Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/qkEJRQx-RFghhQI8IXPHoi4x0-E.roa
File: qkEJRQx-RFghhQI8IXPHoi4x0-E.roa (raw, json)
Hash identifier: Fqcs6AfO5bjd7XnTOoC4KCIamECz3sDVM0c8ilA+OrE=
Subject key identifier: AA:41:09:45:0C:7E:44:58:21:85:02:3C:21:73:C7:A2:2E:31:D3:E1
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 018CCA2A916415EA6C666C1C481DCF350EA9
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/qkEJRQx-RFghhQI8IXPHoi4x0-E.roa
Signing time: Tue 02 Jan 2024 12:33:56 +0000
ROA not before: Tue 02 Jan 2024 12:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64419
IP address blocks: 77.91.120.0/24 maxlen: 24
77.91.120.0/23 maxlen: 23
77.91.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:91:64:15:ea:6c:66:6c:1c:48:1d:cf:35:0e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jan 2 12:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa4109450c7e44582185023c2173c7a22e31d3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:21:c7:2f:0f:d6:1c:1a:bd:0c:88:7d:82:
02:2c:49:e1:b0:6b:47:15:7d:ba:67:f8:4d:ca:c9:
d2:b8:96:6a:a2:3b:df:93:e5:f2:df:31:f4:47:19:
48:e3:ae:c1:2f:d0:8d:12:17:51:67:15:f7:f6:d0:
83:42:41:95:dc:1b:85:13:6c:a4:36:ee:78:52:37:
4a:dc:8b:08:8d:50:c4:b4:58:83:7e:37:97:99:00:
44:98:14:c7:89:64:46:c2:33:02:64:32:66:a5:ad:
10:c4:71:c3:79:44:92:4e:0a:62:0f:50:b3:95:b0:
59:1a:21:4a:cc:5d:a5:31:ad:60:00:bd:bd:1d:17:
85:33:08:fb:5e:7f:6d:2d:e4:3d:39:d8:27:a4:d6:
cb:d9:fd:f3:8a:4f:9a:12:69:67:21:3f:ff:8e:82:
2b:a4:25:ba:58:41:d5:85:23:dc:4a:de:62:92:d3:
ab:1e:b2:dc:b6:92:ce:f6:4a:75:f7:23:79:aa:28:
59:b5:f8:c6:b5:0f:d7:c3:9e:91:0c:cf:7a:03:6c:
7a:37:43:e6:1e:09:b7:c7:fe:f1:63:9f:25:ef:ce:
05:6d:8a:a7:1a:e6:bd:87:c5:eb:d8:ea:57:20:b9:
43:23:69:68:25:48:b1:9e:f1:21:dd:eb:ad:2e:9f:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:41:09:45:0C:7E:44:58:21:85:02:3C:21:73:C7:A2:2E:31:D3:E1
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/qkEJRQx-RFghhQI8IXPHoi4x0-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.120.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:21:07:15:6d:28:93:d9:dd:dd:8d:da:67:fe:f7:c3:25:46:
39:21:c6:41:6a:2b:71:d9:35:82:ca:4b:27:6a:b4:0d:a0:f0:
69:81:9f:e9:ec:64:e6:44:3c:2a:25:79:df:c3:1e:17:51:af:
0a:f8:f7:73:3f:30:51:b8:ba:77:8b:97:5f:c6:5a:10:cb:c3:
3f:79:61:96:c2:4d:87:16:79:19:c5:24:9b:e0:df:77:c2:55:
b9:18:47:f6:e0:d9:3b:ac:e2:c5:e6:7f:bc:6c:19:bf:c4:d7:
69:33:39:4e:4f:ab:1c:ce:a0:91:8f:09:f5:6c:c4:c2:8a:7d:
73:44:5c:9e:e5:ed:7c:41:35:42:d6:ea:e7:89:1e:18:ba:df:
a4:d9:59:94:d5:70:b2:45:b5:9e:ab:82:74:92:be:ef:97:aa:
09:2e:ff:9c:36:43:6c:ac:81:57:61:7d:ad:55:73:96:ce:13:
d0:88:31:da:b8:f5:02:3a:63:d3:58:8c:e4:42:84:92:e4:a3:
30:28:77:82:a7:0a:ec:8d:1b:7e:1f:8a:e1:ee:8c:7d:cd:d6:
cb:f3:be:91:d3:20:91:eb:58:97:3f:d6:8b:d9:4d:de:21:a9:
88:d3:21:15:05:5b:0f:71:12:0f:0e:0b:84:f5:ea:9e:c5:6d:
28:87:11:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:03 2024 by rpki-client on console-fra.rpki-client.org