Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/qJzsKYpqd5xgtVCLACwVzGrs9yg.roa
File: qJzsKYpqd5xgtVCLACwVzGrs9yg.roa (raw, json)
Hash identifier: LN4YjhR1L6fbA/D2v80V94B+fA88ITDJPGKNX9AggBA=
Subject key identifier: A8:9C:EC:29:8A:6A:77:9C:60:B5:50:8B:00:2C:15:CC:6A:EC:F7:28
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 018F819BB0DC9B56DE0AB5D1C1BD9BBD766F
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/qJzsKYpqd5xgtVCLACwVzGrs9yg.roa
Signing time: Thu 16 May 2024 13:33:35 +0000
ROA not before: Thu 16 May 2024 13:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41957
IP address blocks: 146.19.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:9b:b0:dc:9b:56:de:0a:b5:d1:c1:bd:9b:bd:76:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: May 16 13:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a89cec298a6a779c60b5508b002c15cc6aecf728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:d7:5d:5c:e2:88:9e:41:a8:62:d0:58:fb:
7f:b0:9e:cd:cd:78:ac:d1:0d:d5:9d:49:85:65:f4:
cc:d5:8e:b8:69:44:c7:31:f8:30:b6:f7:81:0d:ab:
fc:e3:ae:02:b5:65:2f:43:d7:fa:1e:2a:24:0e:0a:
e6:ce:2e:28:13:a2:ad:f6:fb:ce:d6:03:ed:37:a3:
22:00:69:e6:57:ef:5e:32:dd:cd:69:b6:d1:b2:fb:
4d:05:26:a4:7f:37:dd:af:97:6b:ce:5f:0a:b7:c1:
96:b3:ee:1c:e0:bb:92:f9:cc:5e:7d:89:72:7a:da:
f0:2b:3d:c9:90:6c:d3:b5:ff:d3:35:d6:ca:52:18:
d6:99:70:c3:a6:02:9b:e9:08:c0:d3:9d:35:b2:c7:
54:69:70:7c:03:91:30:77:fe:53:45:b3:31:30:12:
16:30:23:44:36:66:f3:90:4a:30:3d:89:7a:a6:60:
12:07:56:90:e2:35:01:b8:b7:76:4c:47:26:76:2c:
de:ff:2a:da:ce:bf:03:d4:7a:d6:ce:14:b0:08:27:
f1:82:e8:42:e0:43:ad:f9:85:db:90:38:70:c2:cc:
26:2b:55:74:46:b6:0f:51:e5:84:c8:e5:63:c6:d3:
3c:73:2a:bf:83:40:19:85:68:ef:da:88:4b:8e:f8:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9C:EC:29:8A:6A:77:9C:60:B5:50:8B:00:2C:15:CC:6A:EC:F7:28
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/qJzsKYpqd5xgtVCLACwVzGrs9yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.178.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:2e:4e:47:43:ac:49:e3:61:84:ba:4b:5d:e9:d9:ae:0d:20:
33:85:87:fb:c3:a6:ed:8e:19:96:fc:eb:af:79:3c:bd:63:c5:
96:35:02:6c:14:71:61:10:b3:1e:a8:e3:6b:a6:61:da:8f:9d:
58:f8:dd:99:ec:72:ce:b2:25:80:c1:96:d9:d4:a6:d5:df:a6:
ec:22:e0:fc:16:0d:78:cb:65:ad:bf:eb:ef:35:43:fb:08:e7:
5e:88:44:d3:1e:7e:16:02:1c:1c:35:35:1b:ef:71:0d:ec:60:
c6:61:23:7c:1f:5a:60:ae:d6:c0:ca:46:8e:cb:3c:41:c0:64:
ba:d5:01:9a:b6:c8:e2:d2:f6:08:36:c8:ad:42:2b:69:8c:c4:
7d:32:ad:63:d8:70:30:e3:7a:c4:9b:05:78:87:46:72:f4:fa:
35:53:f8:47:2e:d6:b0:68:af:f8:59:fc:45:3c:d9:ac:d6:4a:
ad:3a:b1:fa:18:64:be:7a:99:e9:db:5d:0c:bb:8c:e1:49:75:
8d:e3:9c:7f:12:40:b4:e0:bf:27:c1:c0:3e:66:ca:6f:86:fe:
33:df:f4:94:34:f8:d3:76:76:b3:3d:bf:6e:50:05:f1:68:32:
73:58:ce:44:5d:06:16:1a:d2:03:b6:8e:de:ed:28:ee:3e:d6:
b1:ee:71:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:36:30 2024 by rpki-client on console-ams.rpki-client.org