Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/RXHk3atO2mRr6pCxiwqqgXlyQgU.roa
File: RXHk3atO2mRr6pCxiwqqgXlyQgU.roa (raw, json)
Hash identifier: KKaz7TnoNn3C+WRSPhhEKu2mI0zNIxrn8yLpEZ0waWg=
Subject key identifier: 45:71:E4:DD:AB:4E:DA:64:6B:EA:90:B1:8B:0A:AA:81:79:72:42:05
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 018CC8DF01AE1C77316FE92AD9B4FAEAF19B
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/RXHk3atO2mRr6pCxiwqqgXlyQgU.roa
Signing time: Tue 02 Jan 2024 06:31:47 +0000
ROA not before: Tue 02 Jan 2024 06:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21500
IP address blocks: 91.211.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:01:ae:1c:77:31:6f:e9:2a:d9:b4:fa:ea:f1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Jan 2 06:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4571e4ddab4eda646bea90b18b0aaa8179724205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:15:d8:c3:06:cc:50:7f:4b:e7:70:78:98:
d2:3a:4d:ac:a4:4e:f4:1d:b3:2f:22:7a:bd:17:43:
c1:b1:7b:73:ed:cd:6c:6d:3b:14:3f:ed:cb:ae:51:
71:38:aa:2b:ca:6a:c2:41:d0:85:61:22:4f:0b:aa:
09:6e:7b:d5:09:60:b0:72:28:e8:c5:96:f1:20:90:
70:fe:47:33:6f:e9:9e:c0:1d:1c:b7:3c:6e:ea:99:
87:a2:21:34:05:d1:94:d7:f9:69:29:f7:98:f5:85:
fb:38:b9:8d:cd:d3:7e:dc:59:47:02:9b:b1:82:23:
c5:fc:e8:1c:38:9e:46:e1:ec:29:bc:67:57:73:3f:
1b:92:1d:4b:2e:43:f0:4a:9e:1c:a6:7d:19:3f:b7:
35:72:ce:e3:22:05:9d:ee:df:b8:47:23:e7:3a:4d:
3d:78:fb:e0:7c:15:36:db:7d:ed:89:55:73:5d:b0:
bf:05:2b:58:c2:c2:61:9a:33:31:ad:ce:07:9c:a3:
ba:3d:60:85:2c:b2:68:23:66:6f:fd:ef:c8:66:ca:
29:57:18:e6:51:ac:52:97:33:5e:2e:67:6a:57:20:
91:9c:70:b6:6c:06:3e:b9:54:40:92:14:e1:fa:85:
75:be:7e:e5:88:73:e1:62:58:aa:c6:95:9f:30:ec:
72:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:71:E4:DD:AB:4E:DA:64:6B:EA:90:B1:8B:0A:AA:81:79:72:42:05
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/RXHk3atO2mRr6pCxiwqqgXlyQgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.12.0/22
Signature Algorithm: sha256WithRSAEncryption
82:6c:d8:cd:a8:d1:eb:f7:d1:e4:7d:05:c7:d2:99:7d:4b:d2:
da:90:1c:11:d0:01:00:4f:64:96:39:2e:17:13:8c:5c:9e:f7:
e0:fd:b9:40:4a:ce:03:41:aa:27:1b:ba:64:9a:73:b0:1e:96:
fb:8b:d6:9c:ca:16:f7:cd:f5:37:01:c4:19:fb:e7:24:f5:39:
05:cf:5c:0b:a2:32:d5:4d:12:7a:83:d7:de:14:f1:0b:60:1f:
c4:35:15:05:bc:b5:db:f8:4e:18:66:b1:e0:01:fe:19:5e:0b:
47:e9:2d:25:ef:f7:f0:1a:10:a7:c1:3f:24:da:de:28:10:ed:
68:d8:15:76:59:8f:de:b4:ca:7d:3f:75:5b:d9:c5:67:4b:19:
4c:a5:59:06:49:fe:12:72:28:2b:f0:3d:ff:91:55:1e:2c:67:
df:7c:4d:9a:20:48:8c:3a:f6:cb:8f:8b:0e:a8:b5:70:20:35:
8d:7f:45:c1:83:d9:9e:a6:d4:0c:8c:f2:5d:19:e1:95:8b:9c:
a0:13:4e:f4:2e:f8:a4:04:75:53:44:cb:b6:e4:38:73:1b:1b:
c0:de:c1:af:b3:e5:37:5c:d9:cc:ef:3d:5c:90:df:c7:f6:26:
9c:a0:3a:73:4e:ae:e1:bd:30:38:12:5b:41:fb:0e:ea:19:92:
73:84:54:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:17:55 2024 by rpki-client on console-ams.rpki-client.org