Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qm3J58ttk3MQqXgt_kYqC8wieAQ.roa
File: qm3J58ttk3MQqXgt_kYqC8wieAQ.roa (raw, json)
Hash identifier: +V04m4Am1ANzLh8PLk/+c1KXsMtThwNxIH/hiMIxgcE=
Subject key identifier: AA:6D:C9:E7:CB:6D:93:73:10:A9:78:2D:FE:46:2A:0B:CC:22:78:04
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018E616AFC753D20318344DFF09BF5760856
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qm3J58ttk3MQqXgt_kYqC8wieAQ.roa
Signing time: Thu 21 Mar 2024 14:29:45 +0000
ROA not before: Thu 21 Mar 2024 14:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215419
IP address blocks: 91.132.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:6a:fc:75:3d:20:31:83:44:df:f0:9b:f5:76:08:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 21 14:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa6dc9e7cb6d937310a9782dfe462a0bcc227804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:87:f4:52:a7:14:9f:ca:44:99:c5:74:eb:
fb:77:b7:01:1e:b6:c5:2f:a5:5b:0e:69:1c:e6:f4:
a4:a8:eb:80:23:20:b0:6f:35:79:88:8f:fb:9f:95:
e6:23:5f:45:16:99:15:87:0d:1e:cb:13:df:df:ae:
2d:70:63:8e:aa:47:2a:ed:ea:ca:7e:f1:7a:8d:f2:
36:5e:f9:5a:d0:6d:5d:48:b6:4d:d0:f8:68:04:66:
04:bb:a6:ff:87:6c:41:5b:a1:b8:4d:06:a0:ef:0f:
46:77:65:d3:0d:22:d0:91:35:1a:4d:62:97:a8:0d:
98:06:05:50:47:93:55:3b:66:92:40:29:1f:27:a9:
4c:92:b4:0c:b8:0b:38:d5:38:49:67:68:34:13:a2:
63:49:2e:41:6b:8b:19:4f:98:3f:63:0a:ef:24:96:
77:fe:d4:5a:ac:28:ea:c2:f3:7f:09:71:e4:50:c3:
62:13:b7:64:27:2c:27:2f:78:33:39:71:8d:39:ea:
df:88:4c:49:59:34:08:5a:22:00:c0:57:c1:36:f1:
f4:05:0c:47:73:5f:23:09:ee:bd:56:80:03:5a:4f:
06:3d:9d:cb:95:00:4e:7c:62:5a:02:de:37:ea:54:
b6:de:06:52:95:3e:e2:5e:73:3e:66:9a:7f:a7:8a:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6D:C9:E7:CB:6D:93:73:10:A9:78:2D:FE:46:2A:0B:CC:22:78:04
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qm3J58ttk3MQqXgt_kYqC8wieAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.50.0/24
Signature Algorithm: sha256WithRSAEncryption
53:56:0f:40:f2:2a:f5:bd:8e:9a:1a:0e:4c:18:52:3d:a1:4d:
c3:30:85:66:30:d9:0d:b5:0c:63:4b:da:44:62:c4:31:b8:bf:
52:cf:6f:87:85:e8:40:e5:0c:a3:13:a5:fc:de:f0:86:0c:14:
86:a1:8e:01:e5:87:8b:42:d0:c3:1e:32:c4:ee:33:e4:67:9b:
cc:60:01:08:ca:fa:8f:5d:d2:f8:7c:b8:d7:2a:ce:a3:04:50:
e4:dd:36:fd:3a:1f:2f:89:a4:b6:30:6b:71:5a:9f:31:19:de:
23:1b:ac:76:ee:7c:16:d8:14:30:a8:18:9f:bb:3f:6f:88:4f:
f6:90:6a:28:52:f0:39:49:ef:57:b6:e2:2b:66:5f:19:65:5d:
c7:9c:7b:96:98:6f:02:d5:c2:66:d5:57:a7:06:0d:04:49:5c:
11:f0:56:39:b7:3b:f5:ee:5f:e6:b6:d9:0b:a6:f8:e2:30:57:
13:94:d3:3d:50:44:31:03:25:45:81:a8:58:8d:fa:8a:e2:b0:
68:83:cd:aa:2e:3e:a4:48:fc:22:c2:57:cb:d1:d2:ae:64:47:
fa:2e:3f:10:11:12:02:a7:bc:89:ab:56:ad:11:d1:c5:16:b1:
c3:35:6e:d4:39:03:c4:8b:ba:90:57:87:4b:f3:05:9a:84:23:
71:cd:6a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:57:57 2024 by rpki-client on console-fra.rpki-client.org