Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/qDhIND7RidKRCSjSjL0rFVBO-qk.roa
File: qDhIND7RidKRCSjSjL0rFVBO-qk.roa (raw, json)
Hash identifier: vC2+1i58Yb7/wTnjk82ttLyMmP6KcnAObkoHEASApng=
Subject key identifier: A8:38:48:34:3E:D1:89:D2:91:09:28:D2:8C:BD:2B:15:50:4E:FA:A9
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 018CC8DF01F62B8B77A65FCCD00D7518F0E1
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/qDhIND7RidKRCSjSjL0rFVBO-qk.roa
Signing time: Tue 02 Jan 2024 06:31:47 +0000
ROA not before: Tue 02 Jan 2024 06:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48471
IP address blocks: 91.211.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:01:f6:2b:8b:77:a6:5f:cc:d0:0d:75:18:f0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Jan 2 06:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a83848343ed189d2910928d28cbd2b15504efaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:15:03:86:0a:66:f4:54:37:2b:31:28:0d:
68:ac:3d:a2:24:cb:c7:bc:5c:d2:95:30:83:bb:4b:
47:c8:67:41:8a:e0:f3:56:53:de:35:a2:2a:e9:99:
0d:1c:93:c7:89:12:11:51:7b:b9:8d:35:57:3c:62:
0c:e8:59:5f:62:43:51:6f:4b:a8:24:21:0b:89:06:
69:c1:5a:c6:00:ce:fc:50:e2:cf:6c:32:ca:83:f6:
55:1a:24:3b:a1:e8:47:d2:5f:72:8a:14:16:da:a9:
a4:e3:de:ff:8a:c3:d9:aa:da:fc:8a:32:38:ad:25:
f3:82:47:39:33:5a:d9:30:1f:88:05:e4:a0:f4:48:
c9:0e:2f:bf:1a:b0:8b:5b:f0:6b:98:96:bf:dd:53:
12:f8:82:b4:72:3e:42:39:60:e1:20:cc:69:76:7f:
0a:f3:25:2a:38:5b:23:52:6b:33:b8:3a:dd:9e:d3:
01:0e:4b:a8:2b:52:4d:16:27:a5:06:31:ab:c7:ef:
78:67:64:45:ec:39:37:4b:d3:6e:f6:0b:bc:16:16:
4d:9c:8a:1e:f0:e7:f2:be:93:ba:b4:63:0b:d1:2d:
6e:c8:57:e0:77:de:5b:a1:a9:2d:f0:fd:10:4e:b9:
89:a6:01:c0:cf:4d:12:3d:93:5a:83:79:cc:c5:d8:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:38:48:34:3E:D1:89:D2:91:09:28:D2:8C:BD:2B:15:50:4E:FA:A9
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/qDhIND7RidKRCSjSjL0rFVBO-qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.12.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:c8:6a:bc:3e:46:0f:20:0d:74:14:6f:95:42:cf:1f:f3:06:
69:7a:9c:56:62:ff:90:17:b5:3f:c4:e8:de:06:77:f4:38:78:
b2:36:b3:74:a8:6f:9b:5a:73:44:17:38:0b:e1:e7:2d:54:9f:
a8:bf:c1:5e:31:7d:6e:4f:f1:1e:51:0e:41:c1:17:8c:75:bf:
4f:22:3d:8c:e9:2d:c9:73:2d:5a:26:37:c0:3d:03:00:d9:27:
7f:75:c0:62:a4:c4:26:95:ce:69:e7:9f:73:2f:6b:4f:5a:a4:
9c:f0:ba:37:63:df:74:a4:94:81:37:1f:18:77:1a:17:34:86:
97:77:15:fe:93:3d:59:10:70:69:13:e5:65:f2:2c:7f:4e:27:
66:10:f0:2b:3b:37:07:18:25:d8:60:c4:e2:22:5d:97:43:eb:
7b:ae:1d:ed:f2:d2:0a:ab:8c:09:c7:5a:1e:c4:1d:42:3f:1d:
9c:13:a9:96:fc:91:03:e5:16:4d:48:5d:7c:2a:f9:fe:7f:67:
b6:ce:74:ba:2d:74:b0:7b:07:c4:45:eb:f9:36:79:e8:ac:f2:
6b:cd:1d:e9:bc:99:0f:9b:a3:a5:24:de:c9:4d:29:20:a1:12:
a6:9a:78:92:99:48:de:95:27:fa:bb:c4:28:a3:f4:60:5d:29:
01:a0:e5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:39:34 2024 by rpki-client on console-fra.rpki-client.org