Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/qgtq4qjPNRaeqiIhL7iMX5UgxjY.roa
File: qgtq4qjPNRaeqiIhL7iMX5UgxjY.roa (raw, json)
Hash identifier: ejfzT6QHwwUBuid3QX5+qPb90YMMs83grq6fzVRv97s=
Subject key identifier: AA:0B:6A:E2:A8:CF:35:16:9E:AA:22:21:2F:B8:8C:5F:95:20:C6:36
Certificate issuer: /CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Certificate serial: 018CC5014B236DD52922D8F0D2BAE7708867
Authority key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/qgtq4qjPNRaeqiIhL7iMX5UgxjY.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35266
IP address blocks: 193.46.61.0/24 maxlen: 24
193.104.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4b:23:6d:d5:29:22:d8:f0:d2:ba:e7:70:88:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa0b6ae2a8cf35169eaa22212fb88c5f9520c636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2d:e9:d1:0e:f8:07:74:5e:04:f3:26:8e:78:
69:de:ff:c5:d5:17:9d:ad:48:6f:c1:a1:d2:c2:b1:
67:07:6a:49:49:21:b7:a8:fe:2f:69:d5:2f:df:5a:
82:77:ec:74:e5:82:88:3f:aa:83:f2:16:fd:50:b8:
fd:73:4b:b1:81:c3:7f:e2:69:d6:3e:98:d5:7a:04:
3a:17:1a:84:a9:44:86:f0:c9:8c:69:52:0a:50:9a:
16:a2:fe:27:3d:df:9b:f5:1d:bd:49:9f:44:d0:f5:
d4:f3:14:8e:7e:72:f6:26:89:29:9a:d4:f8:65:f9:
be:85:93:ab:72:d2:29:61:eb:91:ee:f1:6e:2f:1f:
48:e9:11:de:b1:c3:20:ec:31:5d:9a:9f:46:b0:49:
8c:28:00:34:57:3a:ae:5c:0d:ed:e8:34:69:91:e4:
a0:8d:f0:fa:e2:99:56:69:85:0f:54:ed:81:65:76:
b4:55:5e:54:c3:03:fa:c0:51:a7:ca:a2:db:9e:b3:
92:ff:b6:8c:d8:ca:d1:59:52:8c:aa:98:67:9a:e8:
d9:04:a0:e4:b9:48:53:d3:b9:8d:d1:e4:c0:aa:28:
7f:17:51:81:6c:78:80:71:e5:9d:48:52:ba:16:2d:
6d:16:28:1d:91:d1:87:6c:5f:18:9a:06:58:7b:68:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0B:6A:E2:A8:CF:35:16:9E:AA:22:21:2F:B8:8C:5F:95:20:C6:36
X509v3 Authority Key Identifier:
keyid:8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/qgtq4qjPNRaeqiIhL7iMX5UgxjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.61.0/24
193.104.108.0/24
Signature Algorithm: sha256WithRSAEncryption
03:60:b8:8a:cd:0a:2c:b4:62:c6:96:76:8b:ed:b0:4c:ef:1f:
ca:2e:e7:6e:f5:c4:e2:26:b4:4b:7f:a0:37:6f:ac:12:f3:1f:
07:8f:72:b0:9c:2e:95:01:b1:9e:9a:69:f4:bd:0b:e3:f5:7f:
29:62:a1:7f:30:20:8c:34:18:e7:27:3e:60:1a:3a:28:2c:47:
0d:23:00:67:71:e8:43:2b:e2:c6:5b:cf:01:25:cf:7c:04:f5:
68:34:47:18:97:f8:ad:25:33:df:79:66:e0:36:3e:c1:18:40:
15:d0:1c:89:76:ce:49:94:54:36:bf:24:ea:86:75:1b:f1:95:
a3:4f:41:f2:02:a4:d2:1a:c4:ea:41:97:51:d3:ff:fa:0f:59:
06:e4:a1:09:cb:f9:b6:1c:04:d0:47:83:49:01:30:47:f1:c2:
05:64:00:08:30:08:78:fe:6c:4d:8d:bb:20:85:6a:22:1c:2a:
ce:3e:87:02:6e:c5:10:10:5b:79:25:15:0c:ae:e8:72:a5:ca:
cb:81:fc:85:8a:d5:b0:6a:78:8d:85:27:9e:c7:a7:ee:4b:25:
63:f7:99:a0:8a:62:b7:03:0d:c4:6d:5c:e9:70:33:b1:10:d8:
15:74:b6:5c:72:65:0f:0d:88:b8:f8:e7:d9:f5:8f:f7:e6:66:
6d:02:47:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:34:45 2024 by rpki-client on console-fra.rpki-client.org