Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Qyttwg3pmxGgDqXwllRkY9Ul1tw.roa
File: Qyttwg3pmxGgDqXwllRkY9Ul1tw.roa (raw, json)
Hash identifier: gpYEbp6fN/SNv3pbuSJLohmNIbw2RU7bBH2ATBZa0uA=
Subject key identifier: 43:2B:6D:C2:0D:E9:9B:11:A0:0E:A5:F0:96:54:64:63:D5:25:D6:DC
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 018CC4930B63980DA45C26FE40959737A9EB
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Qyttwg3pmxGgDqXwllRkY9Ul1tw.roa
Signing time: Mon 01 Jan 2024 10:30:20 +0000
ROA not before: Mon 01 Jan 2024 10:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62239
IP address blocks: 91.216.247.0/24 maxlen: 24
213.255.198.0/24 maxlen: 24
2a04:9300::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0b:63:98:0d:a4:5c:26:fe:40:95:97:37:a9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 10:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=432b6dc20de99b11a00ea5f096546463d525d6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:4d:ff:fa:72:aa:51:6a:86:10:14:45:be:
e7:df:d9:22:13:1d:0f:6a:48:3d:b9:e6:b8:f8:8f:
65:ba:fe:68:1f:05:8a:a2:a6:24:5f:71:1d:ca:d4:
ad:29:ea:f5:11:5f:49:13:ff:48:74:0f:2e:e7:c3:
f5:67:ec:89:97:38:16:99:19:91:6e:bf:d7:c8:fe:
14:b7:ec:26:4f:be:b9:9f:19:5e:62:25:75:18:0f:
08:bd:f2:02:fd:d9:20:e8:52:35:ff:9f:c2:55:d2:
1d:04:72:18:f3:e3:ac:a0:b4:3b:43:b6:37:fa:93:
89:b0:d9:b9:54:ec:0a:8c:d3:c3:66:b1:a4:84:32:
14:69:42:5a:db:28:1e:e2:bf:f1:7c:af:15:b1:5d:
e5:7e:25:f7:25:cd:56:f5:5d:b5:22:15:3f:45:51:
a2:6d:92:3a:78:45:d8:da:8d:41:f9:29:b9:3e:44:
9e:e4:f6:5c:ca:1b:6f:1d:fc:44:ac:e6:e5:ec:4a:
c2:fa:7e:88:2f:28:7c:d8:31:a5:92:c2:34:c8:f0:
7d:88:dd:fe:27:49:e3:e4:46:f9:01:8f:1b:83:f5:
65:b1:b0:06:1e:ab:af:5e:43:28:dd:08:ad:0c:b0:
8b:f8:a7:33:b1:83:7c:f9:30:20:dd:f6:7c:de:b9:
79:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2B:6D:C2:0D:E9:9B:11:A0:0E:A5:F0:96:54:64:63:D5:25:D6:DC
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Qyttwg3pmxGgDqXwllRkY9Ul1tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.247.0/24
213.255.198.0/24
IPv6:
2a04:9300::/32
Signature Algorithm: sha256WithRSAEncryption
e3:dc:8d:48:b6:c6:a2:de:48:65:3d:6c:dd:b4:e0:57:00:61:
75:b1:bc:5d:55:db:d2:2a:98:f5:1e:14:31:a6:a9:6a:9a:87:
1d:4f:c6:cb:6c:2e:40:56:43:35:7c:80:1e:0b:ec:9c:51:b9:
2a:95:16:c3:ed:29:c5:01:76:a1:88:6a:23:ad:b7:84:e8:f2:
7a:1e:c3:48:41:f2:35:0a:cf:75:a9:5f:e8:8d:8b:c6:ec:0e:
83:b4:28:a9:fd:9a:90:b7:4d:15:c3:b9:2c:87:a2:68:a5:1d:
80:e5:24:91:b3:36:78:0d:d3:9f:e6:77:c4:dd:0e:4b:22:8a:
35:9d:88:52:4f:36:ff:3a:57:e1:2d:a9:23:23:47:7b:0c:46:
57:fc:80:ac:6b:de:0f:f5:09:3a:01:4c:ba:dd:2b:6a:c5:b1:
88:8b:25:ea:ff:35:45:a9:10:48:91:f4:af:9c:7e:ef:f5:68:
56:5c:a5:26:5f:f3:b7:6b:48:f5:05:fa:12:58:4b:92:c1:d5:
48:2c:e9:56:56:38:2b:41:f2:df:fa:b7:a4:35:fa:c4:4a:f3:
24:c8:7e:a8:0c:aa:f3:67:86:a6:35:dc:71:fa:0d:55:ef:f9:
7e:06:da:34:e9:4a:0a:d0:ad:e9:e2:31:1b:92:41:2f:32:b6:
cd:8a:92:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:22:33 2024 by rpki-client on console-ams.rpki-client.org