Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/QZZvASJqrLXpjpkE1TdQKRuPjDw.roa
File: QZZvASJqrLXpjpkE1TdQKRuPjDw.roa (raw, json)
Hash identifier: 7pBZerKp9xeKWz2QcdHLBS1/vB0g6h8SJII8A9x7qOg=
Subject key identifier: 41:96:6F:01:22:6A:AC:B5:E9:8E:99:04:D5:37:50:29:1B:8F:8C:3C
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 01929EDD02ECF05815C360C295D7577CB99D
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/QZZvASJqrLXpjpkE1TdQKRuPjDw.roa
Signing time: Fri 18 Oct 2024 09:02:17 +0000
ROA not before: Fri 18 Oct 2024 09:02:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39238
IP address blocks: 91.196.161.0/24 maxlen: 24
91.196.162.0/24 maxlen: 24
91.196.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9e:dd:02:ec:f0:58:15:c3:60:c2:95:d7:57:7c:b9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Oct 18 09:02:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41966f01226aacb5e98e9904d53750291b8f8c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6b:ba:b5:42:8f:6f:dd:36:3a:80:61:2f:cf:
19:3b:7a:b7:f2:fa:16:df:e7:81:ab:30:11:08:ff:
68:13:b3:f7:35:b7:7a:73:d6:7c:86:cb:59:d2:00:
61:98:34:f0:fc:74:c2:43:d6:f0:d3:4c:60:96:1f:
e1:72:bd:38:43:b6:52:bb:7e:a1:e4:9a:b1:66:28:
91:03:c2:90:c5:fd:4a:01:30:ad:f0:71:27:49:44:
02:49:ab:db:5b:23:e8:c6:04:91:5e:62:0d:8c:5c:
97:d0:47:48:f0:fc:51:14:e7:39:f9:60:7b:c9:3c:
16:c1:d5:a5:f3:e4:7f:d3:e4:bb:aa:f1:77:79:3f:
2f:4e:bb:99:0f:e2:65:64:3d:f2:1a:43:a7:49:48:
90:8c:dd:dd:46:ee:72:d9:85:3f:af:fa:a3:e0:b7:
8d:39:ac:88:0b:34:2b:aa:ed:8a:63:be:f0:d6:c1:
bf:57:87:84:12:37:db:64:a6:c1:18:c3:a3:61:7f:
b1:91:e5:a4:1e:23:ab:ae:fb:bc:94:26:03:a0:1a:
9f:60:ef:ef:21:43:95:84:27:96:46:f6:d0:1b:b7:
57:04:c6:69:2b:f8:f0:f0:75:6d:56:04:87:b7:14:
44:f4:2f:47:12:63:13:4b:90:d1:39:51:99:fd:e5:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:96:6F:01:22:6A:AC:B5:E9:8E:99:04:D5:37:50:29:1B:8F:8C:3C
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/QZZvASJqrLXpjpkE1TdQKRuPjDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.161.0-91.196.163.255
Signature Algorithm: sha256WithRSAEncryption
9c:8c:3e:d0:d3:fb:08:c3:f2:4b:3b:36:20:63:a3:25:02:07:
f9:0f:d6:f1:4d:7a:d2:69:8f:cb:1c:d1:da:c1:22:f0:66:09:
85:5f:2c:98:e9:32:5f:01:72:a6:fa:6c:17:05:e4:3d:79:8e:
56:e2:7f:ad:44:d0:43:12:80:a0:08:ec:54:18:78:cb:85:c3:
ce:9d:ad:2d:c7:54:e2:0c:9a:ab:0e:8f:62:53:4a:4d:6e:0e:
81:d6:58:20:44:3b:ba:e1:a3:f9:20:71:77:25:43:6d:88:9a:
6d:4e:6b:15:47:82:01:cb:bb:66:cc:44:aa:46:62:9b:cc:15:
64:58:7f:ff:78:3d:2c:c0:b9:fc:23:38:9e:02:15:a2:d0:47:
01:ae:4e:92:9d:c4:9b:4d:cb:67:0c:dc:24:2d:cf:dc:b5:ce:
91:4b:3c:fd:a4:24:1d:c0:03:bd:0e:fe:09:c0:7e:e4:58:07:
bd:f4:a1:a6:26:3f:a3:3b:68:a5:3d:7d:5c:b3:cf:12:a7:a3:
2d:5e:6b:9b:1f:de:82:e8:29:4f:48:f4:e1:26:79:d0:52:a1:
26:5c:a3:b9:ee:8c:69:24:27:3a:48:6c:66:48:4e:1c:d7:b9:
c2:e9:22:4a:35:c9:a4:96:af:88:28:67:11:a4:23:f7:35:5e:
6e:09:93:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:24:56 2024 by rpki-client on console-fra.rpki-client.org