Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/qOUncy20l085rk-8gUsUUzinRYQ.roa
File: qOUncy20l085rk-8gUsUUzinRYQ.roa (raw, json)
Hash identifier: kjjqliEvBwLPyl1jKLnYLRPkZpfEV3gY58zeM/5+n2o=
Subject key identifier: A8:E5:27:73:2D:B4:97:4F:39:AE:4F:BC:81:4B:14:53:38:A7:45:84
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 018CC3B683C27AA729E0B2CCEF19A3BCA4D2
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/qOUncy20l085rk-8gUsUUzinRYQ.roa
Signing time: Mon 01 Jan 2024 06:29:27 +0000
ROA not before: Mon 01 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31465
IP address blocks: 91.215.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 08:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:83:c2:7a:a7:29:e0:b2:cc:ef:19:a3:bc:a4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8e527732db4974f39ae4fbc814b145338a74584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:04:eb:9e:8b:27:eb:d9:38:9e:2e:4e:09:
b2:00:ef:0d:69:b8:0a:f9:a6:7d:9c:c7:3d:ff:24:
f8:03:ae:c4:4a:bf:fb:d2:3f:4c:4e:ec:42:ca:78:
d7:da:c7:b1:d7:99:ba:00:45:32:e5:2c:1c:bf:18:
a2:e8:64:47:ae:85:2d:30:3f:f2:30:32:55:b8:40:
d1:07:1b:71:9d:e4:56:0d:6f:56:a0:de:d3:64:d5:
f8:86:d0:fd:56:01:99:ad:bb:e3:6d:09:bc:1d:53:
d9:07:e1:ad:7f:a5:6d:50:b9:43:52:50:14:d6:9f:
56:fa:27:61:0c:69:79:5a:b0:d3:f0:4b:2c:5a:98:
3d:ae:b7:9f:25:a6:1d:f3:e8:60:db:3f:59:98:ce:
d7:e2:38:00:ff:d0:18:61:10:d4:f1:26:58:17:f8:
79:8b:61:82:5a:2a:c5:e9:ec:6e:75:51:7e:2a:54:
b4:1b:29:49:74:4f:a1:99:c0:9c:d0:63:c7:bb:03:
ba:1a:f8:bc:a4:78:a1:df:bc:91:52:d2:d6:08:51:
93:6a:0c:9d:9e:f2:55:f3:59:65:12:24:0c:25:92:
6f:1d:e2:65:db:73:23:ea:a6:a5:72:5f:e8:fc:96:
4c:f8:2c:70:e9:3d:fd:15:93:1d:16:2e:e7:37:77:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E5:27:73:2D:B4:97:4F:39:AE:4F:BC:81:4B:14:53:38:A7:45:84
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/qOUncy20l085rk-8gUsUUzinRYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.138.0/24
Signature Algorithm: sha256WithRSAEncryption
19:3f:c7:ed:27:dc:84:1c:10:4c:8a:d5:c1:bb:6a:8c:af:81:
1e:dd:dd:32:ad:6a:19:5e:db:a4:03:54:d8:df:3c:0e:df:80:
04:85:14:5e:d6:9e:c9:a1:9b:51:16:92:b3:11:de:18:89:7b:
9b:bf:ff:02:dc:de:51:77:1f:39:11:10:bc:35:14:a0:a4:e5:
c0:f9:0e:d8:33:88:f5:72:ba:aa:5a:b8:a2:cc:a9:ee:ec:71:
60:c1:27:a0:39:3e:b0:1a:dc:8c:e4:bb:1c:45:a2:1c:de:e1:
be:af:57:61:07:04:14:2e:e5:6c:36:72:1c:e6:fe:ed:ab:75:
c1:a8:09:dd:94:fc:61:1a:d1:6b:f6:87:ec:93:15:72:9f:c4:
a7:31:35:74:7b:99:d4:7d:4b:25:a4:8a:67:8e:0c:fa:ba:42:
92:58:ec:c0:9e:4a:39:37:86:b4:42:c1:a1:a1:0e:57:db:71:
3f:a9:95:87:99:7a:b5:98:86:3d:88:6a:38:71:f2:4c:5b:b5:
61:f7:e2:d3:85:bb:ff:d9:71:ac:5c:85:aa:e5:37:cf:11:ef:
6d:a0:22:57:2d:61:c9:a6:2f:76:cc:86:22:57:00:c8:ef:79:
d8:14:34:a0:af:96:27:94:10:a6:77:42:c2:69:8b:14:03:f6:
d3:93:4a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 13:16:08 2024 by rpki-client on console-fra.rpki-client.org