Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/LQVVkFpcE820tXGvW_5znwVJVXw.roa
File: LQVVkFpcE820tXGvW_5znwVJVXw.roa (raw, json)
Hash identifier: W+TaUg7klADDmejy6tvRv+kXJzEiv36xfPNEdcWXFwI=
Subject key identifier: 2D:05:55:90:5A:5C:13:CD:B4:B5:71:AF:5B:FE:73:9F:05:49:55:7C
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 0192E71B7E64A10B9F6393D110D20FEE8CBA
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/LQVVkFpcE820tXGvW_5znwVJVXw.roa
Signing time: Fri 01 Nov 2024 09:43:11 +0000
ROA not before: Fri 01 Nov 2024 09:43:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216286
IP address blocks: 91.199.2.0/24 maxlen: 24
2a13:e440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e7:1b:7e:64:a1:0b:9f:63:93:d1:10:d2:0f:ee:8c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Nov 1 09:43:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d0555905a5c13cdb4b571af5bfe739f0549557c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:8c:ba:fd:e6:05:a0:2b:8c:6c:f4:42:e7:
5f:ee:bb:08:eb:61:c3:75:d6:4c:fa:a3:1a:11:a6:
e5:b1:86:0f:02:d5:37:09:00:21:40:c1:3e:f8:57:
14:a8:70:d6:28:a1:53:91:9e:94:40:cb:0f:1c:13:
91:92:ba:c0:fc:bc:30:42:b3:11:5a:03:12:a8:6d:
d0:5c:86:05:4a:51:2e:ca:94:0b:69:1a:71:17:fd:
d9:6b:22:86:1c:d9:0a:17:28:29:fe:7b:5d:26:8d:
f8:76:4b:85:5d:8a:6d:c1:c7:55:18:e0:80:41:34:
12:f4:68:20:9f:45:2e:72:01:ce:2b:91:a4:7b:30:
4d:f8:b9:16:c5:7b:20:77:c9:ba:29:b6:6c:67:1a:
bd:8e:4f:c0:7d:51:f4:3f:01:22:aa:d1:8a:42:45:
8d:96:7f:a9:f8:d0:79:42:0f:9b:ac:01:17:78:c9:
1c:b2:47:e1:91:b0:52:e3:61:96:9e:c6:e1:22:4a:
24:f1:59:1e:af:4b:0c:16:ed:c6:3c:21:3c:ff:3c:
b9:5e:05:cc:aa:a0:f4:89:37:a7:c3:55:39:92:0e:
78:59:46:07:75:90:92:dc:45:fc:69:2b:7d:63:90:
60:4a:96:ac:6c:93:cf:81:ab:cd:a6:13:62:b3:5a:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:05:55:90:5A:5C:13:CD:B4:B5:71:AF:5B:FE:73:9F:05:49:55:7C
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/LQVVkFpcE820tXGvW_5znwVJVXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.2.0/24
IPv6:
2a13:e440::/29
Signature Algorithm: sha256WithRSAEncryption
61:af:e2:4e:8b:bd:58:21:de:38:cf:16:e3:02:8b:5b:63:42:
7c:91:a4:3a:21:c7:f8:25:27:ee:e4:e3:c1:29:61:ac:b7:3e:
b7:c4:3a:b2:bd:6c:63:d2:56:fb:31:75:63:dd:e7:7e:ce:66:
30:76:7c:f2:0e:a0:0d:58:ff:7c:40:2e:e0:2a:0f:a1:5b:29:
bf:a1:4d:13:21:78:ad:69:a7:d9:dc:22:9a:c3:88:e8:9a:ad:
43:6d:f6:21:07:13:cd:77:93:b6:4a:0b:ec:43:09:fa:1c:0e:
c4:0f:aa:82:0b:33:81:30:6c:e5:5e:d3:15:e7:e4:7d:4f:a0:
41:a1:0c:2f:36:df:5a:a3:e7:37:17:1d:da:16:bb:f0:4c:95:
75:4f:20:0b:87:f7:27:4c:f2:3b:3e:61:32:db:dc:a8:de:83:
86:0d:fc:5d:1f:80:0e:37:bc:1c:18:c3:8d:19:a1:6c:e8:3b:
82:04:b8:e4:4a:39:be:2f:da:e9:14:11:3c:07:e1:ef:10:09:
fd:57:cc:7a:f6:a3:82:40:bb:4a:1f:7c:ca:52:89:af:64:1c:
de:78:cc:3c:b5:71:3e:be:4e:ac:4a:69:2b:e7:ab:c9:24:c6:
44:64:ba:61:0c:ff:0a:d6:5c:8c:19:24:f9:cb:ef:c8:a6:0f:
6d:68:ee:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:08:33 2024 by rpki-client on console-fra.rpki-client.org