Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/KQBQNYIkTJ1xKmvW56N6z6MaqKc.roa
File: KQBQNYIkTJ1xKmvW56N6z6MaqKc.roa (raw, json)
Hash identifier: EKEfYXrJ+Xlm004DVy6YxKzCAZgwcB4vimUTb+JQYH8=
Subject key identifier: 29:00:50:35:82:24:4C:9D:71:2A:6B:D6:E7:A3:7A:CF:A3:1A:A8:A7
Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Certificate serial: 018CC8708F44B982E2610EC70E472F7CA9E6
Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/KQBQNYIkTJ1xKmvW56N6z6MaqKc.roa
Signing time: Tue 02 Jan 2024 04:31:08 +0000
ROA not before: Tue 02 Jan 2024 04:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201879
IP address blocks: 91.199.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:8f:44:b9:82:e2:61:0e:c7:0e:47:2f:7c:a9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Validity
Not Before: Jan 2 04:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2900503582244c9d712a6bd6e7a37acfa31aa8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:7f:cb:fc:15:cc:38:fd:56:61:e6:ac:22:
b4:28:54:d7:62:32:40:59:33:52:22:29:61:57:b5:
94:1f:c0:71:2e:de:3a:34:29:c2:a5:e2:7b:1d:70:
fe:19:32:26:d1:af:12:37:02:9b:c0:ee:cc:0b:b6:
fb:7a:a8:b4:7f:9d:c1:a3:92:92:66:d3:94:a0:af:
e6:6b:9c:e8:00:34:59:45:e1:05:18:04:45:61:b9:
de:eb:b6:a1:08:2e:99:b7:90:28:29:2b:9e:00:9c:
25:82:c6:c1:a7:5a:98:27:66:11:49:2d:d0:b5:e6:
01:28:4a:b5:25:96:5b:3d:da:04:c5:2d:5b:67:22:
7e:97:e7:fe:f7:db:4f:e3:1d:91:c0:a1:77:85:b8:
af:18:21:93:a5:8a:75:3c:33:32:e7:77:42:98:d6:
b0:1b:62:be:72:98:cc:34:6d:63:c5:af:ce:0f:f6:
41:13:2b:e0:ef:95:d1:6a:df:65:63:85:82:46:b9:
3c:d3:d8:93:ce:03:6c:da:a4:a6:c2:5a:71:61:16:
32:bc:78:96:a3:c6:2d:bd:39:93:00:7c:6a:dd:55:
a2:95:99:24:c8:47:79:91:c0:e0:1b:a0:85:f6:8e:
1d:51:6c:e8:3e:e5:61:d3:ef:06:8c:75:5e:b1:ef:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:00:50:35:82:24:4C:9D:71:2A:6B:D6:E7:A3:7A:CF:A3:1A:A8:A7
X509v3 Authority Key Identifier:
keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/KQBQNYIkTJ1xKmvW56N6z6MaqKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.116.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:93:b1:65:6e:22:e4:1e:2e:15:b3:01:e3:4f:0e:06:1a:47:
64:6a:e0:ea:7f:49:d2:6d:3c:0e:27:dc:59:1c:13:a8:cb:1b:
f7:6d:d8:11:3f:dc:c1:2b:42:1c:7f:e2:47:d9:99:3f:9d:01:
11:20:85:bb:3f:a9:c0:63:fe:dd:55:a8:43:8e:bd:e5:8e:19:
01:96:5d:b3:6d:f3:e0:fe:40:97:dd:70:a1:43:c4:6e:ac:02:
c1:a1:20:eb:64:52:89:c4:5e:35:fd:01:d5:ff:f7:8b:b7:d3:
57:0e:9b:a2:37:79:c8:66:48:12:41:63:ba:fd:55:d4:c5:a2:
1c:d0:89:da:cf:de:e3:ce:7a:9d:b6:cf:bc:6b:dd:f7:94:0f:
59:70:9d:69:39:04:b6:67:11:10:93:43:79:e4:c8:ad:05:c8:
4e:5b:1b:87:80:5c:32:d1:5c:ef:e4:8f:e8:a6:2e:c5:6f:d9:
b5:29:77:42:d8:40:4d:b4:a2:87:76:68:77:54:2c:6d:ad:a3:
3f:87:b7:3a:72:dd:4a:3b:fb:60:67:26:20:1a:5a:8a:cc:00:
9b:f1:10:9c:29:00:4e:75:89:6f:95:dc:6b:b3:40:2e:78:7f:
52:76:1f:25:9c:13:cf:1a:07:99:f1:ea:a9:c3:19:5c:99:97:
19:d0:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:07:31 2024 by rpki-client on console-ams.rpki-client.org