Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/cqMeFiP_0XSeR-NtnWrzO4FAef4.roa
File: cqMeFiP_0XSeR-NtnWrzO4FAef4.roa (raw, json)
Hash identifier: biCxjvWILVxLPmgPAwrfu17d4JWuBZhlTN9VN4QDKtE=
Subject key identifier: 72:A3:1E:16:23:FF:D1:74:9E:47:E3:6D:9D:6A:F3:3B:81:40:79:FE
Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Certificate serial: 0193166DC3242DB1D15B6EDE2E57B131AFC9
Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/cqMeFiP_0XSeR-NtnWrzO4FAef4.roa
Signing time: Sun 10 Nov 2024 14:15:12 +0000
ROA not before: Sun 10 Nov 2024 14:15:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49308
IP address blocks: 91.212.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:16:6d:c3:24:2d:b1:d1:5b:6e:de:2e:57:b1:31:af:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Validity
Not Before: Nov 10 14:15:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72a31e1623ffd1749e47e36d9d6af33b814079fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:01:93:b6:26:ad:76:19:d4:f3:53:1f:44:0b:
bc:51:c5:e0:d5:2d:91:7f:68:99:89:30:a9:57:fe:
8a:52:fd:4d:c3:7e:19:a9:11:6b:f0:5f:c2:54:a0:
b9:95:da:33:60:03:e2:28:a4:b1:16:20:17:f3:04:
42:bf:d5:14:ab:88:07:b7:67:5b:b9:fd:ac:00:d4:
ed:40:30:45:a7:18:33:c5:61:ab:82:78:32:0d:56:
23:3d:2d:5d:a2:25:42:09:69:4e:fc:65:84:2b:4f:
6e:84:06:aa:91:38:2f:ad:d6:ac:1e:ab:99:98:19:
6a:ec:5c:03:e8:0b:2d:78:4d:3d:16:39:57:7e:46:
57:06:5a:1c:d0:61:fa:6c:1d:66:b2:f5:04:e6:d3:
1b:94:ff:ce:82:d3:c7:33:1e:86:ec:37:81:55:87:
d0:8a:35:6a:11:83:46:cd:8a:7b:81:bf:a5:3d:fe:
56:ad:86:d9:4a:cc:0d:ea:96:01:1e:02:36:0a:43:
3b:e9:77:e5:c5:b9:80:4f:3a:9a:a6:d9:47:d2:4c:
a7:03:fc:a0:99:be:40:05:35:16:53:1b:52:23:dd:
1d:b0:5c:17:61:17:c9:c0:0b:c8:a7:c3:5e:55:77:
30:c5:65:1b:30:bd:2c:73:77:80:aa:2f:8f:b6:9d:
cb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A3:1E:16:23:FF:D1:74:9E:47:E3:6D:9D:6A:F3:3B:81:40:79:FE
X509v3 Authority Key Identifier:
keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/cqMeFiP_0XSeR-NtnWrzO4FAef4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:bb:4a:08:d2:87:0b:52:d8:56:5d:e3:d7:1b:4a:3e:84:96:
0a:e0:29:72:99:89:d1:59:9b:e9:e8:d6:12:39:35:6d:d7:5a:
78:57:e6:f2:22:f4:fa:77:38:6a:80:6e:2d:11:9f:1b:2c:78:
73:58:e4:51:e1:0c:34:3b:55:3d:3f:9e:89:d5:1c:5d:3b:d6:
fa:c0:f7:79:ff:ae:ed:6e:61:0c:a0:c1:1d:3d:24:f9:9e:7b:
a7:b8:48:e4:46:2f:a0:a0:fd:c9:16:81:3c:65:5c:39:2c:02:
0e:e8:66:a0:24:b4:78:8d:19:75:c8:1f:07:47:6e:af:a6:32:
40:6a:75:62:5b:89:ef:00:18:86:84:3b:a9:95:42:f2:c1:cd:
bb:b9:29:ca:aa:42:08:d6:70:3e:96:30:21:4c:f9:88:70:36:
a4:f8:d9:e4:c6:4e:29:a6:32:e5:92:c0:dd:06:64:3f:bd:e3:
ab:43:79:6c:6f:88:6b:cb:c0:32:ae:2c:53:25:07:16:a3:b8:
30:66:a9:49:41:e0:6b:33:70:6b:70:fe:3d:8f:fa:fe:fb:15:
b4:cb:65:ac:e3:df:6f:73:40:0f:db:03:b9:22:68:e2:65:d5:
af:ca:0a:ec:4b:80:c3:ae:5d:a7:c6:9b:b8:b6:80:99:30:af:
57:10:d9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:06:54 2024 by rpki-client on console-fra.rpki-client.org