Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/xQ_q4GGzUmwMNzbq4--M3jaXRZc.roa
File: xQ_q4GGzUmwMNzbq4--M3jaXRZc.roa (raw, json)
Hash identifier: Kj/HOJ5CFYLvoJGcidNvQer3+Fi31V3zarNTLFdqakA=
Subject key identifier: C5:0F:EA:E0:61:B3:52:6C:0C:37:36:EA:E3:EF:8C:DE:36:97:45:97
Certificate issuer: /CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9
Certificate serial: 018CC7275E95C30D995965CD0934E1089898
Authority key identifier: 0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/xQ_q4GGzUmwMNzbq4--M3jaXRZc.roa
Signing time: Mon 01 Jan 2024 22:31:35 +0000
ROA not before: Mon 01 Jan 2024 22:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58273
IP address blocks: 194.31.184.0/22 maxlen: 24
2a09:1880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 13:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5e:95:c3:0d:99:59:65:cd:09:34:e1:08:98:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c50feae061b3526c0c3736eae3ef8cde36974597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:66:ae:fb:29:7b:cd:fa:af:ce:93:f6:8a:
f3:a9:14:14:17:bc:9d:fd:81:03:f8:1d:37:f0:45:
b4:4e:39:8d:90:20:a9:92:a7:7d:ef:11:78:71:9b:
6c:67:da:91:1b:4c:38:a3:1d:57:92:4d:a8:b4:89:
f1:6a:2a:4b:51:25:f9:b1:a2:99:61:a2:50:f1:65:
5f:e2:97:7e:a0:0c:a8:d1:ba:3d:a9:7b:c8:c9:40:
0b:14:48:ff:56:c4:3d:27:fa:0d:df:53:a8:61:c1:
ca:31:c2:39:47:8d:59:64:a4:ae:46:ff:2d:11:bb:
ec:05:ad:fe:86:a5:73:ea:8f:1f:90:c3:fd:dd:1c:
03:bb:df:e1:39:f9:c1:30:80:59:5b:19:50:fd:d3:
ff:f3:84:ff:52:0a:d6:be:f5:74:84:7c:3a:40:d3:
43:8e:ea:6b:6a:c6:4c:08:70:6a:cf:33:be:f5:dd:
c7:99:97:57:13:e5:0a:cf:7d:d7:17:c7:36:82:a1:
15:9d:35:98:87:e9:4a:ed:da:aa:c8:5e:c1:09:46:
d7:ac:20:40:0b:94:1a:71:3e:c2:28:07:2c:93:d0:
b7:ec:39:10:f0:12:6b:41:63:fa:92:27:a8:1b:5b:
fb:ab:6a:ad:1f:4c:56:f0:62:32:34:ae:4e:bf:77:
21:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0F:EA:E0:61:B3:52:6C:0C:37:36:EA:E3:EF:8C:DE:36:97:45:97
X509v3 Authority Key Identifier:
keyid:0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/xQ_q4GGzUmwMNzbq4--M3jaXRZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.184.0/22
IPv6:
2a09:1880::/29
Signature Algorithm: sha256WithRSAEncryption
b2:fa:1f:69:f2:4d:79:80:c4:e0:c1:9f:bf:40:41:5f:ab:58:
b4:fe:47:c9:25:5c:aa:a8:f4:0b:47:8c:e7:58:76:e8:18:c7:
bd:37:fb:bf:b4:55:f0:9d:53:b8:fc:dd:56:93:5a:cf:b5:e9:
bf:14:dc:06:95:cd:be:17:cd:e8:4c:10:60:dc:c5:38:61:35:
b5:99:56:9d:d9:c6:e0:60:a1:1f:98:50:06:be:8a:1c:b6:be:
1d:db:7f:ac:75:c5:73:0b:75:d4:0b:df:d4:7f:c6:58:6f:ba:
f6:c4:96:ae:e3:9a:31:f4:74:b5:8b:78:d4:a4:6d:ee:3c:0b:
c1:d0:8d:1a:8b:d2:4a:e1:b0:87:f4:8b:f3:1e:cd:a9:c0:db:
f8:9a:d2:75:b3:5d:40:38:d3:f4:93:0f:4e:bf:71:68:dd:1f:
36:25:9b:aa:bb:88:53:ab:47:ed:11:24:64:fe:89:a3:09:a8:
6b:42:55:c8:a1:37:63:8d:b1:c5:6c:e2:6b:02:73:73:66:57:
45:96:e9:97:96:dd:16:06:29:71:c4:a4:59:b5:cd:b0:09:4f:
1f:d8:30:33:b9:88:f9:e6:c7:16:c3:53:7a:0a:23:02:e1:6b:
95:97:6f:d9:f1:d4:17:dd:6a:9a:a5:5d:b8:cb:a9:6d:c8:60:
94:c5:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:11:53 2024 by rpki-client on console-ams.rpki-client.org