Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/QaGm3ck9sEy-kuLJFjrgWLxJbUw.roa
File: QaGm3ck9sEy-kuLJFjrgWLxJbUw.roa (raw, json)
Hash identifier: 4B0Mc2mpsi9sdHMi3RxxUR37uvt9/vftJqigRg+9ULY=
Subject key identifier: 41:A1:A6:DD:C9:3D:B0:4C:BE:92:E2:C9:16:3A:E0:58:BC:49:6D:4C
Certificate issuer: /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial: 018CC49395B2AD1151D66C44C80D31AAD17B
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/QaGm3ck9sEy-kuLJFjrgWLxJbUw.roa
Signing time: Mon 01 Jan 2024 10:30:55 +0000
ROA not before: Mon 01 Jan 2024 10:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209980
IP address blocks: 92.43.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:95:b2:ad:11:51:d6:6c:44:c8:0d:31:aa:d1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Validity
Not Before: Jan 1 10:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41a1a6ddc93db04cbe92e2c9163ae058bc496d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7b:ed:d5:fb:8d:91:80:63:f4:51:0d:90:24:
0f:5a:09:b3:36:2e:e1:76:6c:85:a9:ca:02:91:ac:
11:11:b2:1c:36:59:ff:d5:d4:11:f4:57:0f:18:c4:
a1:97:bf:94:8b:90:1f:49:62:9b:d6:07:b0:38:c1:
1e:2f:b1:0d:10:15:57:ea:d9:00:4e:31:95:b1:ae:
3e:95:61:14:3a:22:2b:8d:09:cc:71:87:88:91:b9:
99:98:08:78:c5:a2:ad:40:d1:1c:2a:35:77:d1:e3:
f5:8a:43:e0:1a:a4:e1:d0:c1:da:94:7e:0a:d0:c8:
97:e4:ae:3a:88:1a:cd:d3:66:76:c7:e9:14:21:9e:
55:4d:06:11:2f:0b:ce:c4:5e:39:b8:9e:2b:99:4d:
45:4e:cb:95:87:ce:4f:7c:de:d8:ec:0a:76:ee:dc:
7e:13:3e:7d:fd:e3:b6:7f:88:ab:cb:e9:b6:79:9a:
24:e7:35:2d:2c:03:b7:33:97:66:0d:9a:7a:3e:51:
2d:70:16:4e:7e:52:12:84:8e:05:10:37:81:cc:3d:
c4:3c:ed:e1:b5:a8:b1:c4:13:5f:2a:4e:43:5a:26:
b3:ad:e3:12:2b:23:0c:e5:ec:0c:d8:b0:4f:93:2d:
2a:83:d6:4d:7b:37:5d:3b:19:18:b8:37:72:b3:ac:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A1:A6:DD:C9:3D:B0:4C:BE:92:E2:C9:16:3A:E0:58:BC:49:6D:4C
X509v3 Authority Key Identifier:
keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/QaGm3ck9sEy-kuLJFjrgWLxJbUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.224.0/21
Signature Algorithm: sha256WithRSAEncryption
33:4a:34:bc:98:ba:82:5a:f5:88:35:8f:b3:d5:5a:53:87:a7:
2d:ea:86:77:a7:6d:33:80:21:a2:b6:8b:a5:be:5a:93:42:f4:
22:ec:51:21:56:9f:6a:4c:b2:07:a4:71:48:fb:5b:fa:17:6d:
59:61:cd:46:ae:31:a0:cf:2f:df:8c:d2:83:35:f1:c0:e6:cd:
48:68:30:1e:aa:f3:b7:65:bb:b9:0e:39:d9:e4:ba:d3:4b:10:
c1:49:f2:90:4f:2d:c8:cb:57:f9:7c:e9:d5:d8:09:d3:9e:06:
02:bd:c7:78:30:a2:05:18:df:c5:c0:c6:89:b4:32:11:0d:3d:
76:39:fb:bd:47:c6:33:43:1d:59:33:4a:67:20:05:18:cd:c9:
02:08:56:3a:7f:e8:08:44:3e:92:4c:03:93:3d:5f:5f:83:c8:
05:78:4a:aa:cb:5c:7a:f5:04:eb:7f:32:03:bf:d7:ef:4b:68:
d3:a1:71:a3:e4:1c:ec:d8:30:fa:79:d0:f0:f2:c4:9f:82:0b:
7b:fa:81:9b:f9:a1:55:0d:71:eb:3c:37:e0:63:e7:4a:4f:9c:
d4:9d:0d:69:12:be:f1:39:4f:25:87:ae:e4:65:84:26:39:54:
21:bc:2e:29:f4:a3:17:4d:e1:9c:43:32:c5:91:5b:0b:40:4b:
dd:61:4b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:27:56 2024 by rpki-client on console-ams.rpki-client.org