Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/qzDbXxIGO5C0nxsVp3Qw5q9I4vk.roa
File: qzDbXxIGO5C0nxsVp3Qw5q9I4vk.roa (raw, json)
Hash identifier: b1jHB2nnVluLICelm767Z4JtLOoX9JiSsgbXuPWoriE=
Subject key identifier: AB:30:DB:5F:12:06:3B:90:B4:9F:1B:15:A7:74:30:E6:AF:48:E2:F9
Certificate issuer: /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
Certificate serial: 0192947F6DB6D572649899B0B422DFCDE37B
Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/qzDbXxIGO5C0nxsVp3Qw5q9I4vk.roa
Signing time: Wed 16 Oct 2024 08:43:51 +0000
ROA not before: Wed 16 Oct 2024 08:43:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8447
IP address blocks: 91.220.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:7f:6d:b6:d5:72:64:98:99:b0:b4:22:df:cd:e3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
Validity
Not Before: Oct 16 08:43:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab30db5f12063b90b49f1b15a77430e6af48e2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:a4:71:25:0a:7a:f6:cc:1e:09:4e:30:68:
2e:ba:44:94:50:43:c5:bc:5e:8a:5f:9f:ed:7f:10:
3c:0f:44:c3:ea:42:77:ca:10:38:d4:6b:ea:d7:a5:
bd:b5:92:22:bc:bb:56:a5:f2:a5:a5:85:82:3f:60:
8c:91:82:c6:09:dc:16:02:9b:bb:a8:8a:1b:19:3a:
cc:13:ee:39:92:49:3f:a7:fe:1d:89:88:a3:27:ce:
0d:48:5a:57:ed:15:35:13:80:e1:fa:b2:41:44:d3:
95:c9:fd:98:6b:f6:f5:a8:66:84:8c:b0:17:d8:34:
5c:47:40:ba:cf:95:67:89:38:a1:0f:25:f8:63:1e:
4c:00:b9:da:7c:ca:ee:88:68:c7:70:ce:aa:9e:89:
01:56:f5:dc:b3:f6:b3:6f:27:00:02:c2:9f:8f:e0:
bb:cc:66:d0:dc:a8:70:53:cd:46:a6:57:34:f8:d8:
18:56:1a:6c:4f:2b:13:b9:fb:88:d6:91:7d:ea:0f:
77:1d:1f:16:ad:fa:8b:9d:d4:95:f4:4d:a4:db:ee:
00:df:ed:5c:37:ba:94:f8:a7:f6:aa:9e:8d:d0:b6:
aa:65:43:26:5c:8b:ec:16:51:f5:da:a2:43:29:ac:
df:a5:4a:65:24:96:a8:70:95:c3:4f:b2:b9:e3:a5:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:30:DB:5F:12:06:3B:90:B4:9F:1B:15:A7:74:30:E6:AF:48:E2:F9
X509v3 Authority Key Identifier:
keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/qzDbXxIGO5C0nxsVp3Qw5q9I4vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.2.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e6:10:09:2e:02:2f:72:ae:33:c1:a8:f4:21:cd:59:52:b1:
f3:1a:56:d3:58:e0:3c:db:28:25:86:2a:93:65:c4:93:0b:9e:
6b:a0:bd:2a:d7:84:89:af:ec:b4:eb:7a:24:41:5e:37:e5:0b:
69:93:ea:b6:8d:80:f2:8c:7f:1b:f6:5d:48:23:64:b9:64:c3:
3a:1b:4f:b2:31:80:10:79:a1:80:5b:97:c2:5d:5a:bf:85:07:
4f:ce:20:e3:ca:02:3c:11:ee:f3:50:75:3e:d3:9e:24:89:3a:
ce:01:82:b7:02:d8:52:7d:af:d9:f3:75:87:bd:32:2d:41:f3:
03:db:9a:6b:4d:32:31:8b:43:eb:32:98:bc:e7:0e:32:5d:ec:
b8:0a:c3:f5:98:41:df:23:b8:75:7d:fd:0b:4a:1a:a0:dc:83:
bc:cc:20:41:a9:73:eb:cd:ac:d8:21:57:0f:b5:a6:dc:20:87:
e6:03:de:21:94:6f:7c:58:25:f3:65:d3:99:b5:36:27:9c:b2:
15:70:dd:91:02:0f:8b:1f:b4:53:68:70:fc:73:ea:a2:a3:a4:
91:af:a1:18:f6:9f:ce:84:0e:14:fb:18:f5:29:0b:a2:42:f3:
e5:c4:9f:40:25:af:6c:14:aa:c3:fd:86:61:37:30:e3:45:11:
be:66:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:17:04 2024 by rpki-client on console-ams.rpki-client.org