Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/q_n5XOHqxtt7LS3se1eKBlDMMEY.roa
File: q_n5XOHqxtt7LS3se1eKBlDMMEY.roa (raw, json)
Hash identifier: ZsqAa8Um3iB3wOjQF0A1ikqHulFNvB9HIPg5jSI35/Q=
Subject key identifier: AB:F9:F9:5C:E1:EA:C6:DB:7B:2D:2D:EC:7B:57:8A:06:50:CC:30:46
Certificate issuer: /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial: 018CC5001D4C2BC098E8DF5B755C1D64328A
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/q_n5XOHqxtt7LS3se1eKBlDMMEY.roa
Signing time: Mon 01 Jan 2024 12:29:28 +0000
ROA not before: Mon 01 Jan 2024 12:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44858
IP address blocks: 91.245.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:1d:4c:2b:c0:98:e8:df:5b:75:5c:1d:64:32:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Validity
Not Before: Jan 1 12:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abf9f95ce1eac6db7b2d2dec7b578a0650cc3046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:a0:fc:c3:1a:cf:3c:0a:d3:e7:19:36:d4:
80:21:71:ae:7b:f9:27:a5:9c:6b:32:5a:34:29:59:
d6:42:8b:85:ed:96:91:f3:c0:42:5d:b7:7b:72:e9:
b8:e5:14:0e:71:02:47:2a:5b:a5:90:69:a2:78:e0:
ba:3f:54:8d:94:77:8c:eb:00:7f:97:39:fd:c9:d4:
6b:e1:a7:ea:32:d3:4e:59:83:b9:97:4f:87:6c:15:
7a:09:eb:12:7b:20:4e:d1:01:1c:31:cd:b7:65:46:
8b:60:74:8a:9d:52:8c:a5:d1:c8:8e:66:54:cf:30:
14:6f:58:0f:7c:54:b1:04:aa:b2:57:aa:9b:b5:b3:
92:3d:e5:47:47:a1:ae:e8:c1:df:df:81:7b:5d:3b:
4a:41:30:0a:c0:da:6d:eb:2f:8f:61:3c:0c:ed:f6:
bc:2c:11:35:fc:75:84:b9:d4:7b:6f:05:0d:12:20:
c3:94:86:07:cf:ab:ce:3b:c5:f8:a6:24:e1:99:87:
31:53:4a:00:80:95:fc:d3:15:60:ac:cd:0b:9c:6d:
5d:34:ed:02:9a:22:6a:0c:88:4b:64:a6:8a:1b:d7:
8c:91:90:d8:1e:62:64:20:eb:57:4f:cf:2b:51:8c:
0c:2b:6d:3d:05:5e:e7:f9:53:1d:97:97:b7:0e:fa:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F9:F9:5C:E1:EA:C6:DB:7B:2D:2D:EC:7B:57:8A:06:50:CC:30:46
X509v3 Authority Key Identifier:
keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/q_n5XOHqxtt7LS3se1eKBlDMMEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.240.0/22
Signature Algorithm: sha256WithRSAEncryption
49:35:9d:86:74:69:f0:c2:eb:94:f3:98:31:06:a5:7a:72:90:
16:38:93:5d:38:26:3a:2f:ec:94:5a:ed:26:cc:4a:9c:9b:8d:
60:d3:b2:ae:dc:c3:8f:17:92:85:be:af:a0:7c:3e:65:d6:ed:
d3:f8:14:31:96:a0:45:94:47:cb:89:62:9b:ef:15:08:34:a5:
92:7c:81:df:8a:54:9d:aa:b5:e3:45:2a:f2:8a:38:ce:da:3b:
52:10:29:6f:f8:4e:cb:18:58:10:ad:ba:b5:62:5b:3f:8a:8d:
b8:d7:65:02:0d:79:bd:d0:78:1d:f0:39:fc:d2:71:7f:d0:6f:
39:7b:c6:82:6e:f0:d3:ec:a1:23:19:20:b6:a6:6e:cb:f9:c7:
0d:50:90:cc:9e:c2:dd:bd:22:e1:9f:4c:86:85:42:49:76:b8:
14:7c:0a:cb:b6:95:ba:c0:82:5e:a3:1d:57:96:0d:68:b3:e9:
fd:e0:7f:2b:99:14:cf:1c:c2:6c:69:88:89:cf:d3:ba:a2:82:
d2:13:2b:99:02:fe:70:c9:49:03:07:62:b3:f2:ba:d7:6a:93:
17:ba:ed:34:a9:e8:dc:b7:5a:b0:0f:68:0a:08:ee:5d:fd:0b:
3c:f0:e8:c0:a6:4c:35:c1:ca:3c:da:a8:66:78:2e:d5:89:0f:
b7:e8:b7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:28:25 2024 by rpki-client on console-ams.rpki-client.org