Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/Qf-0plNbbeK_Yz6bOIFV1XVtfyI.roa
File: Qf-0plNbbeK_Yz6bOIFV1XVtfyI.roa (raw, json)
Hash identifier: vhFCzycCSlivbVxZDfzO93LgAhcGzzNjYVkmap8IKXo=
Subject key identifier: 41:FF:B4:A6:53:5B:6D:E2:BF:63:3E:9B:38:81:55:D5:75:6D:7F:22
Certificate issuer: /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial: 01917364AA3CB9A95F55924DB6ED63A6A6BD
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/Qf-0plNbbeK_Yz6bOIFV1XVtfyI.roa
Signing time: Wed 21 Aug 2024 05:24:22 +0000
ROA not before: Wed 21 Aug 2024 05:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38195
IP address blocks: 91.142.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:73:64:aa:3c:b9:a9:5f:55:92:4d:b6:ed:63:a6:a6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
Validity
Not Before: Aug 21 05:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41ffb4a6535b6de2bf633e9b388155d5756d7f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:5c:2a:4d:a7:88:3a:19:e9:ed:fd:81:67:
9a:44:6f:e0:3f:34:fd:79:7e:4d:73:82:d2:e7:a7:
19:32:cc:2b:41:9a:72:c1:9d:bb:f8:c6:b3:31:2f:
c0:65:eb:01:df:cb:b7:9f:d3:8f:18:2d:1d:73:85:
89:06:67:64:7d:92:f3:e7:ab:c6:ca:7f:fb:a8:cf:
4f:26:ea:62:fd:6b:2f:c4:5d:5a:b2:61:58:49:f3:
13:04:d3:68:91:db:4d:91:68:25:5d:94:28:89:e2:
e4:cf:da:87:39:34:8b:76:bc:79:02:0d:ac:fe:32:
49:50:64:7d:14:d2:2d:c0:71:f9:94:74:af:fb:ef:
15:71:58:a4:b6:a3:30:1a:0c:67:35:69:68:07:9e:
63:e8:22:e8:a0:46:ae:4d:1e:fd:5c:ef:60:b4:40:
2a:54:3f:52:d7:bc:de:4f:18:d2:29:43:02:b4:9c:
64:83:f1:f4:fb:81:78:be:07:9c:f6:67:03:b0:d0:
b3:d5:63:8d:09:6b:d1:e8:97:a8:ce:fe:3f:b2:9c:
28:2f:f3:64:6d:82:99:7b:ba:60:c0:c0:e9:4d:48:
39:14:a5:00:92:f3:d9:8a:d4:d4:67:4b:23:d0:78:
94:a9:66:c3:ec:de:d8:29:4c:66:c4:b4:cd:5d:e9:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FF:B4:A6:53:5B:6D:E2:BF:63:3E:9B:38:81:55:D5:75:6D:7F:22
X509v3 Authority Key Identifier:
keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/Qf-0plNbbeK_Yz6bOIFV1XVtfyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.140.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:c8:e8:39:45:4a:fe:94:9f:27:87:43:56:64:fe:fc:7d:77:
fd:47:6e:3f:cf:9f:9b:44:b3:98:e2:c8:8a:08:63:95:68:c2:
59:d2:11:6b:29:26:9c:34:d2:8d:b5:61:99:c0:6d:66:dc:51:
86:44:76:d6:19:bd:f9:85:74:bb:b8:c4:b3:68:51:a4:ef:be:
9d:90:28:c8:4f:7b:44:70:47:27:e6:06:04:8b:8c:a7:77:a2:
52:f2:3c:8c:2b:f8:ff:3e:a3:c4:60:b7:e2:4a:92:46:1a:02:
a5:af:a4:93:c6:62:10:15:70:ff:57:2d:31:30:5b:00:e6:bd:
93:4c:57:c6:79:13:ec:03:b3:64:07:03:05:9f:f7:a5:6b:c8:
1f:a7:c2:6f:10:f3:73:8f:54:02:b7:1f:8b:6c:18:64:cf:e9:
49:e3:06:82:f1:1e:96:a9:ab:3d:c3:ba:b5:25:e0:d0:51:4b:
a2:10:f2:48:c6:2a:04:50:16:22:0a:4a:c9:52:79:54:b8:d3:
ca:aa:7e:63:e4:65:da:1c:f6:fd:f7:33:21:46:70:cc:a5:4f:
22:e9:23:2c:dc:13:f1:cc:71:ef:e0:3e:01:3c:22:d1:f5:60:
d5:48:53:f2:f8:7c:0b:9b:3d:05:6b:68:40:7e:37:99:5a:fc:
fe:17:e4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:08:14 2024 by rpki-client on console-ams.rpki-client.org