Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/q7HMunwYfgj3gZWCa4c4bZyJAUM.roa
File: q7HMunwYfgj3gZWCa4c4bZyJAUM.roa (raw, json)
Hash identifier: byLgcPu7+/0S/7wwfrT9pEpRmpInUemN2je1gyLpiNg=
Subject key identifier: AB:B1:CC:BA:7C:18:7E:08:F7:81:95:82:6B:87:38:6D:9C:89:01:43
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018FA4BEDC0BC312CCF66F8F2ED075AF78B9
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/q7HMunwYfgj3gZWCa4c4bZyJAUM.roa
Signing time: Thu 23 May 2024 09:18:42 +0000
ROA not before: Thu 23 May 2024 09:18:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50225
IP address blocks: 94.154.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a4:be:dc:0b:c3:12:cc:f6:6f:8f:2e:d0:75:af:78:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: May 23 09:18:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abb1ccba7c187e08f78195826b87386d9c890143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:9a:00:7a:bd:5a:9d:4a:10:1f:af:3b:bd:
62:88:1d:d2:af:ef:a6:d1:fa:eb:dc:29:20:2d:07:
8e:b5:67:3d:45:9d:5b:fc:7f:39:9a:de:35:2b:4e:
4e:c5:2d:88:86:d0:78:f8:a2:91:4e:a1:06:c3:aa:
64:b0:c4:b2:e9:38:fc:73:17:0d:f9:aa:20:97:b9:
9c:cd:b7:d8:a2:28:e4:f0:9c:f5:69:53:b8:ba:50:
1c:24:7c:fb:13:7f:45:9f:dc:6c:79:6a:6f:1a:29:
7a:1d:c8:63:77:0f:9b:35:f6:fc:c1:00:4c:78:b8:
3d:b0:50:17:76:76:bb:3c:78:64:04:dc:7a:51:34:
85:ac:33:20:b5:15:2a:05:ca:1a:75:b9:90:2d:6c:
91:5c:01:ce:3c:14:47:1b:11:e4:d3:65:0b:2d:cc:
46:30:da:cc:38:df:ba:8c:a0:06:ea:9a:df:d1:9d:
45:c5:bc:ed:b0:ae:10:0c:c0:ba:24:e7:63:46:fc:
9f:b5:67:1f:76:95:93:5a:25:c7:16:d2:b9:a2:7d:
f4:d6:29:43:8a:16:f0:58:3a:b4:3c:f5:47:f1:62:
ca:22:c5:8d:e5:ef:f2:31:d4:e6:5b:6d:eb:46:c9:
e5:d8:a3:f7:46:b8:c3:c1:b3:db:18:f9:7b:76:cd:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B1:CC:BA:7C:18:7E:08:F7:81:95:82:6B:87:38:6D:9C:89:01:43
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/q7HMunwYfgj3gZWCa4c4bZyJAUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.42.0/24
Signature Algorithm: sha256WithRSAEncryption
67:86:ea:1c:a8:25:41:b8:38:fb:db:61:5a:1d:65:9f:1d:e3:
6a:2b:e9:3a:12:14:5f:f1:43:04:ca:be:e3:af:b3:03:7e:9d:
33:a4:7b:2f:c8:25:ad:9f:93:0e:65:b9:0a:80:35:1c:26:4b:
3b:4e:00:8a:c0:e9:b3:73:bb:e3:c3:bf:e0:99:c7:11:d8:03:
ab:27:1c:32:05:3d:61:ca:d7:bf:95:2d:59:14:54:f8:3d:2f:
8c:80:78:b0:ea:11:74:6d:81:3c:85:cf:3a:27:79:06:52:6a:
b9:78:3e:53:80:9d:2f:fa:f0:11:ef:64:df:2a:6a:7c:bf:db:
64:8c:50:d1:db:eb:77:9a:25:10:b5:03:04:63:be:6a:cd:b3:
99:be:78:e6:ad:31:61:ce:9d:6f:08:8d:82:a1:46:7e:13:0c:
3b:16:8e:35:0e:e5:55:d0:bf:50:8d:15:4e:f1:63:26:48:6a:
d7:bf:02:80:44:42:9d:24:22:f3:2a:2f:0a:f9:a7:7f:b2:db:
ce:88:cc:e3:1d:64:39:2b:8c:ae:ca:07:df:dc:00:3b:66:9d:
cb:ad:05:9c:dd:6e:3d:14:d7:5a:92:c3:64:78:06:57:a5:f9:
b7:ba:a7:d8:d0:60:aa:c3:35:c1:37:f3:29:19:39:e0:ec:1f:
33:07:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:26:34 2024 by rpki-client on console-ams.rpki-client.org