Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rQjksSvs0n21cJgLUbq-gQPz6Y4.roa
File: rQjksSvs0n21cJgLUbq-gQPz6Y4.roa (raw, json)
Hash identifier: Z9JSc2fjhA5dWb9fCb1CsDj/2BUNUn8nZVeqNk2okDU=
Subject key identifier: AD:08:E4:B1:2B:EC:D2:7D:B5:70:98:0B:51:BA:BE:81:03:F3:E9:8E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191702734BC1CED67DCC01A43C9CF70E654
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rQjksSvs0n21cJgLUbq-gQPz6Y4.roa
Signing time: Tue 20 Aug 2024 14:18:23 +0000
ROA not before: Tue 20 Aug 2024 14:18:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215433
IP address blocks: 91.92.27.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:70:27:34:bc:1c:ed:67:dc:c0:1a:43:c9:cf:70:e6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 20 14:18:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad08e4b12becd27db570980b51babe8103f3e98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:25:8e:aa:f2:1e:4d:ff:4c:30:cc:05:36:
3b:e6:01:11:31:8a:7e:62:b3:92:3b:8f:05:07:c5:
0f:24:5c:3c:33:32:e5:cf:ee:c0:77:04:45:15:72:
5e:d7:6b:a0:87:99:5a:b5:23:6e:42:4d:09:96:60:
c8:3a:94:98:c6:2b:71:ad:3a:5c:be:cc:91:76:eb:
a2:4a:f6:50:49:a5:f7:e8:a0:86:39:84:77:69:5f:
32:d1:31:c4:d6:fe:78:6b:dc:e8:1e:45:92:98:0b:
97:01:c8:4b:c9:37:db:d5:b3:b7:e8:b7:ea:1f:8e:
2c:34:bd:29:18:22:53:2c:c3:f7:7e:e1:f9:ba:28:
e9:b5:19:e3:dc:26:8c:5c:60:ac:74:ba:18:35:25:
9a:9f:25:2e:a1:a9:af:2f:46:a6:77:79:1e:b8:88:
3c:d3:2c:22:23:0e:a8:03:97:af:cc:91:b4:53:2b:
b8:2f:c0:58:b8:24:e5:af:b4:6a:20:af:eb:0d:9b:
f8:5d:d2:01:a8:6f:2d:a9:b9:fc:c6:ab:10:b3:b5:
86:d7:34:e1:f6:a9:b0:b2:40:84:fd:b4:af:aa:c8:
4c:88:37:53:a4:58:2a:19:69:01:9f:04:91:b7:4b:
a4:71:03:cc:65:a1:f5:e2:a1:1a:41:fa:1b:3b:a4:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:08:E4:B1:2B:EC:D2:7D:B5:70:98:0B:51:BA:BE:81:03:F3:E9:8E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rQjksSvs0n21cJgLUbq-gQPz6Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.27.0/24
94.156.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a4:72:37:ac:b6:7d:89:63:a0:b0:96:7e:eb:fc:89:71:29:
83:f2:15:70:12:0f:dc:66:3b:cb:10:0d:6c:50:1e:e0:96:1f:
b8:37:a8:45:83:08:17:77:91:6d:91:4b:3a:1b:15:dc:53:97:
47:5f:30:78:43:0b:17:74:32:74:db:6c:65:d1:ce:52:d9:50:
6a:92:2c:38:5a:0b:19:4d:dd:a2:3f:76:f5:a4:c9:87:53:da:
9d:5d:6f:dc:5f:b8:c7:76:fe:9a:76:08:6b:ce:26:a4:7f:3a:
15:d6:bb:b6:11:93:de:1c:21:e6:2e:1c:b3:15:68:84:d9:6c:
ab:47:fb:71:50:43:f0:35:5e:79:18:56:c6:3b:70:5c:fd:c4:
ad:92:d2:96:3b:27:ef:33:f4:e7:7e:0c:5b:23:87:01:65:09:
4a:b2:18:e4:72:3c:7a:8b:08:b9:e4:0e:19:a5:1d:04:4f:10:
f3:82:6d:48:c4:b2:79:34:dd:1d:c9:22:82:fd:66:6b:84:8a:
59:34:5e:08:58:9d:b5:8e:c5:65:6a:cf:38:b0:2f:e7:e0:f6:
8d:73:ff:e0:39:cc:dc:87:5c:6b:f1:4a:4a:3c:c7:86:c2:7a:
b4:3f:78:76:80:c3:60:51:dc:f4:f5:7b:be:98:c9:b3:83:a4:
8b:5e:90:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:30:43 2024 by rpki-client on console-ams.rpki-client.org