Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/qMBC587igfASXtzOcrpnDZ3bMhE.roa
File: qMBC587igfASXtzOcrpnDZ3bMhE.roa (raw, json)
Hash identifier: oHDpnoCMhLzlU7UqcVnNjKC8trPYDA6CgtsmAoAwrlQ=
Subject key identifier: A8:C0:42:E7:CE:E2:81:F0:12:5E:DC:CE:72:BA:67:0D:9D:DB:32:11
Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial: 018CC5DC305D37F3B5597DA67409B396AF11
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/qMBC587igfASXtzOcrpnDZ3bMhE.roa
Signing time: Mon 01 Jan 2024 16:29:51 +0000
ROA not before: Mon 01 Jan 2024 16:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1128
IP address blocks: 131.180.0.0/16 maxlen: 16
130.161.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:30:5d:37:f3:b5:59:7d:a6:74:09:b3:96:af:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Validity
Not Before: Jan 1 16:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8c042e7cee281f0125edcce72ba670d9ddb3211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:b6:d9:2d:b8:5e:87:74:d6:3d:71:36:59:
c2:35:d7:8d:e2:c9:15:89:b4:c8:ec:bd:8a:af:70:
dc:55:00:32:82:49:90:03:a7:f4:f7:70:68:dd:1f:
cc:bb:6d:62:60:c7:fc:cd:1f:73:d0:57:b0:78:b6:
30:51:a1:a4:6e:9d:fe:7c:86:c5:7d:01:2a:16:e8:
6c:71:6a:b1:be:81:aa:9e:1f:03:21:e4:1b:03:1a:
c2:f3:5a:a0:8e:4b:77:89:00:eb:e0:31:e9:20:c1:
e0:c9:f3:e7:9d:f7:99:7f:04:81:53:bd:a6:3f:b7:
cc:6c:c7:b1:1f:f6:ba:33:bd:36:f3:9d:07:43:c4:
27:2b:a7:ae:04:99:09:22:bf:32:4c:96:89:5e:4f:
8d:3e:aa:39:e3:d2:a0:ab:c4:86:4d:40:33:e4:5c:
66:e2:b3:ab:6c:5f:f3:d1:f8:a8:02:1b:94:d1:2d:
b0:06:73:63:af:22:17:9c:21:de:5f:39:65:f2:64:
30:4b:56:f6:00:a6:b0:28:a9:ab:7c:ee:99:27:2e:
a3:25:dc:96:4e:32:85:dd:b6:71:cb:30:46:2a:45:
6d:b2:45:c5:c7:36:75:e1:28:14:08:a1:d2:df:1c:
41:83:80:b2:99:e1:9b:20:17:98:1d:5c:01:7a:0c:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C0:42:E7:CE:E2:81:F0:12:5E:DC:CE:72:BA:67:0D:9D:DB:32:11
X509v3 Authority Key Identifier:
keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/qMBC587igfASXtzOcrpnDZ3bMhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.161.0.0/16
131.180.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:9a:a3:45:4c:5c:b7:51:d2:9d:0b:23:e2:bd:b3:56:fa:10:
ae:47:8b:fc:f0:e7:98:98:c4:18:df:00:5d:20:0b:d9:af:56:
26:56:b6:0e:10:cd:52:1c:36:6b:4b:7c:2d:8b:2e:0e:97:53:
b9:a7:50:25:da:8f:7e:91:e4:78:d6:2b:77:16:77:9b:75:1a:
42:84:d4:ec:ed:d6:4f:cd:bf:2c:23:82:34:bb:dc:0e:c0:bb:
bf:ab:f5:5f:bd:e7:37:6f:97:a6:be:9d:6d:8f:bc:b7:a0:00:
60:2b:a6:c9:ba:15:f3:67:75:84:ae:32:8c:54:e4:dd:42:7c:
7f:42:89:2a:25:fa:05:de:2c:5c:05:08:f8:bd:9a:95:bc:f1:
fd:f0:e2:bc:19:a5:ce:16:11:31:b6:ce:8b:89:59:65:ba:df:
75:00:cd:0e:82:c5:db:65:9c:ac:09:34:61:e9:f9:ab:ae:46:
b1:53:b0:9a:d8:54:ac:c8:7a:0d:03:30:bd:a2:90:c5:54:6a:
91:71:57:ab:ed:77:e0:87:00:0f:43:b7:83:c9:e0:ac:df:7a:
9e:68:96:f7:29:da:50:c0:bd:85:cf:c3:e0:ff:2c:5d:d2:8c:
e5:b7:80:af:94:36:57:9b:92:5c:4f:b9:73:9f:72:d1:aa:d5:
d5:ed:77:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:04:50 2024 by rpki-client on console-ams.rpki-client.org