Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/QQJ0j5j5AnA6ydZp6BJdSBwO-6U.roa
File: QQJ0j5j5AnA6ydZp6BJdSBwO-6U.roa (raw, json)
Hash identifier: AqyLRDcS6v411H2b3Rp3/wJgyDUaYKSjEdnTw0L9THk=
Subject key identifier: 41:02:74:8F:98:F9:02:70:3A:C9:D6:69:E8:12:5D:48:1C:0E:FB:A5
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 018CC348BFDA7C905B3C5C1CE7DA1E01A956
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/QQJ0j5j5AnA6ydZp6BJdSBwO-6U.roa
Signing time: Mon 01 Jan 2024 04:29:33 +0000
ROA not before: Mon 01 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61262
IP address blocks: 91.223.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bf:da:7c:90:5b:3c:5c:1c:e7:da:1e:01:a9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4102748f98f902703ac9d669e8125d481c0efba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:21:21:4c:96:28:57:d4:9a:ce:d3:2e:6e:
3d:2e:87:d1:e2:fb:2c:56:b3:d8:29:91:0d:c3:37:
ae:ea:8d:cf:b8:57:bf:ed:4c:28:ae:db:ba:ac:a1:
1f:fa:ee:97:46:57:0b:a0:a6:7c:48:ac:d6:14:69:
fa:56:e0:01:d9:db:da:74:2b:12:ed:2f:51:6d:2e:
1e:0a:bc:67:67:5e:71:00:e0:c7:3f:7e:44:95:fb:
15:7c:0d:9c:e1:16:de:a2:c8:1e:94:72:71:9b:98:
95:eb:9e:91:33:6c:f7:98:98:62:a2:05:30:7a:65:
ee:67:3d:f4:e4:ef:63:8a:26:47:ab:e6:35:fc:ee:
01:1e:91:bf:d9:fa:60:f4:5a:ae:2d:65:57:91:7e:
80:e7:15:df:48:3c:5a:02:f4:96:10:0f:61:f5:f0:
50:57:f3:42:ba:3c:46:66:cf:90:1c:8b:f5:c9:f2:
34:85:8f:c9:56:51:97:ee:81:7c:42:e9:c2:e7:70:
1b:60:59:9e:24:60:84:f9:1c:4c:5b:e3:53:3f:00:
5f:57:ad:4d:8c:d3:dc:99:df:4b:85:54:8b:59:c2:
6a:db:42:a0:af:ae:db:1f:20:7e:70:61:cd:bc:a2:
18:55:5a:b0:f8:6c:03:cc:d0:6c:e7:0a:b5:b5:ff:
02:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:02:74:8F:98:F9:02:70:3A:C9:D6:69:E8:12:5D:48:1C:0E:FB:A5
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/QQJ0j5j5AnA6ydZp6BJdSBwO-6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.100.0/24
Signature Algorithm: sha256WithRSAEncryption
79:7a:50:6c:03:4b:67:d1:80:cd:ed:e7:26:04:08:da:63:73:
65:2c:02:b2:4d:49:b9:6a:92:04:99:47:17:22:d6:b6:86:bb:
88:0d:0c:82:6b:de:79:34:d8:e8:da:ff:1c:45:7c:a1:0d:68:
ea:bd:2f:95:55:4d:d8:ce:21:e3:c1:03:47:94:ed:01:61:73:
74:a6:19:2e:d9:45:12:2e:c8:85:a9:f2:e5:48:e4:34:78:3d:
6a:af:7b:d1:7e:11:2b:89:8f:6c:78:bc:2c:7c:38:3c:ad:a0:
5d:5f:ed:b6:44:43:b3:8c:b2:a6:78:ef:98:bf:98:ce:c7:71:
82:13:94:6e:ea:19:62:4d:58:40:3b:1f:58:88:04:75:79:58:
8d:fa:6b:ff:35:ca:fa:76:99:65:47:df:ee:f7:d3:07:d8:11:
13:9b:3d:74:fd:a4:9e:5c:08:b4:49:02:c1:ed:87:85:d6:25:
f2:d4:9e:3c:1b:22:8c:4c:4f:db:19:34:45:b5:4a:84:44:8e:
7e:4a:48:50:cf:f2:a3:34:e9:ed:bd:75:56:3b:0c:f5:48:68:
2a:dd:e9:3d:b8:f1:a4:d8:26:6b:85:a1:87:17:bf:fe:1f:cf:
e6:7c:b3:d7:b8:db:04:90:d0:fb:ab:1f:bc:8b:96:6e:f7:6f:
19:0d:90:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:25:20 2024 by rpki-client on console-fra.rpki-client.org