Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/QC8kWDM-acjm_iAFAt2T5uSZRps.roa
File: QC8kWDM-acjm_iAFAt2T5uSZRps.roa (raw, json)
Hash identifier: kHTuPb56ECnlZ8EeUa9UNoxNsAlpHPYQc+sc6sF7j2Q=
Subject key identifier: 40:2F:24:58:33:3E:69:C8:E6:FE:20:05:02:DD:93:E6:E4:99:46:9B
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018DD61701204BF1448029509C9014AB22ED
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/QC8kWDM-acjm_iAFAt2T5uSZRps.roa
Signing time: Fri 23 Feb 2024 13:10:48 +0000
ROA not before: Fri 23 Feb 2024 13:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 91.102.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:17:01:20:4b:f1:44:80:29:50:9c:90:14:ab:22:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Feb 23 13:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=402f2458333e69c8e6fe200502dd93e6e499469b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:ce:96:b0:15:4c:b8:86:cc:8a:1e:ea:86:
d6:50:2a:dd:90:22:8c:1f:cb:9c:23:28:1f:77:1c:
e6:71:be:12:3b:f0:e9:c6:3b:19:8e:0b:d9:dc:73:
77:15:26:2f:6f:20:0e:fc:32:aa:21:dd:4e:f4:47:
c6:05:95:87:cc:bf:18:c1:40:e8:81:42:3b:2a:98:
c5:cd:b1:37:6e:83:12:2a:87:3e:ec:04:45:d2:0f:
f2:e8:93:7f:b7:39:51:3d:e0:6d:7e:f8:6e:84:0d:
45:18:9e:de:12:90:c6:c7:52:df:cd:97:20:d5:76:
0a:0a:3f:bd:50:a8:1f:72:19:55:65:b9:d6:ec:6b:
ec:75:23:51:80:5e:4b:3f:48:10:d2:8e:6c:c3:21:
56:9a:f8:9b:51:f0:2a:6b:af:80:5e:e0:ec:4f:12:
32:4c:09:71:44:54:d9:1f:09:0c:cb:97:ca:ea:84:
a1:24:ef:89:3c:e8:e0:41:92:58:4a:c3:31:f1:7b:
3d:45:46:97:49:e9:fd:d5:d6:6a:a6:a7:0e:3a:6e:
28:0b:1a:a9:d0:65:a6:70:08:73:2a:f9:13:1d:f3:
ca:d5:6e:7e:e1:32:ef:cd:85:15:67:13:ed:a9:7a:
4e:53:78:dd:c2:c0:91:fd:48:7d:b4:5b:4c:30:16:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2F:24:58:33:3E:69:C8:E6:FE:20:05:02:DD:93:E6:E4:99:46:9B
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/QC8kWDM-acjm_iAFAt2T5uSZRps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:83:6a:b4:35:ef:9a:21:14:b4:c0:34:de:90:64:f6:a4:7b:
4d:dc:58:2e:25:0b:8d:cd:68:75:59:44:cb:92:c1:83:ba:1a:
a6:9c:d1:65:5c:11:4d:5a:77:30:50:91:16:9c:a1:87:37:76:
08:90:5c:77:dc:68:d0:20:b3:bb:1b:2d:80:67:2d:93:df:75:
21:53:11:db:db:9d:80:c0:f7:8e:c6:6e:05:4a:99:a4:56:4a:
26:aa:9f:12:65:eb:9d:e1:8f:f5:2e:1e:b7:70:e2:ef:c8:d2:
44:ad:09:05:ed:4e:9c:e0:81:c7:de:c0:45:29:64:e6:1e:39:
75:d6:92:2e:29:b4:63:bf:7b:2b:df:74:a7:3c:6d:c3:11:74:
3c:3a:da:4a:0d:01:21:99:bc:4f:73:e9:72:45:32:0a:ef:35:
eb:ea:55:2b:c9:70:ef:74:54:2e:04:db:71:06:7f:cd:b6:0a:
45:8a:98:dd:70:d6:fd:77:62:a7:da:c1:84:e6:6f:90:af:fb:
0b:54:ee:6f:50:79:e0:91:06:0a:d4:46:31:19:63:02:e0:0c:
eb:32:66:c5:53:51:2c:1b:94:0b:37:7b:f5:14:e4:59:5d:32:
32:cf:19:77:cb:c0:a1:53:06:d1:5d:86:4a:74:cb:65:2d:66:
8d:d5:00:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:28:18 2024 by rpki-client on console-ams.rpki-client.org