Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/QG0Z2K_NhqyiC-PtMo0ZgHa7TzM.roa
File: QG0Z2K_NhqyiC-PtMo0ZgHa7TzM.roa (raw, json)
Hash identifier: coyBxPLEeIIJcVuW7SOGG4O0zIE3mss5Cc1DDoFTv6Q=
Subject key identifier: 40:6D:19:D8:AF:CD:86:AC:A2:0B:E3:ED:32:8D:19:80:76:BB:4F:33
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 018CC500DC8A6FDC17B6BD3E8528F2F80776
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/QG0Z2K_NhqyiC-PtMo0ZgHa7TzM.roa
Signing time: Mon 01 Jan 2024 12:30:17 +0000
ROA not before: Mon 01 Jan 2024 12:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48332
IP address blocks: 91.209.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:dc:8a:6f:dc:17:b6:bd:3e:85:28:f2:f8:07:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Jan 1 12:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=406d19d8afcd86aca20be3ed328d198076bb4f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:84:a8:6d:de:1a:3d:ca:44:16:4d:ac:84:
5e:27:31:eb:23:e7:ca:16:24:a6:c2:e9:07:6d:f0:
5e:80:51:47:14:bc:e7:74:88:ed:73:49:96:60:e9:
c6:4e:4e:96:3d:0a:94:51:6c:11:94:0e:e8:23:47:
d9:f4:d1:df:5b:cc:57:25:bc:59:c3:aa:20:3a:7e:
25:aa:6a:01:cc:c5:a8:92:28:bd:1c:d5:a0:c9:4d:
3f:dd:89:12:1f:73:10:4c:a8:2e:46:32:a1:e7:3a:
d2:9a:b7:f1:c8:d8:8a:30:e2:30:fc:f6:84:04:b7:
4b:d0:c6:8a:9d:c2:36:ad:f0:a3:e3:45:bd:ce:0b:
1a:35:a5:54:86:06:db:64:3a:f6:21:65:1f:3c:74:
ce:e5:75:b2:0c:c3:c4:fb:76:09:40:8c:c6:6e:b6:
f4:34:fd:0f:95:2c:ca:0f:a8:72:c1:ca:04:ed:35:
d7:94:b3:de:76:64:f9:22:a2:4b:00:41:bf:b9:00:
90:94:28:10:18:86:e4:d9:20:c1:45:df:d8:95:01:
f5:fa:af:8e:9d:67:7d:ab:ce:b6:84:7c:19:cf:b7:
15:c0:ef:a1:be:4b:10:21:2f:a4:bd:3a:76:95:f0:
85:b4:2b:58:57:2d:f2:08:cd:33:98:f4:04:40:d9:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6D:19:D8:AF:CD:86:AC:A2:0B:E3:ED:32:8D:19:80:76:BB:4F:33
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/QG0Z2K_NhqyiC-PtMo0ZgHa7TzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.109.0/24
Signature Algorithm: sha256WithRSAEncryption
87:07:0e:0f:20:66:72:f4:c3:6b:70:b4:ba:b5:88:dd:0d:42:
87:e9:e0:fc:2d:82:8a:bd:51:37:80:ac:a8:94:cb:35:e4:80:
03:b5:12:ca:0b:65:9e:d3:d9:a7:ec:05:5b:d3:6b:e5:1a:9c:
ba:a6:08:4e:76:67:20:e0:19:b3:16:81:0a:2c:01:7a:3e:30:
76:f6:d9:c5:cd:1b:9f:9d:9e:75:23:79:2d:ba:c3:07:fa:56:
96:6b:1e:79:97:73:60:bd:ae:ce:5b:86:10:df:6a:9a:cf:ac:
ce:8b:89:0e:86:e6:26:24:36:67:d6:a0:f7:dd:c1:b7:5a:2d:
e8:d9:bc:1a:cf:f6:74:db:2a:02:d2:42:41:b1:07:34:40:91:
1b:11:23:3c:f7:51:5e:16:9f:08:22:e0:c0:98:15:93:b1:37:
9c:ff:a4:07:c2:5b:3b:2c:5f:b6:2c:f2:22:16:f7:c5:bf:b7:
30:f6:49:eb:d3:c1:75:55:dc:eb:fe:fb:3e:83:fa:dc:a8:20:
fd:ae:4f:13:28:5c:de:14:7a:59:2a:23:09:09:dc:63:ab:60:
00:a4:36:8e:ba:cd:14:77:47:61:70:e9:60:44:8b:71:05:40:
78:1d:b3:92:11:ff:a3:23:a1:fd:9a:ef:5f:53:fb:5a:4e:d7:
98:53:10:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:27:38 2024 by rpki-client on console-ams.rpki-client.org