Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/QIgkonbYLvtZRLlFpSZzUhjokKY.roa
File: QIgkonbYLvtZRLlFpSZzUhjokKY.roa (raw, json)
Hash identifier: D441YNc8p0FXzRIy7y83NRdv4AekmEtu4a1SEnoE1X8=
Subject key identifier: 40:88:24:A2:76:D8:2E:FB:59:44:B9:45:A5:26:73:52:18:E8:90:A6
Certificate issuer: /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial: 018D28500E59436891E5575853C8C98AA31C
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/QIgkonbYLvtZRLlFpSZzUhjokKY.roa
Signing time: Sat 20 Jan 2024 19:19:11 +0000
ROA not before: Sat 20 Jan 2024 19:19:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51225
IP address blocks: 91.218.4.0/22 maxlen: 24
2001:7f8:94::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:28:50:0e:59:43:68:91:e5:57:58:53:c8:c9:8a:a3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
Validity
Not Before: Jan 20 19:19:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=408824a276d82efb5944b945a526735218e890a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:d0:b6:fd:aa:59:c0:3f:d3:d9:c8:3c:c1:
80:bb:f3:9a:8e:63:f5:22:73:6a:60:e8:5d:f0:03:
2d:67:27:f3:1c:44:99:42:d8:19:a3:5a:8e:4e:a4:
ee:9e:20:42:49:b9:53:b3:c1:c7:0d:d9:26:33:eb:
3e:08:1a:e5:96:e0:c3:a2:b6:57:84:b3:c1:b7:4d:
59:5d:10:5f:ee:66:11:f6:69:96:ef:76:12:76:c4:
44:37:23:e0:2a:5f:3f:3a:38:e4:ed:64:b5:11:3e:
b9:08:37:6f:51:3b:3b:59:c6:0f:af:90:c8:56:29:
ed:02:a9:39:04:22:b6:46:8e:96:37:55:f2:53:d4:
3a:a7:4f:b4:59:cc:c9:6d:86:f2:32:9f:eb:ae:49:
91:c3:9b:3e:7f:6b:25:9a:08:f7:02:f5:3b:b0:8e:
0b:b7:87:d8:c6:70:84:6c:61:77:99:c3:5f:f2:c8:
01:7d:94:ec:e8:f1:9b:b3:1d:ca:ed:2a:00:cc:aa:
11:13:b8:ff:e5:b6:ef:5f:3e:95:79:22:53:58:e3:
08:f3:6b:d6:71:7d:a5:22:bb:a5:ce:8c:37:49:50:
3b:76:f3:0e:5e:f7:b1:84:14:68:f5:59:c0:14:72:
ef:f0:49:ef:30:da:7a:d9:9a:80:a9:ee:fc:80:92:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:88:24:A2:76:D8:2E:FB:59:44:B9:45:A5:26:73:52:18:E8:90:A6
X509v3 Authority Key Identifier:
keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/QIgkonbYLvtZRLlFpSZzUhjokKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.4.0/22
IPv6:
2001:7f8:94::/48
Signature Algorithm: sha256WithRSAEncryption
24:a9:c5:37:c5:c9:ed:82:18:92:fe:13:9d:61:90:c6:a0:0b:
e1:8c:a1:d6:61:01:8c:98:55:bb:09:f5:a5:aa:8b:47:0d:8e:
bb:03:df:15:0d:91:1b:e4:8d:88:c2:32:54:b5:e9:2c:fa:58:
38:c8:a9:ac:0b:61:c9:73:d3:63:56:2d:7e:8f:93:0e:74:b2:
9a:8a:26:3e:af:ba:e0:2a:e1:6c:ac:01:0c:84:18:41:1b:b4:
e3:c6:0d:91:de:1d:9a:13:44:41:70:d7:fa:13:63:65:c8:74:
a0:e9:ca:5e:f8:cb:44:94:82:2c:82:c3:b1:dd:6b:ab:52:71:
f0:07:b4:78:3d:ad:90:90:da:13:c3:cc:25:d2:d2:af:af:2b:
5e:4b:64:44:ca:6a:9c:f3:57:c8:aa:7a:36:1c:0e:0c:dd:aa:
d7:07:7c:1a:8b:a2:17:59:f3:ae:62:60:44:d5:4f:8d:11:a9:
d9:f7:b6:4c:76:5c:94:2e:c7:a1:30:55:c5:4f:6e:93:42:76:
13:a9:5c:ff:52:64:f2:eb:ff:72:cf:d4:ff:96:1f:68:a1:a1:
c7:d2:2b:e1:f5:54:89:28:f9:38:38:b5:d5:82:44:1b:c8:c7:
73:eb:7c:c6:8e:9d:c8:1e:37:8d:86:4d:be:da:ea:da:6f:d2:
07:29:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:01:12 2024 by rpki-client on console-ams.rpki-client.org