Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/dqr9QyEClP1bT7jlVh6hDzbnJ2A.roa
File: dqr9QyEClP1bT7jlVh6hDzbnJ2A.roa (raw, json)
Hash identifier: PwfL7IrPOaP/gE1ZB2tUi6toKhxDvUoOVhz6PmHtPd0=
Subject key identifier: 76:AA:FD:43:21:02:94:FD:5B:4F:B8:E5:56:1E:A1:0F:36:E7:27:60
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 019224008CE9418BD5D01648D9C3A146193F
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/dqr9QyEClP1bT7jlVh6hDzbnJ2A.roa
Signing time: Tue 24 Sep 2024 12:27:48 +0000
ROA not before: Tue 24 Sep 2024 12:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57928
IP address blocks: 37.157.11.0/24 maxlen: 24
2a14:6c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:24:00:8c:e9:41:8b:d5:d0:16:48:d9:c3:a1:46:19:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Sep 24 12:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76aafd43210294fd5b4fb8e5561ea10f36e72760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:a9:fc:6e:27:6d:a9:46:2b:90:33:8e:2c:
3a:0a:64:70:7a:66:d9:61:82:87:b3:9c:06:e2:1d:
74:fa:ef:db:e6:e4:e7:dd:f2:8d:48:b3:bd:ca:df:
ff:81:f3:e0:f9:09:e5:43:05:ea:83:a5:9f:b8:a4:
d5:89:c1:67:84:6a:fc:79:b7:7b:66:61:a5:26:c1:
b0:87:52:67:c7:d8:64:65:6c:74:72:fd:67:ff:42:
4c:89:bf:c3:14:81:06:9e:dd:75:2a:b8:80:07:86:
a5:7d:d2:f2:38:52:5c:63:66:e3:72:da:49:ad:c4:
d4:4a:82:75:db:93:32:44:44:ee:dd:f4:16:90:6b:
63:a0:9e:66:d6:9a:94:19:63:92:3d:56:28:25:7f:
01:3d:06:aa:0c:d6:15:32:37:4f:2d:41:9f:9c:50:
5c:30:bf:ae:fa:2f:99:c2:fb:aa:b4:47:9d:12:97:
28:3b:9d:a8:24:5c:d7:8e:3b:6b:c1:09:be:e2:be:
c2:3f:66:59:09:b0:86:77:de:f6:86:45:01:4a:6d:
31:df:96:be:e8:52:fa:83:80:5d:a0:f9:4b:87:d6:
dd:85:d8:d3:16:2d:1c:2f:0d:21:03:c3:18:80:57:
62:16:bc:48:d7:94:cf:9d:6f:a5:74:9f:ad:c4:08:
56:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AA:FD:43:21:02:94:FD:5B:4F:B8:E5:56:1E:A1:0F:36:E7:27:60
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/dqr9QyEClP1bT7jlVh6hDzbnJ2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.11.0/24
IPv6:
2a14:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
0d:c4:3d:89:1e:cb:27:aa:b4:2b:5b:10:1d:1e:fa:66:81:52:
43:5c:2b:e6:87:7c:42:df:7f:ba:f0:9f:88:3d:b0:02:98:a3:
48:86:da:28:75:a4:04:0b:e9:70:7e:dc:9b:05:95:13:a4:76:
dd:4b:00:06:a6:53:01:ce:bb:db:af:2b:de:46:4e:04:13:02:
24:fd:2a:76:5b:de:2b:ff:17:55:90:be:f1:78:64:0a:3b:02:
d5:7b:d0:c2:9c:4b:98:97:f7:a5:39:0a:97:7e:b1:f7:07:83:
43:30:42:64:ca:f0:d3:aa:83:c6:74:cb:b3:d6:57:fb:98:83:
d1:7d:70:a9:7f:3d:e2:7b:e1:24:6a:68:12:fd:03:54:02:cb:
eb:fd:a9:b0:ad:5a:4a:b2:44:a5:9a:b8:ca:98:3c:00:da:89:
da:f8:b4:57:96:b0:aa:4b:69:79:bf:83:e2:a4:25:e8:ae:14:
17:80:87:5e:1b:a0:b3:28:7d:22:d3:26:9f:54:f7:d4:b9:73:
f6:63:3e:df:ec:c6:92:9e:0f:23:99:c3:a4:35:19:b5:0d:23:
bb:a8:75:57:31:9e:57:48:ce:60:79:40:21:96:f0:da:a1:32:
07:33:61:d6:2a:83:01:a3:38:5c:87:20:03:2c:2d:41:3e:e4:
c6:8c:4c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:55 2024 by rpki-client on console-fra.rpki-client.org