Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Qjc-CZrv-OguRkNWegnBEzgH1D4.roa
File: Qjc-CZrv-OguRkNWegnBEzgH1D4.roa (raw, json)
Hash identifier: Nk1gKD9l9m+8SbqX3vb6G//PYO2s6trwO9pqzs7ew/U=
Subject key identifier: 42:37:3E:09:9A:EF:F8:E8:2E:46:43:56:7A:09:C1:13:38:07:D4:3E
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 019059EFAF230039969382386C8C2F539A7F
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Qjc-CZrv-OguRkNWegnBEzgH1D4.roa
Signing time: Thu 27 Jun 2024 13:43:18 +0000
ROA not before: Thu 27 Jun 2024 13:43:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215460
IP address blocks: 188.209.130.0/24 maxlen: 24
188.209.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:ef:af:23:00:39:96:93:82:38:6c:8c:2f:53:9a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 27 13:43:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42373e099aeff8e82e4643567a09c1133807d43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:3a:13:49:7b:bc:36:98:ca:3e:87:5e:b0:
51:c7:13:9b:33:96:fd:4b:b5:1a:fd:51:ed:3b:80:
fb:b7:fc:c3:4b:ea:71:d9:6a:09:fc:84:46:48:0e:
bd:3b:1d:67:9a:c4:3b:27:7e:d7:2a:59:8e:1a:44:
fe:cd:49:a7:55:5c:a8:66:30:87:8a:97:52:9f:7a:
21:11:f7:9b:b4:d7:a7:53:19:23:14:0f:eb:53:fa:
db:92:e0:97:5d:f6:42:c4:94:6b:0b:02:b9:a7:a3:
55:3e:1a:81:1f:84:05:a7:0d:f5:b6:12:ba:8a:90:
24:88:1c:1a:c5:e5:e3:67:33:4e:68:74:ed:95:a1:
9d:26:44:ec:54:a0:12:3f:1f:29:d1:07:6d:48:4c:
1f:fd:c1:c3:ab:15:ec:b9:6b:2c:6c:1f:fa:fa:63:
d8:69:79:ba:d5:44:e7:b7:90:df:e8:c7:86:3a:6c:
e8:af:ee:6f:22:14:f6:f7:88:3a:46:de:a8:70:b5:
a3:69:2a:9a:72:9b:24:59:ca:0a:b2:1f:82:49:7e:
09:da:6d:19:6d:16:38:73:dd:f0:62:6b:2b:3a:d7:
45:61:58:b2:46:b0:d8:eb:87:51:3c:c6:66:f0:45:
64:bc:81:07:ea:e5:6c:84:a5:14:b6:99:5d:3d:e3:
fd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:37:3E:09:9A:EF:F8:E8:2E:46:43:56:7A:09:C1:13:38:07:D4:3E
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Qjc-CZrv-OguRkNWegnBEzgH1D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.130.0/23
Signature Algorithm: sha256WithRSAEncryption
46:c7:63:9c:05:4d:67:24:a2:72:d1:c7:59:e3:e2:a0:c8:b7:
2f:1d:58:d4:b9:e2:f9:56:ff:09:db:43:dc:36:e4:82:ca:3f:
da:31:b7:12:5c:e8:ba:e9:4a:dd:ae:33:79:10:23:99:e3:71:
84:49:d3:89:e9:8c:0d:53:6b:5b:01:78:5e:61:bc:a2:01:8d:
0c:5a:65:4e:f2:b3:ba:63:bb:2f:01:0a:90:39:d8:f8:88:05:
5b:51:47:50:f7:8a:b5:d8:5d:6a:d0:9a:76:1c:92:47:22:eb:
83:17:23:79:55:54:59:5b:d4:b9:1d:03:ee:12:43:e9:3e:4c:
2b:ce:7f:0d:e5:21:75:55:d6:f4:da:98:a6:f8:c9:49:e5:97:
0c:cd:54:5d:85:8d:92:b7:4f:3b:b2:99:0b:e4:d1:fe:26:e2:
22:db:89:35:40:eb:9a:a5:dd:cb:6b:63:0b:14:d9:ae:f8:94:
03:98:6f:30:8c:2b:0b:f1:86:ea:86:96:09:9f:cb:57:59:e7:
69:04:c9:ce:26:1d:c5:b4:eb:a7:66:80:42:95:0a:b1:2c:49:
bb:b1:03:36:20:ea:54:2c:07:ae:9f:e9:9f:6f:d2:b4:90:39:
e3:84:2d:40:82:c6:74:bb:a6:2a:37:62:eb:b3:a9:25:99:23:
b7:f7:25:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 08:28:42 2024 by rpki-client on console-fra.rpki-client.org