Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/QoQI1pFS1VMnrjK34JQFtBdQXOg.roa
File: QoQI1pFS1VMnrjK34JQFtBdQXOg.roa (raw, json)
Hash identifier: bDQVJMJITgg1CpPAc51tdKeFsiJe2EqgtEIeXqCStog=
Subject key identifier: 42:84:08:D6:91:52:D5:53:27:AE:32:B7:E0:94:05:B4:17:50:5C:E8
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 018CC349535DF6F76887C229178890AD6C91
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/QoQI1pFS1VMnrjK34JQFtBdQXOg.roa
Signing time: Mon 01 Jan 2024 04:30:11 +0000
ROA not before: Mon 01 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56998
IP address blocks: 91.229.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:53:5d:f6:f7:68:87:c2:29:17:88:90:ad:6c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=428408d69152d55327ae32b7e09405b417505ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b2:4e:42:25:08:4f:37:4e:51:72:1e:58:c6:
e7:8b:d1:e7:ad:f2:db:ff:7a:1b:67:12:79:aa:44:
e4:d1:b4:7a:7c:dc:45:a4:24:25:d0:94:9f:1a:74:
a3:05:23:a8:c9:5e:b7:71:63:5d:28:bc:75:85:d8:
22:65:f8:3f:18:b8:1d:e0:83:ea:f7:74:f9:62:40:
61:aa:e6:5f:24:b6:f3:4f:ce:95:1f:0b:ef:64:ab:
75:40:96:d2:11:e4:3c:88:eb:b4:e3:d3:63:02:7c:
6a:e6:bc:b0:92:7d:5c:b1:cb:22:1b:63:f2:16:dc:
78:aa:d4:02:3b:66:56:fc:f7:01:22:04:4e:9a:4d:
f7:7e:60:7d:e9:2a:01:19:95:cf:9b:b2:8f:5e:ce:
b4:0b:dd:1a:53:de:e3:5c:47:db:b5:d2:a1:de:2b:
c7:bc:54:ad:a2:db:dd:c4:2a:58:e5:81:69:8a:97:
b9:c6:58:82:60:c1:e2:4f:cb:76:61:b0:b5:5f:de:
37:58:28:af:72:5c:17:c4:d1:94:1e:3c:31:5a:17:
d5:d4:d7:07:d5:50:72:8c:49:fe:94:6b:ef:5a:a8:
27:bc:ff:b2:3b:1c:e9:c6:de:02:7a:96:5f:ca:95:
da:4f:11:ce:bd:60:83:19:3c:03:fd:42:3f:27:6a:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:08:D6:91:52:D5:53:27:AE:32:B7:E0:94:05:B4:17:50:5C:E8
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/QoQI1pFS1VMnrjK34JQFtBdQXOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.184.0/24
Signature Algorithm: sha256WithRSAEncryption
65:54:74:23:52:64:92:8c:7b:e3:6b:c5:17:cd:a4:2f:c1:7a:
fa:ec:72:11:bf:a7:0e:aa:97:c2:4a:cf:53:99:e0:a4:45:3d:
a2:f3:b1:13:ab:7e:a4:26:38:a2:93:da:89:30:5f:4b:06:e6:
d1:ad:ee:1b:c2:d2:ba:70:42:69:a8:11:19:34:d5:e3:af:09:
5b:4a:e1:dc:8b:2c:bd:91:1c:5e:2e:85:9c:4e:53:f3:ae:76:
bf:ba:bf:0d:e2:4a:af:00:82:3d:ac:b9:2d:92:8f:f6:ab:96:
6b:b9:2d:1f:7c:56:3c:c9:83:ff:a5:ff:a7:a7:e1:4f:e8:be:
52:04:1b:ec:df:fd:8f:13:55:a6:b0:5d:81:70:ad:b8:a8:df:
31:99:df:91:52:1c:57:1e:72:71:99:79:b1:90:be:d4:80:d6:
16:6e:d8:13:9d:b1:b2:da:e0:ad:b4:18:af:8f:16:fe:65:a7:
a0:86:75:da:da:9e:8d:94:86:f6:2c:d9:92:7b:0a:ba:02:00:
83:7e:e3:4f:97:7c:89:d3:b4:2f:b6:60:b3:81:7b:72:32:29:
9e:da:ad:21:87:ec:51:cd:c1:80:66:23:34:ea:28:bc:c8:27:
c5:61:2d:e2:2b:90:0c:23:04:f9:ea:38:3c:4f:9d:06:f0:4b:
d4:0d:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 11:59:04 2024 by rpki-client on console-fra.rpki-client.org