Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/q8uMDKlZ0fkDAASSLn9oumLjUhY.roa
File: q8uMDKlZ0fkDAASSLn9oumLjUhY.roa (raw, json)
Hash identifier: +I7g21rkXK9pyG3dN7JnkgnFGbKJ+uGckmT3QswZgdc=
Subject key identifier: AB:CB:8C:0C:A9:59:D1:F9:03:00:04:92:2E:7F:68:BA:62:E3:52:16
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0190789DFF665C1519E72DC0272E35A54F70
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/q8uMDKlZ0fkDAASSLn9oumLjUhY.roa
Signing time: Wed 03 Jul 2024 12:42:18 +0000
ROA not before: Wed 03 Jul 2024 12:42:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 91.200.223.0/24 maxlen: 24
91.226.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:9d:ff:66:5c:15:19:e7:2d:c0:27:2e:35:a5:4f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 3 12:42:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abcb8c0ca959d1f9030004922e7f68ba62e35216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:3f:ed:db:7b:0e:3f:6f:f8:4a:0b:25:8b:
45:b0:26:79:07:4b:aa:a4:b3:e3:c4:0c:bf:f6:7a:
f1:0b:ac:50:22:57:18:db:8b:3c:07:82:99:43:9f:
88:3a:79:51:79:d1:32:4d:2f:b6:69:9a:37:3f:0a:
ff:9a:65:02:1c:a2:98:e3:8d:6c:ff:30:53:04:c1:
50:08:09:71:3a:d9:d7:65:31:14:2a:d1:c9:3b:e6:
39:36:c1:a5:ad:5b:11:15:4f:cf:8c:d3:69:d9:f1:
0d:9e:b7:81:f2:a3:15:7f:95:ec:f0:f8:f6:5e:b8:
b6:87:b2:45:aa:5d:a4:b1:6a:26:b6:a8:81:a1:b5:
1e:5c:9f:5a:de:e8:e0:82:21:fd:d4:92:3b:96:b8:
2c:73:e4:18:6c:58:79:e5:71:79:4b:68:70:f3:47:
16:84:92:22:a1:37:74:58:94:f4:da:ab:f4:25:9f:
47:b0:a4:e3:46:cc:3e:23:5b:98:a1:6f:9b:a0:89:
20:40:6c:1b:95:d6:64:b6:cb:92:4d:95:b5:62:67:
e0:bc:84:8b:d4:5f:66:dc:65:b5:c1:e7:37:af:05:
f4:2c:9d:81:60:63:d2:ce:0d:7b:39:93:8e:6e:25:
b3:18:3d:04:c9:8f:aa:de:a6:31:f5:50:d5:8c:c5:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CB:8C:0C:A9:59:D1:F9:03:00:04:92:2E:7F:68:BA:62:E3:52:16
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/q8uMDKlZ0fkDAASSLn9oumLjUhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.223.0/24
91.226.56.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e5:44:02:7a:21:7d:b6:e6:24:76:1d:90:f1:4c:e4:61:66:
0a:8b:e4:74:7c:5d:f5:54:3a:78:68:ca:1e:0f:8f:26:81:01:
61:42:23:db:d5:5b:7f:ca:bc:65:4d:ed:6e:ad:3a:d0:df:98:
49:e4:1b:87:49:f5:8d:dc:75:68:8f:fe:ad:0a:a2:7a:fc:f4:
ff:c6:28:42:87:8a:2a:96:55:df:61:74:35:c0:a5:24:37:25:
84:05:30:e1:f9:30:46:96:8e:4b:50:35:d6:5e:e5:52:01:4b:
d0:56:7b:4a:56:10:58:64:55:a5:67:a5:35:ea:ff:56:6a:70:
8a:b8:56:8c:2d:84:7e:69:e1:02:60:b4:0b:29:e7:d4:53:81:
e6:0b:0f:11:c9:34:f7:63:49:29:14:61:1d:50:87:06:8a:18:
71:e4:f7:81:3a:a3:44:ba:c4:1c:1d:e8:22:82:40:40:e4:83:
1e:b5:07:ea:8d:e5:b1:76:6b:bd:b0:84:44:c4:70:83:ce:13:
97:85:99:ec:2e:ea:c8:61:7a:89:80:79:e6:78:15:57:10:e8:
5e:08:ae:cc:96:6e:75:39:23:2d:a5:fa:9f:7e:fe:30:23:77:
15:ed:5b:17:ef:ac:a5:6c:45:4f:09:ad:e5:82:f7:f5:e0:63:
7c:77:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:30:26 2024 by rpki-client on console-fra.rpki-client.org