Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/R3QTdnatKdc8-oTybvzNU0gvSTc.roa
File: R3QTdnatKdc8-oTybvzNU0gvSTc.roa (raw, json)
Hash identifier: 10gcxEBffX5nHqQHALnpNzmts+oPjMP0GZ/awZe0lTs=
Subject key identifier: 47:74:13:76:76:AD:29:D7:3C:FA:84:F2:6E:FC:CD:53:48:2F:49:37
Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31
Certificate serial: 018CCA2AB74454E27EFD09A15D231081FD7C
Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/R3QTdnatKdc8-oTybvzNU0gvSTc.roa
Signing time: Tue 02 Jan 2024 12:34:06 +0000
ROA not before: Tue 02 Jan 2024 12:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197877
IP address blocks: 91.228.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:b7:44:54:e2:7e:fd:09:a1:5d:23:10:81:fd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Validity
Not Before: Jan 2 12:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4774137676ad29d73cfa84f26efccd53482f4937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c6:01:73:2a:87:4e:0b:92:6a:74:97:29:46:
ae:01:73:4e:bd:dc:c8:5a:a8:b9:ce:2f:0a:a4:eb:
36:23:fb:d6:1f:68:74:21:24:ec:23:e9:d8:47:41:
a5:ef:4e:ec:e7:13:af:1f:ac:e6:fb:ae:a9:39:c5:
19:0b:24:06:71:c5:b0:2d:61:46:a5:21:3f:92:31:
66:01:f0:a5:19:80:33:a0:5b:82:1c:02:1c:f2:1a:
4c:40:57:ce:89:fc:9b:4f:8c:0e:27:9a:8e:11:2e:
b0:1e:8f:2c:b5:bb:7b:18:00:6d:73:c3:21:2a:03:
95:37:ea:4a:c8:b5:96:ee:db:42:8d:1f:2e:4b:f7:
d7:66:71:32:ab:c5:db:bc:86:6d:fe:ec:a5:da:e8:
d8:1b:a5:8f:43:8e:42:6c:85:51:2c:5e:71:fe:e6:
0b:d1:e5:a1:c6:aa:97:09:e3:f7:6d:3a:e4:98:f5:
2b:a0:e5:aa:46:a1:68:f5:c5:6e:1a:23:0f:43:e3:
ec:16:12:c2:05:49:3f:03:51:7b:b0:5b:6a:b0:5c:
ba:4c:2c:f2:52:78:cf:82:8e:27:bd:5e:f7:85:cb:
6c:7e:fe:3c:cc:78:72:ca:12:9e:1e:ee:22:2f:9d:
9b:b2:d5:f7:4d:54:e7:ca:57:a2:ce:35:79:5a:0b:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:74:13:76:76:AD:29:D7:3C:FA:84:F2:6E:FC:CD:53:48:2F:49:37
X509v3 Authority Key Identifier:
keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/R3QTdnatKdc8-oTybvzNU0gvSTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.207.0/24
Signature Algorithm: sha256WithRSAEncryption
36:95:99:55:ae:54:22:22:3b:f3:dc:53:e5:ee:01:f1:99:7e:
49:79:48:4c:1e:97:7c:bf:1d:93:24:1d:4a:a0:ee:16:a5:fc:
db:7d:58:a2:8e:a9:81:ae:7e:f5:81:6e:46:53:64:49:42:a2:
dc:da:e1:9b:9c:40:1c:f2:99:96:c2:a0:d7:cc:66:4f:27:41:
9b:b3:1d:cc:d2:56:0d:2b:f4:0b:25:75:e7:c3:90:36:a6:55:
bf:b4:4b:55:2a:69:c7:c7:4f:73:0c:98:b6:63:fe:3c:34:2e:
5b:22:25:73:c5:92:c6:da:77:8a:3c:b5:0c:0c:21:7f:66:ac:
28:36:51:d4:01:23:af:ef:1e:1c:43:6e:d5:41:2b:5a:7f:52:
7a:67:57:bc:ea:c7:83:32:9a:f5:5c:2a:f7:be:cd:d8:f4:d7:
4d:53:6a:8b:93:37:3a:48:c7:c2:70:81:c9:85:aa:ad:14:1f:
75:97:54:ea:74:94:d7:75:c9:f2:1a:f9:e2:79:3e:ce:27:47:
04:31:fc:a5:06:f2:2f:28:84:4c:db:de:c7:50:08:74:f7:42:
8f:96:72:73:61:37:31:f3:58:7a:ba:57:f6:37:a9:c6:ce:98:
f4:f8:c2:fb:ae:0a:26:15:e1:22:59:96:f2:05:d0:58:69:55:
dc:6e:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:16:24 2024 by rpki-client on console-ams.rpki-client.org