dSzfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.104.0/23
IPv6:
2001:67c:1528::/48
Signature Algorithm: sha256WithRSAEncryption
c5:1e:ce:48:21:0f:6b:d8:41:54:13:3e:77:16:57:d4:98:40:
08:bf:1b:c9:c6:dc:2f:6f:06:49:d7:ed:ec:9b:c9:47:f4:66:
33:ad:fe:00:78:61:37:ea:25:ec:f7:ea:69:3b:7b:57:c0:4e:
be:90:18:7f:0d:7a:d1:63:e3:90:d6:29:5f:1c:8c:ba:62:a0:
01:79:2d:86:9b:5c:b8:00:21:f9:6b:c9:82:16:57:5b:d7:68:
d0:50:79:23:bc:56:86:14:ba:e1:80:20:c4:1f:d3:c5:e7:86:
ce:c7:9f:fe:6b:9b:3b:b6:4b:39:03:f2:10:00:af:21:10:76:
de:94:1d:45:39:1f:95:21:65:84:0a:e4:23:e7:40:f8:ee:dc:
01:0a:de:f8:7b:3f:bd:00:20:c9:97:97:ff:f9:40:fd:53:bd:
b1:af:7e:08:d7:99:f0:ac:0d:5c:ee:68:36:01:18:87:98:5d:
a2:79:ea:e6:3e:03:57:58:df:5f:4e:03:cd:9a:32:93:93:95:
c4:fa:a4:a6:fa:8f:9c:4f:38:ae:ad:83:de:81:f2:11:fe:cf:
80:05:ec:90:c7:38:ce:99:ca:33:6c:df:fb:38:a0:a7:8f:f5:
e3:2d:01:1b:6f:cd:74:8b:a1:00:89:58:5c:7f:bf:fb:3d:93:
bd:e3:91:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:22 2024 by rpki-client on console-fra.rpki-client.org