Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QSCnQYAUJy87SyUPL8I1gHowOog.roa
File: QSCnQYAUJy87SyUPL8I1gHowOog.roa (raw, json)
Hash identifier: iKR9+T+okJI92++rt5nxUuvuUoU+edzocTNK+4ppMxg=
Subject key identifier: 41:20:A7:41:80:14:27:2F:3B:4B:25:0F:2F:C2:35:80:7A:30:3A:88
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B7DEAF3EE4245266115891FCB1A66
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QSCnQYAUJy87SyUPL8I1gHowOog.roa
Signing time: Mon 01 Jan 2024 18:31:25 +0000
ROA not before: Mon 01 Jan 2024 18:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12968
IP address blocks: 93.159.0.0/18 maxlen: 18
62.111.128.0/17 maxlen: 17
85.128.0.0/17 maxlen: 17
89.171.0.0/16 maxlen: 16
193.91.16.0/20 maxlen: 20
62.181.160.0/19 maxlen: 19
2001:16b0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:7d:ea:f3:ee:42:45:26:61:15:89:1f:cb:1a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4120a7418014272f3b4b250f2fc235807a303a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:cd:ef:73:dc:5f:c9:0a:b3:8b:9a:7b:a8:
24:06:91:42:77:7d:e5:72:4d:b0:8d:7a:53:31:f3:
52:41:e4:04:47:fa:68:d4:c3:21:cc:4e:64:91:66:
01:0f:65:0a:2d:76:cc:fe:81:71:bf:bb:a0:d4:98:
c2:60:13:12:5c:5c:75:2a:41:6f:4b:6e:dd:21:78:
e1:25:37:aa:8b:66:56:72:07:77:78:4c:25:5b:db:
91:90:42:72:fb:4d:f1:fe:23:26:da:bf:b4:6a:25:
6d:8f:e9:ef:6d:fc:e3:1b:0f:3f:44:e1:33:25:51:
a6:d9:34:e2:20:17:7c:45:ab:44:3b:85:5a:e1:2a:
f4:b8:c7:53:ed:19:1d:47:94:ef:19:0f:39:65:a7:
f0:b8:ee:10:da:70:ee:63:8c:fd:7c:cb:49:16:de:
f6:c0:dc:3f:2c:8d:72:42:d5:f5:e6:ab:f3:29:d7:
61:a7:14:73:34:1a:71:e1:55:52:45:c2:1f:71:5b:
d0:37:c5:1d:33:b2:63:22:18:d7:59:e7:e9:09:72:
a7:03:cb:bc:a9:f7:d8:45:93:d7:58:e4:9d:33:4d:
79:ea:1e:8c:09:10:ef:de:59:5f:5f:aa:3a:57:44:
f9:cb:ca:5b:7f:02:b7:2a:ee:1c:41:e5:25:6c:66:
10:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:20:A7:41:80:14:27:2F:3B:4B:25:0F:2F:C2:35:80:7A:30:3A:88
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QSCnQYAUJy87SyUPL8I1gHowOog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.111.128.0/17
62.181.160.0/19
85.128.0.0/17
89.171.0.0/16
93.159.0.0/18
193.91.16.0/20
IPv6:
2001:16b0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:75:bb:8d:19:84:0a:92:b5:fa:1e:ba:f2:95:b2:7c:9f:c6:
29:3d:42:b4:46:f5:19:39:80:8c:ca:22:11:8d:8e:f9:cb:76:
27:5c:0f:c0:12:2d:12:87:0f:fc:80:ce:05:5e:6a:a8:12:bf:
ea:90:60:7f:08:bf:e3:c2:b1:6e:90:e2:5e:3f:92:5f:f4:18:
99:fa:2b:58:88:45:bd:78:37:b1:7e:de:cf:4c:d7:21:53:0a:
94:62:ca:be:b1:37:b9:bd:c4:02:86:72:fa:96:83:60:6b:60:
d4:db:fb:46:a7:96:a8:a1:0b:47:fb:c7:bb:51:83:04:0e:38:
5d:97:ae:62:16:22:eb:0e:59:e4:31:4f:6d:13:82:fa:fb:c0:
e1:d5:fb:b1:5c:6b:57:18:1b:09:b8:c0:c7:f4:ad:e0:b4:31:
40:b6:f2:30:68:c4:75:ad:2c:b3:57:89:b1:15:53:e4:fc:a8:
23:f8:dc:79:f6:49:b9:ab:b9:d8:6a:7b:07:d1:97:f0:98:2d:
ae:4c:ac:15:6e:fb:06:be:e1:f0:d8:3d:9b:33:2d:0b:c4:86:
6f:a6:a9:df:b1:cb:d1:08:dc:62:6d:43:8f:34:ac:f0:a1:ca:
69:70:83:85:f9:77:97:cc:6a:3c:d6:d3:f4:62:69:f6:37:50:
f3:2a:c5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org