Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/3QnQmxwRDVNhZUdFIugYFw980y4.roa
File: 3QnQmxwRDVNhZUdFIugYFw980y4.roa (raw, json)
Hash identifier: YnNmtJUGL2cPJ5gOze0E33uIIJfIAY1VYUi3NUSWDRM=
Subject key identifier: DD:09:D0:9B:1C:11:0D:53:61:65:47:45:22:E8:18:17:0F:7C:D3:2E
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF0B808365456CE9A1FFC4D67216E
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/3QnQmxwRDVNhZUdFIugYFw980y4.roa
Signing time: Tue 02 Jan 2024 04:30:28 +0000
ROA not before: Tue 02 Jan 2024 04:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51557
IP address blocks: 91.93.151.0/24 maxlen: 24
91.93.146.0/24 maxlen: 24
91.93.149.0/24 maxlen: 24
91.93.152.0/24 maxlen: 24
84.51.21.0/24 maxlen: 24
84.51.25.0/24 maxlen: 24
84.51.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jul 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f0:b8:08:36:54:56:ce:9a:1f:fc:4d:67:21:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd09d09b1c110d536165474522e818170f7cd32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d1:36:6a:9e:5a:84:ca:2d:a3:35:df:5f:16:
a9:c1:85:4e:ba:ec:6d:29:c8:a3:5d:f5:2c:5f:2c:
23:6b:6e:07:ba:ea:6c:51:0c:da:f0:ea:d0:82:19:
e4:e2:b7:5c:e5:d5:a9:12:c5:b8:31:97:cd:9b:4f:
99:bc:71:69:cf:8f:47:4b:26:ca:2a:b4:82:d1:4d:
aa:d1:19:2c:bc:3f:92:e8:4d:60:ff:7f:56:f4:8a:
e1:82:8a:73:49:1c:70:6c:36:0d:7f:76:87:72:31:
ed:20:8a:aa:da:7a:38:57:25:c0:4e:24:67:33:07:
a5:1a:f0:b9:a4:25:74:ee:82:65:aa:ee:a5:4e:4f:
86:4e:91:61:05:9d:b8:40:15:21:95:d0:27:f0:aa:
2a:34:12:a0:35:85:2e:8b:19:f8:1b:a0:84:92:00:
6a:46:2d:52:fe:c3:e7:26:ce:8d:5e:a4:a8:6d:64:
8c:5b:ae:75:6b:a7:c6:1a:e6:aa:78:0c:b8:c6:ce:
9c:48:29:48:e7:97:d8:81:3a:33:5c:83:d7:cf:ce:
89:3a:e0:33:60:e9:29:be:13:51:db:b4:94:52:4f:
ab:7b:02:46:04:e4:21:84:7d:6b:56:6b:ee:18:ab:
ad:68:56:f3:f9:9b:01:5e:2d:1e:e0:a1:4a:1f:8d:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:09:D0:9B:1C:11:0D:53:61:65:47:45:22:E8:18:17:0F:7C:D3:2E
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/3QnQmxwRDVNhZUdFIugYFw980y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.51.21.0/24
84.51.25.0/24
84.51.38.0/24
91.93.146.0/24
91.93.149.0/24
91.93.151.0-91.93.152.255
Signature Algorithm: sha256WithRSAEncryption
2e:05:fb:75:5d:9c:57:76:28:4d:8e:77:83:9f:22:08:b8:fe:
23:32:c9:1b:e9:24:c7:e0:44:ad:e3:e0:0d:29:02:8d:57:94:
36:5a:48:8b:5a:fa:2b:f8:63:5a:98:96:9e:9b:be:db:c9:45:
d8:f4:bf:cb:c4:87:84:8f:97:c9:44:db:f4:83:0f:02:1f:13:
02:1b:a5:75:c6:a9:cc:31:0d:20:c3:0a:57:cc:9f:28:8d:d5:
14:69:8a:7b:d3:3c:e6:bf:36:59:c2:1e:dc:0b:95:7a:cc:84:
d2:ea:16:c7:1e:2a:40:1e:22:2d:17:bf:c1:f9:ca:80:af:98:
3e:4b:66:84:d2:ab:6f:d5:d1:eb:41:ac:c2:45:ce:bb:55:2d:
fc:7f:ce:f0:f6:74:25:54:2f:4b:0f:e3:43:39:54:d7:b5:50:
e7:27:5c:81:10:a4:69:fd:93:69:9c:41:64:76:2d:2f:59:3d:
6e:2f:f9:c6:86:07:f0:79:d6:33:d1:cf:78:88:86:07:1a:cf:
5f:7f:1c:87:9a:43:85:cb:4b:73:24:b2:95:36:52:e1:d5:e2:
73:eb:fc:bc:35:52:32:26:b1:63:15:ae:dd:d7:d0:78:3a:b2:
a1:0a:55:8f:8a:63:a8:04:f3:16:a4:a7:80:3b:34:0a:1d:05:
d0:86:19:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 09:45:28 2024 by rpki-client on console-ams.rpki-client.org