Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/Qzd9H1tIY8HXXdrL89uDgpB3jPU.roa
File: Qzd9H1tIY8HXXdrL89uDgpB3jPU.roa (raw, json)
Hash identifier: uUAalP2QSFJTHGKvtO4v3BYiPxFb4V/yKQQ/n883HKQ=
Subject key identifier: 43:37:7D:1F:5B:48:63:C1:D7:5D:DA:CB:F3:DB:83:82:90:77:8C:F5
Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial: 018CC64AF9E21D7DF9BD80CA4B9126E0F5A1
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/Qzd9H1tIY8HXXdrL89uDgpB3jPU.roa
Signing time: Mon 01 Jan 2024 18:30:51 +0000
ROA not before: Mon 01 Jan 2024 18:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51835
IP address blocks: 91.194.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f9:e2:1d:7d:f9:bd:80:ca:4b:91:26:e0:f5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Validity
Not Before: Jan 1 18:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43377d1f5b4863c1d75ddacbf3db838290778cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:65:54:57:44:9b:2b:45:55:f6:8a:0d:6c:
a7:6f:d0:82:07:d4:9c:83:0b:fc:92:08:09:1a:6f:
7b:4f:c8:29:83:3c:b3:4e:bf:d6:e1:34:c5:e6:53:
b0:a0:1d:d3:8b:98:a3:00:c8:a7:84:c3:4a:f2:65:
ac:5d:cf:e0:1a:ed:d4:c9:59:e8:c4:66:73:c2:4d:
d0:48:51:8f:e1:c5:31:13:97:05:d6:b2:ea:2a:ff:
bf:a3:5a:88:af:36:f4:1a:e4:a2:00:c7:c1:cf:a7:
f2:d0:c7:c6:90:96:ad:b2:64:6e:4c:eb:a4:00:92:
77:5c:23:48:f0:24:d8:7c:84:1b:54:47:cf:dc:7d:
e1:55:a2:12:0e:01:d4:e6:a2:5e:23:4e:1f:61:cd:
58:5a:62:78:7d:9c:be:d6:2a:2f:06:b6:55:4a:53:
8d:4c:76:ba:69:27:c1:84:eb:29:a0:1d:5d:5e:c5:
e3:e2:be:8d:96:85:0d:ec:da:4d:66:d4:eb:be:a5:
b4:9b:a3:0a:27:09:04:dd:77:14:a3:ee:ff:8a:8d:
69:8e:bb:11:be:e1:35:fd:5f:80:b4:a4:6e:8f:3e:
d0:2d:ef:a8:51:c7:08:80:c0:0a:d3:e1:b6:0b:b4:
65:54:f2:80:a1:ec:27:05:c4:fc:6e:a1:9a:49:21:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:37:7D:1F:5B:48:63:C1:D7:5D:DA:CB:F3:DB:83:82:90:77:8C:F5
X509v3 Authority Key Identifier:
keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/Qzd9H1tIY8HXXdrL89uDgpB3jPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.31.0/24
Signature Algorithm: sha256WithRSAEncryption
57:53:c3:e3:c2:cb:ab:3a:70:18:f7:72:f3:ed:bc:5a:78:aa:
6b:c0:c8:37:08:e3:93:36:d0:84:5a:8b:dc:b3:41:eb:20:d8:
1c:36:aa:cc:5a:3a:4d:4b:18:40:53:28:d6:e0:1c:4d:27:91:
71:0a:96:ab:8b:37:dc:43:42:6d:7c:26:15:0e:3e:a0:b1:c9:
71:c1:75:60:39:f8:17:49:4c:e4:3f:3d:04:1c:41:43:ad:c8:
02:c4:fd:cf:45:a2:25:06:c2:62:8b:ef:61:f0:48:1f:1b:82:
2f:62:dc:72:b2:71:63:3e:78:ef:59:ff:27:e1:ef:82:88:91:
71:a0:8d:e6:92:a7:69:b6:b7:19:9a:3c:34:4e:66:b2:97:44:
75:f6:34:c3:a1:48:a2:7f:cd:bc:33:75:53:bf:72:53:eb:dc:
4c:0a:f7:69:29:34:36:0a:ed:cf:41:03:f5:be:89:3c:34:d1:
63:a9:31:b1:84:2f:58:72:df:6d:21:da:52:bb:38:17:66:b8:
0b:8e:25:f7:09:f0:cd:60:72:03:72:b3:90:5f:60:86:11:fe:
0d:a0:05:48:70:52:62:fe:cd:7b:ae:1f:29:e9:da:ad:0f:0e:
8b:3c:75:78:4c:f3:23:cd:ea:57:9c:1b:81:51:6f:c8:6e:73:
a7:8d:11:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:38:34 2024 by rpki-client on console-ams.rpki-client.org