Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/PoMqaupMaYcNil7cYiCSQQsLqgU.roa
File: PoMqaupMaYcNil7cYiCSQQsLqgU.roa (raw, json)
Hash identifier: a/QQKTLK/TmpbE0y3OVINDuo62hiXwAn0dboMsPwReQ=
Subject key identifier: 3E:83:2A:6A:EA:4C:69:87:0D:8A:5E:DC:62:20:92:41:0B:0B:AA:05
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 018CC86F9D18FB1E603044E6A730117ABA33
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/PoMqaupMaYcNil7cYiCSQQsLqgU.roa
Signing time: Tue 02 Jan 2024 04:30:07 +0000
ROA not before: Tue 02 Jan 2024 04:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34762
IP address blocks: 91.198.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:9d:18:fb:1e:60:30:44:e6:a7:30:11:7a:ba:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Jan 2 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e832a6aea4c69870d8a5edc622092410b0baa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4e:42:0c:60:e5:8a:19:9f:bc:83:4b:cf:aa:
91:34:a5:85:38:54:7b:fb:2a:f4:75:fa:3c:29:8c:
df:09:da:05:1d:8d:26:55:b1:5a:0a:9a:a3:fd:d4:
a2:ca:44:b1:34:b0:58:e6:1d:58:e4:80:85:0a:bb:
ac:33:96:da:31:7a:44:30:41:42:a5:52:01:62:25:
dc:63:41:4d:0b:ee:57:2d:85:93:3d:f6:89:a5:4c:
b2:6e:73:68:b1:8a:20:3d:7a:03:7a:45:14:41:b3:
98:70:35:7f:68:38:6c:f0:e9:94:42:13:32:fd:fa:
c8:a2:a5:85:fa:d0:4e:57:d5:57:75:7f:85:45:09:
f0:ff:df:f0:ec:15:1d:6c:f2:8b:b6:7c:ea:b9:e2:
6b:00:43:0f:09:4e:1f:ec:c1:4a:33:6e:0b:c4:b5:
2a:1d:de:78:ba:ce:fb:7f:1e:13:e9:c6:4e:1a:6e:
3c:e1:93:b0:5e:60:9a:a0:71:24:07:e1:8f:f7:79:
9e:11:ed:d0:3f:fa:df:4e:05:ad:12:ef:f1:37:8b:
dd:88:c6:ef:0c:32:1d:e3:7c:cb:2f:ab:6c:d2:45:
97:20:45:32:40:b0:36:8d:5e:9c:05:f3:6a:58:33:
0b:49:4e:59:31:65:50:81:d3:be:b8:21:b8:f9:b6:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:83:2A:6A:EA:4C:69:87:0D:8A:5E:DC:62:20:92:41:0B:0B:AA:05
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/PoMqaupMaYcNil7cYiCSQQsLqgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:3f:f5:a7:0e:47:a2:96:ee:25:f6:a7:da:21:1f:0d:4b:01:
83:01:64:3c:7d:c4:bf:53:1a:35:37:84:d2:fc:6c:ed:1e:a3:
cf:ae:72:59:6e:a5:39:90:79:08:f3:ac:79:3c:69:f0:60:b7:
0c:3c:e7:63:6a:67:14:b6:c3:ff:33:f5:f8:ab:2b:6a:0e:c9:
6c:c7:94:6a:00:08:66:08:2a:97:b2:0c:e2:6c:32:61:70:3e:
7b:46:a4:69:28:68:90:17:1b:40:86:fe:44:03:04:c4:68:2d:
e4:0a:fa:a5:70:c0:75:6f:a3:72:b6:3a:11:7f:d9:37:ce:09:
b1:67:20:c6:f0:7e:ef:0e:40:a0:18:0c:9f:b0:b7:de:f9:df:
5c:ca:38:82:b0:bf:df:1a:8b:90:92:5e:85:a7:8c:57:c5:b4:
47:7d:8a:d1:95:ba:48:41:31:3b:c9:58:49:e6:02:ff:c3:5e:
1f:c0:38:6e:ee:c5:1b:e0:bd:3d:9c:66:79:2d:b6:2a:31:74:
52:50:a0:a6:e8:07:6c:b8:d4:e1:9e:a6:90:8c:65:b3:4a:65:
3b:3f:f3:8d:fb:91:19:a0:08:91:a1:48:58:63:80:30:7e:08:
d8:d9:69:1a:10:0d:b3:48:dc:d6:f6:a5:52:62:6d:5a:1f:5d:
cd:fa:13:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:36 2024 by rpki-client on console-fra.rpki-client.org