Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/1-lGglpQDnZGWDbvCoZRMEy4tPQk.roa
File: 1-lGglpQDnZGWDbvCoZRMEy4tPQk.roa (raw, json)
Hash identifier: QV3GIcSRGyDq2EvEz/UzpgUK4MN+m7Hhi9/P3xQEzBI=
Subject key identifier: FA:51:A0:96:94:03:9D:91:96:0D:BB:C2:A1:94:4C:13:2E:2D:3D:09
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 0192499D26D0BEBC14F0B02C3D8BA15CDDA4
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/1-lGglpQDnZGWDbvCoZRMEy4tPQk.roa
Signing time: Tue 01 Oct 2024 19:44:48 +0000
ROA not before: Tue 01 Oct 2024 19:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31242
IP address blocks: 91.192.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:49:9d:26:d0:be:bc:14:f0:b0:2c:3d:8b:a1:5c:dd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Oct 1 19:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa51a09694039d91960dbbc2a1944c132e2d3d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:87:4d:76:d5:56:f6:ad:99:63:fb:5e:1f:1d:
05:53:ba:4e:9a:b5:da:fb:fe:a0:11:48:c5:76:cc:
43:7d:38:0f:8c:e7:fb:58:1e:c1:af:ce:0a:fe:f9:
fb:0a:42:7b:31:47:43:6e:75:96:f8:9f:cb:35:27:
fe:e3:51:4c:c0:5c:1b:84:39:52:0e:ff:a9:2e:64:
e0:00:74:0f:43:e2:28:e9:79:38:02:2e:b0:e5:f1:
e9:15:8e:ef:91:44:60:92:c5:9e:49:e3:d5:4d:c1:
ce:ec:5b:16:ab:82:01:eb:a0:45:7b:74:e5:6d:91:
84:54:41:cf:eb:fc:09:5a:fa:e9:8c:80:33:d4:6b:
51:bd:8a:03:70:db:0c:dd:bb:a2:9c:5c:3c:c7:3f:
cb:cc:f4:52:f7:75:2c:cd:27:60:c2:e7:ee:26:48:
f5:88:fc:93:98:6c:d1:22:22:cb:1f:1c:17:ae:34:
d0:99:9b:c7:1a:95:1f:e1:8d:d3:75:e9:9c:93:0c:
fd:8e:5d:5d:5d:66:d7:b0:64:e0:a4:92:24:c0:14:
5a:ca:5e:ed:4e:fe:38:bf:7e:4d:15:41:dc:63:d5:
f5:cd:47:cd:98:88:23:b1:d0:d8:09:40:a3:f5:f6:
b3:4d:2a:e6:81:2d:13:0e:9a:90:46:43:16:20:da:
35:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:51:A0:96:94:03:9D:91:96:0D:BB:C2:A1:94:4C:13:2E:2D:3D:09
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/1-lGglpQDnZGWDbvCoZRMEy4tPQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.56.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:9e:71:23:dd:e2:c0:4b:a4:b5:c7:2b:92:dc:16:1d:43:23:
a6:f3:03:05:b6:94:75:07:35:7c:08:05:d5:1d:83:46:09:c7:
6f:63:76:60:0f:a4:1d:03:5c:55:b0:af:c6:79:91:9c:9a:da:
c0:6f:5f:68:6d:ef:d7:94:9e:85:b5:34:b5:2f:74:68:35:69:
b2:aa:11:28:94:c9:b6:ca:1c:47:c9:23:a4:d7:f4:c2:0a:f7:
02:2c:49:c1:a0:2f:a5:70:fd:a4:1f:b7:bd:ef:40:c1:8a:42:
ab:60:9e:dd:38:80:57:04:af:80:ed:3d:0f:0d:5f:02:92:05:
2c:53:d0:cc:ee:f4:7b:04:4b:ef:82:3c:e7:a5:3d:cc:a8:3b:
bb:4f:28:e3:e3:29:04:03:08:e8:39:2f:3c:10:79:2b:bb:3a:
18:a7:72:31:16:2f:33:9c:89:ea:2a:e3:43:cb:15:a5:63:42:
e3:a6:f5:00:11:9f:0f:ff:ee:fa:0f:b7:8d:ed:09:e5:f4:66:
c4:5d:09:d9:b8:b9:80:35:a9:ea:5f:9b:b2:fd:40:6a:8c:cc:
e9:f3:14:33:fb:82:c1:c0:5c:3c:b9:d6:20:48:a5:a7:ad:6a:
0f:e5:d1:23:df:b0:cb:5d:33:2b:be:c6:58:b5:a0:28:d1:af:
27:b8:e6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:45:50 2024 by rpki-client on console-fra.rpki-client.org