Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/dqjTiZUi2eOWEIiQcISyTBPuoS8.roa
File: dqjTiZUi2eOWEIiQcISyTBPuoS8.roa (raw, json)
Hash identifier: ib+1+pLr/qfftIeGLKsxgznUVAYFUze3c1QA8N/hb4Y=
Subject key identifier: 76:A8:D3:89:95:22:D9:E3:96:10:88:90:70:84:B2:4C:13:EE:A1:2F
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 018CC26D7D4B6110193FFC9F3264A15E0F08
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/dqjTiZUi2eOWEIiQcISyTBPuoS8.roa
Signing time: Mon 01 Jan 2024 00:30:04 +0000
ROA not before: Mon 01 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207695
IP address blocks: 193.22.106.0/24 maxlen: 24
193.22.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7d:4b:61:10:19:3f:fc:9f:32:64:a1:5e:0f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jan 1 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76a8d3899522d9e3961088907084b24c13eea12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f1:4a:a9:e5:76:94:1b:dc:0f:c5:79:dd:b0:
1a:83:ca:5f:25:09:2e:98:f4:91:dd:cd:a8:ee:6a:
b3:b7:1e:7c:41:a5:d5:d5:1b:9a:00:c1:58:80:5c:
00:4d:67:0a:ec:33:81:09:e8:17:bc:a1:37:77:26:
63:6e:af:78:6c:5e:78:87:b0:92:bb:cc:13:45:ac:
94:3f:76:ed:3f:01:c5:9b:df:dd:f9:79:85:89:05:
ad:65:f8:d9:00:be:14:7b:00:d7:48:02:40:40:87:
22:27:ac:a7:f1:5c:74:cc:b4:9e:54:b5:11:3b:dd:
b0:d9:9a:01:24:2e:3f:97:dc:8c:0d:63:a7:12:a1:
81:ce:c7:3a:2f:64:11:91:d0:7f:c3:34:d2:c2:9f:
1f:83:f9:81:15:15:5f:1f:b9:75:77:55:da:ca:2f:
3a:12:a1:ee:6a:2f:29:9e:45:87:a1:7f:18:00:45:
17:c8:1c:ef:fb:13:63:23:09:76:b8:6b:34:29:28:
3a:4f:5d:9b:20:b6:94:f9:c8:d7:19:a8:16:8c:0b:
1c:c4:f3:86:bb:69:7c:ea:30:ff:f5:83:45:41:0f:
41:f5:bb:e0:3c:99:7e:32:c9:59:e5:e9:2d:5e:09:
68:cf:39:2c:17:cd:de:ca:73:12:ef:a7:27:69:93:
a9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A8:D3:89:95:22:D9:E3:96:10:88:90:70:84:B2:4C:13:EE:A1:2F
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/dqjTiZUi2eOWEIiQcISyTBPuoS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.1.0/24
193.22.106.0/24
Signature Algorithm: sha256WithRSAEncryption
79:18:fc:b7:05:cd:6f:29:c5:34:4a:b6:70:4c:ff:fa:57:ef:
36:ef:66:2d:7c:c1:da:44:ea:8e:1a:91:20:00:32:6a:82:3d:
cf:1a:c8:9a:20:2d:81:40:61:fd:89:47:75:49:99:c8:76:a7:
c5:f0:4c:9a:9d:6e:a7:b4:21:e2:db:fe:77:80:0d:28:f6:b0:
f8:04:8b:98:e3:93:54:8d:0e:3f:b4:1f:a5:0c:52:5b:08:63:
3f:37:c3:2a:9d:a0:99:a9:d7:2a:f7:e6:d4:c2:7c:2e:8d:f1:
57:c8:6e:0e:59:dc:a2:91:26:97:d7:32:77:4b:b2:06:7d:ec:
d8:28:d2:29:12:69:74:75:4e:ec:3c:9c:02:b2:d8:db:5e:b1:
00:53:03:74:e2:65:77:87:1b:bc:00:62:9f:4d:84:6d:87:25:
3c:11:32:ae:fb:89:93:c3:4a:59:55:f8:25:65:85:aa:4c:33:
56:b5:4b:77:db:a5:81:d8:bc:ee:55:aa:78:03:9c:72:d4:7c:
37:01:85:d5:fa:a7:db:ca:34:37:8e:1f:bd:44:b2:cc:37:4d:
a6:55:24:91:81:08:f9:60:a5:37:c5:2c:29:b6:bd:8d:ac:45:
fa:98:0d:db:23:b2:2d:d5:bd:6f:95:a7:e2:d7:b7:8e:c3:cf:
4f:f9:a4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 00:05:00 2024 by rpki-client on console-fra.rpki-client.org