Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/g9QMGHwJovO1ZEl25FP0_Rkpz3w.roa
File: g9QMGHwJovO1ZEl25FP0_Rkpz3w.roa (raw, json)
Hash identifier: DUyS9QNR8f7bJVfRcRceg7eyu357MH9BSj6mVaDhcak=
Subject key identifier: 83:D4:0C:18:7C:09:A2:F3:B5:64:49:76:E4:53:F4:FD:19:29:CF:7C
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 018CC86F039E96EAE1D5644C9C925F2B2BAF
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/g9QMGHwJovO1ZEl25FP0_Rkpz3w.roa
Signing time: Tue 02 Jan 2024 04:29:27 +0000
ROA not before: Tue 02 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133398
IP address blocks: 91.224.92.0/24 maxlen: 24
185.36.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:03:9e:96:ea:e1:d5:64:4c:9c:92:5f:2b:2b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Jan 2 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83d40c187c09a2f3b5644976e453f4fd1929cf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:18:5d:8d:d7:3b:c1:2c:d9:e9:cf:d1:6a:93:
ac:47:e3:d2:80:65:3d:ba:78:32:67:b5:28:99:0d:
53:52:fa:95:fa:f6:1f:66:86:72:29:16:0d:ae:be:
03:75:f1:07:88:c8:d9:2a:a3:8d:ad:e5:9e:a1:31:
ed:a3:49:c0:b3:ab:61:dc:97:b1:0d:38:b1:f2:23:
e3:8c:a4:17:f5:4e:a8:69:87:0d:c7:cb:46:11:89:
c3:d4:a0:30:62:33:15:6f:59:49:72:e4:dc:8c:43:
ec:a5:22:78:3a:54:54:d7:18:e9:8a:6a:04:06:c0:
04:10:85:1a:fc:bf:a6:a7:26:6e:26:58:6e:12:7d:
b0:96:eb:59:92:05:15:a2:a7:99:fa:64:78:11:cd:
4e:8f:2f:41:71:7e:38:8f:76:75:be:7c:a1:de:ce:
bb:b5:80:b4:8d:5e:76:34:f9:5a:01:15:2f:a4:85:
f5:6c:eb:5b:c7:73:9c:55:cf:16:f5:ab:ee:8c:ee:
95:13:28:28:03:08:ce:a2:9d:b8:63:7c:8c:d9:f3:
f8:50:75:db:0d:6a:fe:b3:4b:1b:1c:bc:1e:ed:3b:
a8:06:f0:d1:e1:64:f8:0e:1d:e9:ef:ae:cc:d6:58:
3a:46:26:16:96:07:27:69:dd:c3:d6:78:75:36:c6:
71:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D4:0C:18:7C:09:A2:F3:B5:64:49:76:E4:53:F4:FD:19:29:CF:7C
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/g9QMGHwJovO1ZEl25FP0_Rkpz3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.92.0/24
185.36.81.0/24
Signature Algorithm: sha256WithRSAEncryption
01:63:06:ea:b9:10:9a:4d:8b:96:01:6f:ae:2d:99:00:42:56:
55:5c:d3:a4:a4:09:56:0d:ce:d2:68:7e:60:c7:63:b8:30:80:
d6:de:cf:d8:0e:6f:0b:40:fe:52:57:21:42:9a:b9:f5:e2:1b:
5b:80:8d:bd:e4:fe:a8:03:74:02:63:65:88:bd:ed:43:56:a9:
2e:c5:12:72:42:ab:a3:f1:24:3f:a0:1d:32:4c:cf:a6:88:01:
51:b4:8e:43:52:54:aa:e7:cb:83:d5:7c:81:3b:ff:68:47:7f:
ba:96:a3:4f:86:f2:29:af:d6:a4:e4:25:c7:a1:aa:17:b0:d9:
ce:d7:28:69:be:fb:02:29:c2:b9:0e:4f:eb:19:b9:07:87:7f:
7e:3e:34:52:63:59:6a:56:09:51:26:53:e9:ee:0c:98:f1:f8:
72:0a:eb:6a:ee:6a:12:57:78:e6:cc:14:cc:ed:3b:f5:79:26:
34:dc:ab:cd:1d:31:0b:80:ce:3b:af:1b:4a:af:8e:67:de:ee:
79:bf:80:93:e7:82:85:1a:13:73:02:14:b2:01:0d:9d:d9:73:
ac:95:0e:8b:49:24:b3:d1:42:42:45:37:8c:e8:cb:b3:05:c1:
fb:a7:97:61:5b:c9:fe:0a:cd:c7:ef:5f:e3:f8:fe:0d:83:08:
4d:ba:d3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:32:15 2024 by rpki-client on console-fra.rpki-client.org