Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/zj094OV_qBK0jWBO9tCRsVpw3kk.roa
File: zj094OV_qBK0jWBO9tCRsVpw3kk.roa (raw, json)
Hash identifier: LHQcst11InOMumWMXpg6McjHu4Bnz6c/YOOxyo4X8KE=
Subject key identifier: CE:3D:3D:E0:E5:7F:A8:12:B4:8D:60:4E:F6:D0:91:B1:5A:70:DE:49
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018CC79591B86052B163B791B8194B974777
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/zj094OV_qBK0jWBO9tCRsVpw3kk.roa
Signing time: Tue 02 Jan 2024 00:31:57 +0000
ROA not before: Tue 02 Jan 2024 00:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211560
IP address blocks: 91.151.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:91:b8:60:52:b1:63:b7:91:b8:19:4b:97:47:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 2 00:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce3d3de0e57fa812b48d604ef6d091b15a70de49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:98:de:cb:30:69:0f:0c:10:27:3b:7a:e9:
e5:85:ed:37:ef:fc:66:e0:42:a8:95:86:c2:98:95:
02:a2:ee:c5:07:e4:81:12:5d:c9:aa:88:af:39:ef:
96:6a:ae:7f:b3:86:16:38:99:b4:20:f2:43:c6:a7:
ed:f2:0b:05:ae:81:f1:da:0c:2a:82:2c:e9:98:6f:
1a:e0:cd:25:c6:9e:fb:87:48:17:60:8b:a3:f4:50:
e7:69:29:f6:81:31:ec:7e:e0:16:09:10:ba:c7:01:
dc:4f:78:d1:4e:b3:30:f0:18:74:79:47:66:a5:46:
5b:b2:0e:7e:bc:a1:4c:09:49:cc:3a:b7:bf:7d:4d:
f8:ae:75:3a:2f:57:e5:ac:fd:35:49:2e:a7:ab:e9:
ee:2f:43:9b:73:57:16:b9:2b:17:dc:cb:eb:a7:c2:
50:6d:a0:d8:b7:95:ac:7b:3e:b2:f2:e0:73:cb:03:
4f:59:3d:a8:55:26:3e:7f:db:b2:d4:63:7d:9f:65:
c1:8d:22:ca:49:d0:bf:be:47:ac:aa:ee:d0:ea:7a:
97:5d:0d:cd:10:b4:86:95:e3:2b:ef:e4:66:ba:40:
f2:14:d5:5f:f2:4f:91:8d:ec:86:11:43:7d:85:ee:
84:3f:55:e0:59:62:e4:54:49:40:bb:e0:7b:84:df:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3D:3D:E0:E5:7F:A8:12:B4:8D:60:4E:F6:D0:91:B1:5A:70:DE:49
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/zj094OV_qBK0jWBO9tCRsVpw3kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.94.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:09:7b:11:cf:a9:58:78:ef:00:f1:24:05:df:78:22:17:a3:
55:7b:41:e4:3d:3e:64:6b:13:eb:ad:96:22:72:13:c7:5e:52:
14:8f:61:03:6a:f3:42:a3:53:e8:82:24:fe:70:46:78:48:bb:
7c:cd:eb:7f:eb:b6:63:bd:d1:03:1d:dd:a7:ec:5a:73:99:60:
50:3e:d5:21:97:2d:b8:22:a8:ef:cf:bf:19:2c:1f:6a:d9:74:
14:21:95:1d:06:84:2c:53:28:2f:5c:ce:2c:27:6c:c5:4d:78:
75:31:54:e4:e5:09:8f:28:fe:3e:3e:d8:c8:c5:4b:4d:1a:c0:
96:c4:bf:b2:6b:21:91:0e:ac:d1:52:6e:0d:a3:19:8d:8f:5d:
5e:dc:99:a7:3c:05:6f:d7:33:81:4a:a8:5e:b1:12:94:7b:46:
13:1f:41:88:64:a8:60:d8:e0:de:7f:03:60:ef:cd:a0:04:f4:
5b:ce:b9:d0:0d:43:a5:81:8d:e0:ce:b9:d3:63:75:a8:9c:e0:
12:37:12:86:0f:7c:ee:3a:65:a5:02:cb:fd:58:7f:06:7f:66:
38:c2:5f:44:00:00:f0:e7:f1:e0:72:81:46:97:d2:3f:ba:29:
42:4e:fc:39:6e:30:d0:29:67:94:eb:ad:47:99:09:02:55:42:
f4:0c:bb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:58:28 2024 by rpki-client on console-ams.rpki-client.org