Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/QvhyL50JWuivhT51F2t-TwR75ZU.roa
File: QvhyL50JWuivhT51F2t-TwR75ZU.roa (raw, json)
Hash identifier: bWYr7CbWqKDNnwmSMYOX8Jd99hB/ZKOMuG/2Gwd9xno=
Subject key identifier: 42:F8:72:2F:9D:09:5A:E8:AF:85:3E:75:17:6B:7E:4F:04:7B:E5:95
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 018E9C30AA40CC38F47A9DCFB866E0247DC8
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/QvhyL50JWuivhT51F2t-TwR75ZU.roa
Signing time: Tue 02 Apr 2024 00:23:38 +0000
ROA not before: Tue 02 Apr 2024 00:23:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51824
IP address blocks: 91.221.84.0/23 maxlen: 23
91.221.84.0/24 maxlen: 24
91.221.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9c:30:aa:40:cc:38:f4:7a:9d:cf:b8:66:e0:24:7d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Apr 2 00:23:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42f8722f9d095ae8af853e75176b7e4f047be595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:76:02:bf:78:f7:2a:42:fc:8c:c4:01:2b:69:
af:4f:f6:a3:7b:08:9b:ee:45:5f:76:06:f3:4e:29:
9c:f4:d0:3b:2c:0f:12:76:7e:eb:a3:43:45:33:1e:
3c:07:75:0c:73:55:3f:f6:8a:18:10:01:8b:90:c1:
f5:a1:a8:50:66:51:74:3c:5e:3b:d7:0d:a4:0c:89:
af:91:4a:2a:a4:cc:59:92:ad:72:d6:65:25:e8:43:
7c:81:d6:af:df:e8:44:ec:ce:c4:c7:f2:ff:95:b7:
56:11:cc:a0:16:65:cd:d2:d3:48:42:f4:94:06:bc:
51:19:a0:d7:fa:81:bc:76:80:4b:67:74:8e:0d:c0:
ea:9b:03:2f:1f:fb:cb:27:d3:b6:13:f8:08:da:3e:
09:ba:6c:5e:0b:e3:e9:46:a7:26:73:55:e7:5e:50:
ec:d9:dd:3e:b6:67:c8:0e:2e:aa:c8:1f:82:ff:ad:
a2:2a:c2:a1:ac:6c:d4:4f:9e:6d:5a:66:bb:be:2f:
fd:63:a9:e1:f6:af:e8:58:ae:7e:87:b8:4f:f4:98:
2e:85:23:0c:74:ed:29:0a:06:3f:32:09:d2:35:4a:
4c:58:ff:a5:d4:83:e9:0c:2a:6e:00:2c:ab:f9:71:
ce:38:d0:7d:4f:19:6b:ee:6b:2c:cc:30:98:f6:86:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F8:72:2F:9D:09:5A:E8:AF:85:3E:75:17:6B:7E:4F:04:7B:E5:95
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/QvhyL50JWuivhT51F2t-TwR75ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.84.0/23
Signature Algorithm: sha256WithRSAEncryption
53:78:f9:d2:b2:bc:de:58:a3:ad:83:f9:17:36:1e:ef:a1:b6:
21:6c:90:85:4c:8e:66:f0:81:14:65:d6:e4:91:23:9f:50:ab:
35:37:d7:cf:6f:01:e0:51:82:d4:c3:8c:df:85:d7:22:03:f3:
ce:03:0a:93:03:b1:29:90:7c:7d:45:fb:2a:95:99:b9:86:ec:
b8:7c:6b:70:86:7e:41:5d:c9:74:3c:90:b9:04:82:cb:f9:7d:
61:b6:5c:13:46:3b:f3:58:29:e2:1c:fa:4f:3a:eb:ba:69:9e:
c7:60:90:6a:74:b5:23:b0:f3:f4:dd:d3:f2:a1:fb:45:f8:2d:
b2:77:f6:4e:db:18:79:b2:3d:f4:d8:d3:a0:6d:54:8a:70:4c:
ab:4d:45:89:a8:7f:25:f0:e6:b5:16:41:89:29:1e:65:92:6c:
e1:ff:f6:63:53:82:82:a4:ee:41:81:d8:29:66:92:81:91:00:
74:a8:bb:44:87:5e:f4:19:71:11:21:49:f8:eb:3f:3a:2a:fc:
3e:15:0f:d9:67:42:9e:52:9b:38:a8:c2:cd:09:ec:40:58:52:
09:23:34:c9:bc:44:ad:e4:1e:85:0d:71:46:1c:60:3d:92:23:
80:d0:50:d9:c8:9d:3e:1f:cf:31:5d:79:60:07:17:60:7c:7a:
a3:e6:bb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:48 2024 by rpki-client on console-fra.rpki-client.org