Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/QDPO_uuvYKmeIHIprCORARZVJwU.roa
File: QDPO_uuvYKmeIHIprCORARZVJwU.roa (raw, json)
Hash identifier: Ay3YitywhqZALnfUmMWGT1oJrKhBBYFKFLH00zWHrN4=
Subject key identifier: 40:33:CE:FE:EB:AF:60:A9:9E:20:72:29:AC:23:91:01:16:55:27:05
Certificate issuer: /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial: 018CC3B6D81718A9FC309CBB6756ED5EC5AE
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/QDPO_uuvYKmeIHIprCORARZVJwU.roa
Signing time: Mon 01 Jan 2024 06:29:49 +0000
ROA not before: Mon 01 Jan 2024 06:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 147.189.20.0/24 maxlen: 24
147.189.19.0/24 maxlen: 24
147.189.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d8:17:18:a9:fc:30:9c:bb:67:56:ed:5e:c5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Validity
Not Before: Jan 1 06:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4033cefeebaf60a99e207229ac23910116552705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:80:e7:2f:00:ca:39:bd:b7:ab:4c:79:cf:
89:d0:d3:1b:e2:02:70:6e:81:1f:b1:39:57:60:1a:
5e:e3:ce:0f:21:0c:d4:75:c4:29:d9:32:2f:38:c3:
ae:5b:a0:2c:f9:ba:d0:23:2b:e3:81:b2:9f:5c:d4:
a3:ae:a7:ad:e2:1e:64:68:c0:fa:b6:2a:42:54:45:
d5:68:7f:09:04:58:bd:38:bf:b6:2c:f4:b1:ba:f7:
38:03:77:1e:c9:90:cb:6a:7b:b4:02:70:3b:c2:46:
22:d5:16:c2:67:3f:f9:52:30:bc:bb:84:51:21:47:
d0:e8:7a:19:f6:e4:51:d8:cc:63:c2:f1:4c:92:41:
3a:f2:fa:20:b0:6a:1f:bc:e0:f6:cb:1e:ed:24:5a:
3d:73:c0:73:45:18:23:c1:e1:3a:13:74:32:79:30:
8a:68:13:04:60:93:ae:86:39:37:c9:2c:c3:d4:55:
dd:27:0c:0a:e2:d4:56:b3:09:d1:d0:fa:c7:9b:41:
88:56:ee:b9:2b:7b:f1:be:51:e4:9f:d4:52:de:fe:
84:4d:e7:e9:c0:77:4f:20:e4:0d:06:f8:56:f3:18:
63:be:96:4e:ef:b4:20:74:22:79:9d:c4:cb:4a:88:
eb:02:25:96:33:6c:b1:ea:c6:10:3e:80:d5:87:8e:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:33:CE:FE:EB:AF:60:A9:9E:20:72:29:AC:23:91:01:16:55:27:05
X509v3 Authority Key Identifier:
keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/QDPO_uuvYKmeIHIprCORARZVJwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.18.0-147.189.20.255
Signature Algorithm: sha256WithRSAEncryption
19:90:58:a6:53:07:0d:e7:5d:dc:05:54:ab:41:c3:f7:bd:dc:
59:79:2e:8d:7f:2e:41:8e:b8:8a:3e:40:a0:38:73:6e:83:8f:
14:a9:e0:e0:74:1e:ec:55:5a:09:78:26:ad:49:9a:0d:c3:fa:
07:61:81:0b:b7:20:e4:6d:48:f5:93:cc:d4:8e:06:0a:1c:2d:
e0:67:50:76:24:b4:ec:c7:25:1c:91:81:62:2c:6d:28:5d:a6:
00:58:02:23:65:20:31:75:34:ef:31:62:d1:c9:a3:f8:aa:0e:
34:81:c2:ec:bc:32:f9:1b:ea:86:58:0d:5f:21:96:82:ff:29:
e9:a3:69:32:71:5f:3e:bf:b1:92:fa:b2:d5:af:cb:3d:71:a3:
61:17:e2:c9:16:75:8e:7a:00:91:ae:5c:f3:f2:a2:83:94:76:
76:80:9a:7d:1f:ff:24:2a:be:ff:5f:62:62:c1:73:24:5a:a4:
d3:eb:17:8f:68:2c:64:1e:e7:b5:4b:f7:0c:c3:fd:b4:3c:f5:
d4:a6:1f:56:f9:8c:d9:6d:16:f3:03:f5:b5:57:38:44:40:c0:
95:6b:aa:71:53:89:57:1a:5c:a4:24:81:c2:e8:c3:60:bf:4a:
33:76:be:b9:67:d7:83:98:fc:88:1a:09:8d:44:f4:88:18:ab:
a5:b6:0f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:05:47 2024 by rpki-client on console-fra.rpki-client.org