Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/wqjhAuVFhtGQ6UYux8u73ciKBD8.roa
File: wqjhAuVFhtGQ6UYux8u73ciKBD8.roa (raw, json)
Hash identifier: BxS0yS10r+pUVdUk4eMIuudbG0y3HuXYon3DEknC9C8=
Subject key identifier: C2:A8:E1:02:E5:45:86:D1:90:E9:46:2E:C7:CB:BB:DD:C8:8A:04:3F
Certificate issuer: /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Certificate serial: 018CC4934274B881F2D67D07FF5185BD58D4
Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/wqjhAuVFhtGQ6UYux8u73ciKBD8.roa
Signing time: Mon 01 Jan 2024 10:30:34 +0000
ROA not before: Mon 01 Jan 2024 10:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207332
IP address blocks: 91.212.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:42:74:b8:81:f2:d6:7d:07:ff:51:85:bd:58:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Validity
Not Before: Jan 1 10:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2a8e102e54586d190e9462ec7cbbbddc88a043f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:46:43:0b:fc:67:d2:3c:6e:4f:63:a0:97:
82:62:1d:cc:be:35:de:76:c4:4f:a8:4b:49:51:a3:
1f:ae:5c:b5:b0:e0:91:f8:50:fc:1d:1a:6e:af:5f:
e1:b2:11:a1:2e:99:8d:5c:66:73:29:f3:36:af:79:
8e:a5:49:01:a5:66:94:ad:82:e5:48:19:5f:2c:ee:
fd:ff:53:0d:a9:bd:7e:a6:c7:58:35:af:37:69:31:
a0:41:52:f1:18:d5:a3:0c:e9:bc:89:ed:47:52:82:
e4:b2:53:f6:0d:80:4e:72:32:14:84:95:8b:74:cc:
56:c9:34:d7:5e:2d:9e:62:1f:20:12:d0:61:7e:f1:
4b:4e:73:eb:da:e7:9d:0f:1d:9d:e3:00:42:12:91:
92:ed:5c:3f:ca:96:37:61:dd:32:47:e3:1d:ea:01:
ca:43:ec:07:eb:02:05:50:08:0a:7c:ed:13:a7:77:
39:49:1f:75:21:b6:8d:17:4a:cf:6c:f0:2d:1a:06:
f4:5c:bd:ae:e1:24:a6:31:24:e7:b2:ae:a0:52:81:
39:ed:dd:c0:7b:1f:99:28:8e:61:c1:ba:7f:c8:08:
0d:06:81:23:94:bf:a8:29:cb:30:8a:dc:f6:96:43:
49:ba:a0:9d:fa:c9:7e:ba:10:53:ec:9b:b8:56:36:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A8:E1:02:E5:45:86:D1:90:E9:46:2E:C7:CB:BB:DD:C8:8A:04:3F
X509v3 Authority Key Identifier:
keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/wqjhAuVFhtGQ6UYux8u73ciKBD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.0.0/24
Signature Algorithm: sha256WithRSAEncryption
47:65:1e:e4:6a:b3:20:94:ae:8b:98:3a:b2:0b:7a:a1:84:a3:
d3:ac:30:84:ea:b8:fa:1d:c7:f6:74:e3:82:fb:6d:b9:1f:d9:
7a:c2:27:c2:89:f4:ae:a3:c5:c3:1f:10:f6:b8:04:02:93:2f:
ad:4e:54:01:5f:18:0d:54:94:2d:bd:c5:13:5a:8f:ef:0e:2a:
9c:98:d4:b6:20:ca:9d:34:ec:c4:e1:28:5d:a6:e6:d3:01:ad:
76:a1:7b:59:43:6f:0d:1f:5d:e4:28:c0:3f:fd:18:71:ed:bd:
90:b2:d0:45:cd:2c:f1:3c:9f:40:ab:fe:51:3c:40:07:7e:54:
90:03:c9:06:f9:12:80:82:49:9d:dc:48:e8:a4:c3:96:db:e9:
f3:1f:c1:14:c6:11:27:78:2d:37:a1:a4:19:a7:6a:1d:91:eb:
f9:dd:7d:94:6b:1a:b5:1a:a7:b8:60:bc:07:a1:b3:6a:d6:74:
24:51:8f:bd:2c:80:28:0d:3b:72:a7:bf:78:97:97:c3:b2:58:
f3:50:b5:2c:2d:e6:8c:63:d9:bd:4a:4d:0f:d1:a8:8d:ab:e5:
82:e4:61:61:90:23:8e:f4:5d:e3:35:52:6d:20:94:a7:6b:e5:
c9:1e:fe:66:c7:56:3f:52:b2:8f:59:ff:9a:63:b3:4e:3d:d3:
1c:76:e1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:38:45 2024 by rpki-client on console-ams.rpki-client.org