Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/qbnjXPQhdBmz37H8m2G2_YGP7V0.roa
File: qbnjXPQhdBmz37H8m2G2_YGP7V0.roa (raw, json)
Hash identifier: n/SRYVNJHIlj+eOFVVp9oWE+osPyTfUYugEkUynVD1E=
Subject key identifier: A9:B9:E3:5C:F4:21:74:19:B3:DF:B1:FC:9B:61:B6:FD:81:8F:ED:5D
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 0192E343265CDCA72435DCCC37C789FE7712
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/qbnjXPQhdBmz37H8m2G2_YGP7V0.roa
Signing time: Thu 31 Oct 2024 15:48:01 +0000
ROA not before: Thu 31 Oct 2024 15:48:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201532
IP address blocks: 83.168.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e3:43:26:5c:dc:a7:24:35:dc:cc:37:c7:89:fe:77:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Oct 31 15:48:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9b9e35cf4217419b3dfb1fc9b61b6fd818fed5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:40:2e:4e:19:10:e8:bc:f5:7b:84:1a:6c:
b5:da:c1:12:83:f0:2a:72:52:ca:ed:42:52:10:11:
41:c0:89:64:5f:62:f0:d3:5c:8f:33:98:3d:5f:4c:
eb:83:e4:27:04:19:52:49:ac:72:ab:a2:01:22:fb:
5c:d5:6b:75:74:01:af:03:52:c7:dc:ef:ae:5f:55:
77:21:40:7a:83:9e:d6:f3:ff:64:d0:83:99:04:06:
d5:ad:2a:da:6a:e5:1f:e0:8e:fc:71:e1:6b:98:fa:
2e:1c:01:27:fa:79:39:6f:89:89:08:b8:ce:70:9e:
ce:9d:05:9b:b0:59:34:cf:c6:cf:d1:a2:d2:ad:cb:
88:fb:08:ec:84:e0:67:e4:65:07:51:99:67:b3:bb:
ff:a5:c1:eb:b5:78:48:eb:9e:fb:37:a3:85:21:7f:
14:ac:ee:1f:4c:5c:c6:93:48:f8:27:f6:25:48:1e:
5a:6b:bc:67:7e:a7:24:98:62:71:5d:87:4b:da:83:
b7:d5:f5:d5:cb:a4:95:21:80:56:73:26:74:95:f6:
84:0b:fb:c7:ef:cd:5d:19:28:fc:0a:21:b8:55:0f:
12:0e:5a:86:29:eb:55:fa:72:a9:70:83:fa:d0:ef:
d0:9c:b4:1b:bc:fd:3e:8e:6c:d9:7f:8b:b2:6b:ad:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B9:E3:5C:F4:21:74:19:B3:DF:B1:FC:9B:61:B6:FD:81:8F:ED:5D
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/qbnjXPQhdBmz37H8m2G2_YGP7V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.168.92.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:07:b5:31:0c:15:67:9c:91:ce:2c:f6:14:17:49:91:9b:de:
24:ec:57:e4:d0:26:82:b3:7f:e1:e5:a0:f9:72:3e:7a:57:ad:
42:cd:22:bd:00:b6:04:75:11:ec:c9:2f:9b:66:2b:d8:cc:a2:
a5:bf:e8:43:bf:be:5b:af:e6:b5:f4:24:3c:6c:6e:f9:75:94:
ff:fd:ba:87:63:07:d8:78:25:02:bc:af:8f:45:9f:dc:22:19:
ba:27:34:86:ce:a2:c9:4f:59:a2:62:35:33:ab:b3:86:e5:ff:
a2:9a:3b:d2:ef:66:3b:03:88:f2:7e:25:0a:af:ef:b7:d5:fa:
15:e8:db:15:a3:cc:00:7c:7a:36:74:d9:31:f8:17:f4:ed:ba:
c5:60:fb:26:d0:8d:18:af:f5:f2:f6:5d:7a:11:f1:61:83:e0:
e4:f7:c4:56:e4:c1:b2:1e:1b:a3:54:34:d2:09:15:6e:20:c1:
96:3a:b6:7b:09:7c:08:09:88:b2:a7:37:68:48:aa:46:7d:57:
d6:a3:c4:f2:d9:ee:eb:10:b4:16:79:e8:9a:88:71:ff:19:ff:
fa:b7:79:b2:f6:5a:18:75:4d:27:86:10:22:1f:fb:02:b2:02:
22:7d:22:34:b1:06:77:0d:1d:d8:03:f9:8b:5e:d8:c9:b5:8e:
d9:b4:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:56 2024 by rpki-client on console-fra.rpki-client.org