Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/q1lEY3xi11zHhTVjWaxEiNFexpY.roa
File: q1lEY3xi11zHhTVjWaxEiNFexpY.roa (raw, json)
Hash identifier: Tmt82GunstXuvia++GveLtZqE2yNGaE992+pjQr8vj0=
Subject key identifier: AB:59:44:63:7C:62:D7:5C:C7:85:35:63:59:AC:44:88:D1:5E:C6:96
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 018D5A62140B532FCA73387CE1F410DFA533
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/q1lEY3xi11zHhTVjWaxEiNFexpY.roa
Signing time: Tue 30 Jan 2024 12:39:53 +0000
ROA not before: Tue 30 Jan 2024 12:39:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49223
IP address blocks: 92.119.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:62:14:0b:53:2f:ca:73:38:7c:e1:f4:10:df:a5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Jan 30 12:39:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab5944637c62d75cc785356359ac4488d15ec696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:9d:28:61:47:12:4a:3a:14:23:96:00:21:
e2:55:27:5c:ca:8e:e3:9b:32:1f:ac:8b:47:d6:53:
29:ff:94:52:d7:a6:86:37:5d:5b:02:70:0c:62:8a:
8e:5c:5b:66:3d:2f:87:e9:b8:0c:19:b6:10:1b:e7:
3f:80:eb:a6:42:43:19:3f:ee:0c:af:0e:2f:77:bd:
4c:2b:6f:71:42:67:b3:df:74:fb:9c:bf:be:23:96:
56:d5:b2:cb:28:e8:46:99:b5:56:96:4d:27:74:ac:
06:af:c0:21:4e:f9:52:bf:d3:54:da:72:c7:c9:3b:
d7:b6:6a:d3:ca:62:f1:7e:56:78:f7:cc:0e:dc:be:
19:16:8c:8e:94:10:41:65:4e:02:d4:c2:5e:1f:f6:
5e:d9:bb:50:8c:50:73:29:85:e0:03:85:7a:4d:6a:
15:5e:54:bd:28:14:dc:6b:e2:ad:c8:9a:73:80:a6:
c9:5f:f1:a9:78:99:0d:90:70:28:9c:1a:b8:7e:35:
c6:36:5e:e9:c3:a5:eb:2d:8a:33:e3:48:50:b5:4f:
19:fd:89:3b:cb:68:3a:ca:39:7b:ae:e2:d6:29:3c:
3f:f7:fa:32:f0:cd:1d:2f:1d:96:11:c0:15:4d:03:
f4:db:46:4f:6d:be:70:2a:1e:9d:a1:a3:c2:37:00:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:59:44:63:7C:62:D7:5C:C7:85:35:63:59:AC:44:88:D1:5E:C6:96
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/q1lEY3xi11zHhTVjWaxEiNFexpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.240.0/22
Signature Algorithm: sha256WithRSAEncryption
34:3e:a8:ec:fd:e2:22:c5:90:16:ad:b1:d3:ad:68:d2:25:aa:
55:fa:87:72:5e:0b:32:7d:73:eb:0f:ac:93:24:d8:9a:f5:49:
5a:2c:83:3d:77:18:92:00:ae:f1:99:7d:0b:bb:1c:73:fa:30:
33:e2:68:b2:f4:d8:49:a1:c2:f3:92:f4:03:83:74:ab:75:c4:
61:62:b4:af:21:8e:4f:56:2f:83:0f:e7:f7:91:15:be:a1:f9:
24:fa:91:aa:d8:1b:e0:01:b1:8e:6d:e2:dc:31:cf:1b:ff:c5:
7d:15:97:2e:98:10:46:e1:21:96:05:9f:31:dd:5d:91:99:e5:
75:85:c5:f9:6e:4f:c3:f5:ce:8a:cf:07:88:d0:c8:38:50:90:
ae:85:80:27:14:a8:87:c2:2a:b0:4f:da:e1:1f:3d:53:f4:6c:
56:a4:5b:88:97:c1:ad:78:e8:51:44:1a:83:e4:28:8b:fd:83:
17:a1:e8:77:f8:ab:fc:89:e6:f7:f6:07:f9:ed:39:ab:20:45:
dc:8c:88:ee:fe:cc:8d:a2:e2:1e:70:f9:f1:e4:d3:c3:6b:c8:
1b:6e:90:c2:be:a5:20:66:82:6c:14:e3:cc:f4:67:c3:d1:a0:
4a:3b:58:51:cd:86:35:11:24:55:e9:90:c5:33:78:41:e2:34:
b2:81:22:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:33:40 2024 by rpki-client on console-ams.rpki-client.org