Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/Q8-FkkdURaTz5trQDgHu45K9Xro.roa
File: Q8-FkkdURaTz5trQDgHu45K9Xro.roa (raw, json)
Hash identifier: Dvd26bujUcBv5l5ndhMzmqo67pehmunAkcK7WGhDruY=
Subject key identifier: 43:CF:85:92:47:54:45:A4:F3:E6:DA:D0:0E:01:EE:E3:92:BD:5E:BA
Certificate issuer: /CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Certificate serial: 018CC4253D5504455876BD47D6373AB98C98
Authority key identifier: B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/Q8-FkkdURaTz5trQDgHu45K9Xro.roa
Signing time: Mon 01 Jan 2024 08:30:24 +0000
ROA not before: Mon 01 Jan 2024 08:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 192.26.192.0/23 maxlen: 23
131.234.0.0/16 maxlen: 16
192.26.176.0/20 maxlen: 20
192.26.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3d:55:04:45:58:76:bd:47:d6:37:3a:b9:8c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Validity
Not Before: Jan 1 08:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43cf8592475445a4f3e6dad00e01eee392bd5eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:9e:5d:12:65:54:6a:2d:b4:45:cf:47:75:
d8:16:f8:e0:03:83:9d:b0:9e:e0:77:a4:6f:2b:15:
4a:59:57:1b:38:db:65:45:31:e0:6c:c4:d8:c8:59:
b5:90:2d:43:29:fe:bb:d3:c4:e4:95:cc:f8:e6:5f:
fd:3b:d0:72:af:f0:56:50:4a:16:cc:0e:f2:ca:11:
f9:7f:b2:9f:30:b8:1e:88:68:87:32:77:9b:e6:c8:
b0:6a:6f:c6:fc:da:95:5a:9e:dd:a8:e9:40:fb:6d:
9b:aa:3e:9e:4b:79:8d:a3:e8:f1:c7:11:41:6f:a0:
45:7d:73:fd:2d:f7:b2:42:7f:bf:58:a4:b0:ff:1c:
33:1c:9d:c1:3a:80:c9:ee:18:89:d2:fd:bd:cf:90:
c9:e6:5d:76:43:81:a7:83:85:75:40:15:62:35:d9:
94:91:7a:7a:91:94:cc:47:13:17:e8:f9:94:0c:06:
81:8c:ad:59:76:a5:46:3e:c9:1d:4f:0c:de:58:56:
a0:29:b9:fa:50:0b:41:88:6e:e0:de:0b:35:28:1b:
bb:ce:f5:38:3b:df:5c:2d:e9:77:8a:3a:c2:35:0e:
0e:2f:d0:ec:62:01:dd:c0:31:40:c2:7a:cf:b4:45:
22:69:f3:8b:36:5f:02:44:df:b0:cb:2d:f2:b1:49:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CF:85:92:47:54:45:A4:F3:E6:DA:D0:0E:01:EE:E3:92:BD:5E:BA
X509v3 Authority Key Identifier:
keyid:B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/Q8-FkkdURaTz5trQDgHu45K9Xro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.234.0.0/16
192.26.174.0-192.26.193.255
Signature Algorithm: sha256WithRSAEncryption
9e:82:7c:95:e1:35:1d:23:e0:1a:e4:b1:b6:e3:df:41:67:91:
63:50:f4:8d:06:e6:13:4d:71:f1:c6:11:91:01:b4:8a:6e:f1:
22:85:41:43:63:a3:1b:79:e0:57:ff:8b:33:bf:25:48:54:98:
64:5a:07:7c:a7:80:d6:b2:61:9a:bb:76:4c:8e:6a:07:53:b3:
3c:b7:12:54:f9:94:9d:e2:ac:73:00:06:b1:ac:ed:ee:fe:0c:
3f:f5:05:1d:65:a1:db:98:1c:51:24:af:14:04:5e:b6:ad:d7:
b7:9e:a9:57:8f:fb:a4:fa:bf:49:05:a7:a8:e7:97:d1:8f:ea:
3d:66:37:42:75:13:dd:eb:ca:e3:58:0e:5e:f0:fa:de:cb:e2:
7c:f1:14:37:dc:13:97:bd:b6:a6:62:f7:01:83:30:bd:a6:f9:
9d:d4:78:b5:37:78:e5:08:1a:5a:da:92:69:ff:df:26:60:01:
20:1c:c7:97:ce:4c:19:b6:76:6a:08:12:af:0b:05:92:6f:11:
60:7b:3a:e8:72:d9:f6:67:79:c2:d3:07:6b:09:8f:39:a1:1e:
ae:2f:3d:64:6e:be:a7:50:8e:e5:1f:f4:c2:08:47:40:f5:46:
ef:de:4c:61:e5:50:4c:ca:7b:fa:c9:8b:04:27:67:63:0d:60:
0d:ba:9f:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:41:25 2024 by rpki-client on console-fra.rpki-client.org