Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qQqyp31ga64ZJdDZGRyeNvfuKDY.roa
File: qQqyp31ga64ZJdDZGRyeNvfuKDY.roa (raw, json)
Hash identifier: T/rjknqxY3RPlrL/hKtiyfp+gYEV1m/v9UudWjd4N/4=
Subject key identifier: A9:0A:B2:A7:7D:60:6B:AE:19:25:D0:D9:19:1C:9E:36:F7:EE:28:36
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01932E08353E94DDE700B48C00C15C75E2E5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qQqyp31ga64ZJdDZGRyeNvfuKDY.roa
Signing time: Fri 15 Nov 2024 04:15:10 +0000
ROA not before: Fri 15 Nov 2024 04:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 192.124.170.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
212.192.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2e:08:35:3e:94:dd:e7:00:b4:8c:00:c1:5c:75:e2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 15 04:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a90ab2a77d606bae1925d0d9191c9e36f7ee2836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:76:b5:7b:4b:4f:ce:f5:bb:94:c6:da:1e:
6a:d6:88:a6:b7:15:88:df:bc:4a:6b:a9:be:d9:81:
66:5b:8b:aa:35:af:c2:49:b2:b1:5b:3c:45:09:6d:
b4:3f:10:82:0d:f5:1c:0d:e4:f0:44:61:37:c2:78:
86:15:79:f7:b3:49:7d:eb:7d:81:50:66:4d:b6:81:
c6:5c:0a:4d:8d:6c:1b:9a:7f:8c:20:93:f4:5b:41:
fb:97:d6:c6:c3:42:36:ad:0f:01:ec:70:40:52:f3:
d5:18:bf:b6:29:de:08:98:b5:f5:e7:a6:77:6a:45:
fe:85:15:61:46:2c:fb:bd:d7:af:d9:e4:c3:de:f7:
43:90:b0:10:e9:e8:eb:81:03:16:22:65:c1:b8:cd:
ea:b4:5c:4b:31:48:64:4c:86:77:cc:7d:eb:a4:29:
47:7f:92:24:90:7b:62:9e:72:c2:94:71:51:91:a0:
2d:08:1c:99:b0:b4:ee:74:c8:ed:2b:91:39:76:45:
0a:ab:5e:a8:54:f3:d9:6e:f4:20:67:9f:d3:bf:d8:
36:94:99:20:4b:82:f7:90:d4:a0:77:da:06:f0:e9:
be:e8:b3:69:59:10:20:01:9e:e3:77:a4:b0:93:be:
a3:58:8c:a6:d8:02:7e:e2:aa:59:95:96:e8:57:dd:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0A:B2:A7:7D:60:6B:AE:19:25:D0:D9:19:1C:9E:36:F7:EE:28:36
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qQqyp31ga64ZJdDZGRyeNvfuKDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.170.0/24
192.124.180.0/24
212.192.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e0:e7:43:c6:4e:15:63:83:45:e3:aa:78:0a:75:d5:3e:16:
3a:35:83:03:f5:17:4c:9a:b8:2a:a4:e1:ae:ff:a0:83:d4:79:
6f:5b:d2:4e:c1:1c:6f:1e:b5:dc:55:41:d2:d8:8b:03:0f:84:
53:e2:5f:aa:44:17:6b:09:9b:93:f1:d9:87:81:d8:41:a6:6c:
a4:35:63:e3:d9:b9:98:f0:eb:c4:2c:de:24:34:c3:18:83:3a:
5d:38:ea:d5:44:9a:25:92:00:e0:9e:e9:ab:b1:e5:71:fd:91:
d9:25:b2:3a:16:3d:27:c0:d2:10:36:2f:ee:da:e2:84:7c:f0:
17:1e:2b:1a:f4:0a:29:f7:e7:9b:a1:3b:75:89:0a:21:96:e4:
bc:33:ea:76:c3:c0:7e:f1:97:ca:6a:0d:5d:e3:64:15:d4:a0:
70:cf:d9:e3:14:d7:90:5f:b4:9c:5f:7b:98:25:c3:6e:71:30:
eb:e0:1d:6c:6c:f0:27:f4:92:5a:cd:9c:95:2a:20:0d:fd:2a:
94:21:2f:02:2e:28:51:28:48:db:90:65:b9:93:fc:58:a4:ad:
ff:a3:67:db:9c:62:f7:e7:04:6e:a1:17:86:14:ab:25:f2:b5:
c8:df:42:86:cc:d5:95:96:75:8b:ce:45:2a:56:66:cc:d1:57:
a4:a8:b8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:56 2024 by rpki-client on console-fra.rpki-client.org