Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/THncAkWerje3aIXcohX03wDNQNA.roa
File: THncAkWerje3aIXcohX03wDNQNA.roa (raw, json)
Hash identifier: GkADVn4npfiLpluwc8eyLIN0gOOAqyQ06Uw2HD67WLE=
Subject key identifier: 4C:79:DC:02:45:9E:AE:37:B7:68:85:DC:A2:15:F4:DF:00:CD:40:D0
Certificate issuer: /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial: 018CC9BC954BD800E706DEF6C1E739B50B40
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/THncAkWerje3aIXcohX03wDNQNA.roa
Signing time: Tue 02 Jan 2024 10:33:48 +0000
ROA not before: Tue 02 Jan 2024 10:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43868
IP address blocks: 91.217.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:95:4b:d8:00:e7:06:de:f6:c1:e7:39:b5:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Validity
Not Before: Jan 2 10:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c79dc02459eae37b76885dca215f4df00cd40d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:65:f4:e7:a6:e4:cd:ff:07:22:31:3e:a1:
62:a4:d3:7c:11:0d:67:6b:4a:1d:51:41:85:f8:7e:
a0:d0:4f:2d:18:51:41:8f:34:8d:06:7a:03:1e:c8:
34:70:da:d1:f5:6b:16:27:4d:62:de:4a:54:49:d1:
4f:f1:a1:c6:64:bf:b0:96:6e:b0:9d:6f:0f:57:5b:
2c:f5:89:9d:03:87:54:5a:6a:de:ad:f2:c6:f8:a8:
40:91:04:e5:95:b8:a2:9f:e4:b3:dc:05:6a:d6:fd:
54:e0:90:3d:fb:95:5a:2a:d2:9b:e3:c3:47:41:70:
97:99:d0:31:37:9c:12:dc:99:7e:b2:46:a0:fe:60:
78:90:7e:f7:19:97:ea:ff:2b:3c:a9:2d:8e:79:c6:
65:63:1a:7f:02:11:c7:40:cf:71:08:7d:ef:7b:a4:
a5:15:a3:e0:d7:aa:55:87:d8:41:3d:1d:ac:e9:f2:
c7:ee:ed:22:a4:19:32:ab:9c:bd:d8:f7:c4:ae:08:
18:bc:11:be:b9:21:77:36:72:90:ef:d6:74:e0:26:
32:16:84:1a:48:08:8b:0a:67:0c:88:1a:45:cb:4b:
0b:65:ca:45:cf:76:34:d7:79:2f:e2:54:b7:f1:cc:
94:eb:a4:02:80:3e:59:07:a4:a3:42:14:18:f3:a5:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:79:DC:02:45:9E:AE:37:B7:68:85:DC:A2:15:F4:DF:00:CD:40:D0
X509v3 Authority Key Identifier:
keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/THncAkWerje3aIXcohX03wDNQNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.27.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:38:83:24:0b:93:5a:91:44:2f:2e:e5:bb:f1:c6:51:5e:2e:
8a:0b:99:61:4a:5e:7e:ed:84:9c:bb:20:f7:a2:45:13:cb:b1:
63:08:6d:0d:53:45:0d:06:6f:0b:ff:0e:31:d4:46:37:a8:2a:
fa:b0:26:78:8d:3c:21:09:e5:c2:85:77:7b:5f:74:1b:c5:a7:
2a:14:68:29:df:f1:0c:8d:21:32:67:ad:4e:1d:62:48:74:0a:
b9:8b:2b:d3:22:df:65:a7:35:64:c0:0c:73:de:02:09:14:2b:
9f:1e:fc:b0:c9:d5:9e:e9:71:1d:3d:04:b9:a4:0b:73:fe:f1:
e5:ea:f4:d4:20:02:52:0a:4d:1f:af:3f:95:64:d7:14:e4:58:
e6:1e:1f:48:34:73:d2:08:16:a8:17:c0:26:6c:5f:cb:9a:0b:
6c:cf:15:b2:70:19:55:56:1d:37:ff:ea:55:48:94:d0:e3:7d:
d6:6f:b4:86:6d:16:d0:5d:03:ae:6d:c0:5e:74:8f:47:b9:90:
66:4f:ab:73:55:5a:b0:6e:e9:57:ca:dc:d1:61:79:9b:0a:6e:
2e:26:ef:48:0c:30:74:e4:92:85:4d:5c:bb:97:ff:d1:8a:c8:
a4:2a:72:b8:d7:ae:e7:aa:cf:16:03:20:b4:43:30:bc:6f:b7:
78:1e:f8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:49:41 2024 by rpki-client on console-ams.rpki-client.org