Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/gqZCdfV5ZNGMG5wHnPyagCkSts4.roa
File: gqZCdfV5ZNGMG5wHnPyagCkSts4.roa (raw, json)
Hash identifier: ++0dvzNtSUbEcCgvL0Zjb0jd0vdqu0Dpb7ZPDoCG2QA=
Subject key identifier: 82:A6:42:75:F5:79:64:D1:8C:1B:9C:07:9C:FC:9A:80:29:12:B6:CE
Certificate issuer: /CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Certificate serial: 018CC56DDE537F2CCCEA59F8186577D663FA
Authority key identifier: 94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/gqZCdfV5ZNGMG5wHnPyagCkSts4.roa
Signing time: Mon 01 Jan 2024 14:29:21 +0000
ROA not before: Mon 01 Jan 2024 14:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42934
IP address blocks: 91.209.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:de:53:7f:2c:cc:ea:59:f8:18:65:77:d6:63:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Validity
Not Before: Jan 1 14:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82a64275f57964d18c1b9c079cfc9a802912b6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2b:e2:bd:99:a8:cd:d1:7d:85:10:6e:34:64:
27:38:25:86:ad:80:a9:eb:98:65:b0:58:e5:4f:77:
99:c0:90:fc:58:9c:8e:22:a6:7a:59:a8:8d:1c:d4:
4c:ab:58:78:c0:c7:a4:f4:fa:f4:39:1e:9e:22:5e:
5c:96:1e:93:4e:e5:1c:ef:51:73:ba:c8:ee:ca:38:
20:10:e5:56:14:e4:7d:9e:5e:6d:1a:27:b0:86:16:
3e:fd:db:99:83:ee:af:d2:97:cf:cd:6a:ee:76:98:
5a:d7:67:5a:5d:aa:f3:71:02:e1:94:87:5d:d8:fd:
fa:64:48:51:15:e9:a5:4d:98:95:8a:08:ff:d2:83:
03:3d:3e:89:c3:d5:01:88:a3:11:d1:43:be:c5:a8:
f4:20:bc:8d:df:0e:cb:72:c8:0a:49:60:d6:bd:a7:
f0:56:b7:a5:c3:db:dc:05:cf:0c:ce:a6:5a:c2:fa:
fb:2a:ff:ee:a1:17:59:ed:eb:9e:15:84:49:60:be:
bd:72:2c:11:3e:f9:13:e7:0e:4a:d6:03:41:bf:fe:
38:0d:8a:7c:e7:26:c5:a6:b8:82:fc:99:e8:1c:dc:
be:00:f7:72:0e:63:40:7a:75:d9:f6:4a:36:a2:e2:
14:a7:85:72:5e:35:2f:57:9f:e4:1b:f3:14:e3:5d:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:42:75:F5:79:64:D1:8C:1B:9C:07:9C:FC:9A:80:29:12:B6:CE
X509v3 Authority Key Identifier:
keyid:94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/gqZCdfV5ZNGMG5wHnPyagCkSts4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c7:6f:bc:53:e1:1f:79:cb:9d:ab:6c:65:8d:29:a1:78:ac:
cb:89:cc:54:7c:2a:b1:0a:74:22:55:9e:77:e3:b3:a9:bd:1e:
19:c0:c2:9d:24:a1:15:3c:51:93:a5:cc:e7:28:8f:ba:cd:44:
6b:79:99:83:31:12:98:67:1a:cb:b0:9c:f2:a9:ca:d6:1d:c1:
aa:8b:d2:22:cd:84:1b:61:98:6e:a9:a3:82:ad:22:97:39:6c:
ac:d9:93:42:b7:1f:6c:e0:73:b8:9f:35:61:33:9f:52:93:66:
69:5f:3c:ff:81:dd:02:a2:23:9c:f6:bd:9d:af:b9:26:78:9f:
81:32:e5:2a:e0:89:63:ce:35:d7:5d:b7:10:a1:e5:b5:6e:fc:
4f:25:97:52:bb:d2:10:ce:cc:b6:a9:41:19:d5:7f:50:19:ed:
e4:e1:04:2c:24:cd:47:0b:77:bc:f7:7d:b2:ba:cf:dc:78:19:
da:9e:d7:36:71:6f:31:74:d4:1e:53:d3:6a:21:ef:10:5d:4e:
9c:b1:65:38:79:d2:2e:7c:e4:d1:30:19:af:93:05:49:2c:92:
24:f5:14:8e:2e:1f:64:1b:ff:fe:24:81:0c:7d:3c:4e:bb:a8:
6f:16:76:5a:35:1f:c2:fa:5f:38:38:f0:c9:2f:9b:1c:4e:56:
13:c9:40:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:42 2024 by rpki-client on console-ams.rpki-client.org