Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/SQR_PCGGPtI-7S2Zes3_1VAWFWw.roa
File: SQR_PCGGPtI-7S2Zes3_1VAWFWw.roa (raw, json)
Hash identifier: 9trz3+K+ov764Jc30Z2MdXh71td4q1Lvo2th19Cmg9w=
Subject key identifier: 49:04:7F:3C:21:86:3E:D2:3E:ED:2D:99:7A:CD:FF:D5:50:16:15:6C
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 018CC6B8E5F7DA8658EBD33090FA0F965EC8
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/SQR_PCGGPtI-7S2Zes3_1VAWFWw.roa
Signing time: Mon 01 Jan 2024 20:30:55 +0000
ROA not before: Mon 01 Jan 2024 20:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56464
IP address blocks: 188.244.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e5:f7:da:86:58:eb:d3:30:90:fa:0f:96:5e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Jan 1 20:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49047f3c21863ed23eed2d997acdffd55016156c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:58:56:bb:b2:c9:0a:b0:52:d8:d9:a4:0b:
17:40:c8:ab:4a:c2:5f:16:3b:e4:3d:59:30:4c:c8:
71:65:2a:d3:28:78:7d:9c:ed:75:e4:56:2c:b1:bf:
4e:44:44:be:db:c5:14:ae:d4:c8:dd:a1:d2:79:8d:
eb:50:a7:7e:6a:9e:4d:c7:d8:cb:d6:be:30:85:09:
f3:8b:29:07:fb:f3:7e:d7:bb:c3:fb:2e:30:ae:2b:
df:a0:3b:d0:09:84:ad:67:c6:6e:cb:6d:61:a7:d5:
e4:28:cd:2c:a3:b0:5e:cd:df:f8:e8:8d:3e:e4:e6:
db:ef:9f:e4:cb:6b:4f:73:60:91:52:14:3e:2a:56:
47:ad:67:8e:50:ca:50:5b:23:bb:c6:7f:ee:18:53:
be:5b:91:8a:8c:46:27:49:c1:d9:19:23:07:27:48:
d0:01:d3:d1:a4:8c:ff:87:2b:e3:58:52:26:46:7f:
bc:d7:1c:17:1e:b0:4a:de:19:e7:5c:76:f8:7f:d0:
dd:eb:d3:7f:70:24:cd:01:57:49:e7:dc:50:ba:4b:
f1:78:51:12:d0:9b:11:33:6c:0c:7c:cc:4d:67:89:
71:af:6b:06:f2:cd:4a:f1:97:0d:2d:aa:7b:63:de:
b3:a0:2f:dd:c0:6f:a3:a1:9e:96:b1:3a:66:ce:79:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:04:7F:3C:21:86:3E:D2:3E:ED:2D:99:7A:CD:FF:D5:50:16:15:6C
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/SQR_PCGGPtI-7S2Zes3_1VAWFWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.124.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e8:fd:e2:4e:5e:b1:04:f6:74:94:f5:9f:ea:a9:5f:cd:a6:
c0:19:f2:cc:c8:f4:ae:11:9e:74:3a:a2:8f:80:78:c3:6c:77:
25:76:87:3e:a5:7c:fb:65:aa:9e:fc:42:a6:72:44:dc:95:08:
b8:04:79:22:d9:ba:a6:b2:0b:97:cb:4b:fc:29:f6:4e:39:d1:
32:96:ca:74:7a:7f:97:1e:01:a0:76:56:c5:2d:85:42:84:dd:
d2:80:27:46:77:8b:29:30:9a:58:d3:6d:98:0a:60:9b:fe:2b:
a5:94:19:f2:58:59:98:94:3e:f8:eb:7a:28:63:f1:d8:0b:c4:
0c:5c:44:71:66:4d:64:a6:00:9c:6b:f1:ca:9b:84:30:d3:7f:
00:71:f1:d9:f0:d3:a3:92:4c:28:4c:6d:70:8c:1d:26:f0:20:
14:0a:cd:e9:0a:97:04:48:f9:69:87:22:01:ec:c2:3c:0b:f0:
79:a6:bb:3a:da:7b:75:1a:d6:83:63:b7:81:34:18:c0:65:c1:
92:ef:83:5e:39:5f:8d:dc:4f:b7:5b:8c:05:fe:d3:0a:d2:43:
9e:83:0e:de:c0:b4:88:e3:86:2a:3b:a4:42:65:c0:15:4e:e6:
02:59:e5:e4:a8:42:b0:57:c2:bb:84:99:eb:74:02:57:05:35:
fb:ad:f6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:33:12 2024 by rpki-client on console-ams.rpki-client.org