Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/q1mxi9wkZAkCLp2oXpLLqcRik2I.roa
File: q1mxi9wkZAkCLp2oXpLLqcRik2I.roa (raw, json)
Hash identifier: RS6rg4j4ck/Vsiirmj7YzB4NSwXTAXebj7AC6jpH6Ek=
Subject key identifier: AB:59:B1:8B:DC:24:64:09:02:2E:9D:A8:5E:92:CB:A9:C4:62:93:62
Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial: 018CC94D65CDFC0FF693D29996C82A22B30F
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/q1mxi9wkZAkCLp2oXpLLqcRik2I.roa
Signing time: Tue 02 Jan 2024 08:32:21 +0000
ROA not before: Tue 02 Jan 2024 08:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45049
IP address blocks: 194.113.116.0/24 maxlen: 24
2a14:4400::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:65:cd:fc:0f:f6:93:d2:99:96:c8:2a:22:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Validity
Not Before: Jan 2 08:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab59b18bdc246409022e9da85e92cba9c4629362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:5e:f7:20:52:a6:80:38:c9:12:af:5e:e0:
f2:ae:f9:57:84:49:c5:01:57:af:75:03:eb:f2:66:
dd:4c:d1:0b:93:27:72:b0:55:9c:87:57:28:a4:71:
a3:a5:33:d5:f7:01:a7:b5:4b:51:a7:c7:fd:c7:28:
ca:5e:29:24:69:03:93:0b:1e:24:42:03:c8:38:75:
7b:ca:2c:2e:2c:b3:09:8c:08:f2:a4:40:56:8f:51:
ac:b0:69:21:24:50:c6:fb:39:fc:06:83:46:2e:1b:
5f:c7:b8:de:a2:79:49:a1:bf:e9:47:81:49:fd:72:
e5:9f:2f:6c:93:bd:d3:43:8d:b4:f7:fa:50:ac:09:
c0:6f:08:a9:5e:ae:73:67:50:64:c2:45:e9:a1:f9:
e3:bf:39:91:1e:bb:af:e4:04:4a:01:01:63:f5:91:
17:a6:92:40:6a:2e:79:4b:ad:74:f0:ff:57:27:7a:
79:ea:1c:ce:8d:0f:cc:e8:23:d7:6e:82:61:cc:94:
29:61:d0:57:7c:c9:0d:f1:e8:1e:cb:ef:da:ec:d7:
60:d1:3a:cc:80:83:85:eb:46:88:43:4b:17:7a:63:
b9:0b:bc:5e:f7:ab:9f:30:80:9a:34:65:c6:94:d1:
78:f3:68:ec:49:c4:3e:d7:28:cb:dd:4c:6c:e3:5c:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:59:B1:8B:DC:24:64:09:02:2E:9D:A8:5E:92:CB:A9:C4:62:93:62
X509v3 Authority Key Identifier:
keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/q1mxi9wkZAkCLp2oXpLLqcRik2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.116.0/24
IPv6:
2a14:4400::/32
Signature Algorithm: sha256WithRSAEncryption
42:ff:bc:81:0b:f5:02:01:a9:0b:cc:8b:0a:bf:25:b6:46:9c:
38:4f:d4:4b:ae:47:4b:d1:f5:44:10:41:2c:f9:03:e9:a2:b8:
12:5d:ef:66:71:60:3b:9d:81:6f:34:3b:52:f9:b8:f6:03:ac:
7c:c8:ec:c4:ba:08:cc:49:9a:57:c3:0e:c4:8f:88:fa:13:a7:
24:93:9d:b4:2a:41:5d:63:ea:5d:88:07:71:1a:ac:9f:ae:8d:
10:e3:45:0d:22:d2:d0:34:df:4d:15:b1:58:ca:db:f7:c8:4c:
44:f7:a7:66:70:38:00:80:4c:58:78:83:97:45:4c:48:a3:7e:
44:49:26:f7:ae:52:c6:11:db:79:0a:03:3c:06:93:95:59:2e:
88:50:30:27:a1:76:c0:77:a2:08:b0:21:21:97:05:53:cb:1e:
cd:7b:16:b6:fc:ff:b1:cd:f2:ef:3a:25:6a:86:70:f8:2a:ec:
5d:90:b2:d8:3c:21:09:23:13:2c:70:5b:3f:67:c6:fd:70:ee:
46:e0:15:59:03:1a:44:96:91:e3:00:a8:c5:e0:36:fa:a3:1e:
27:46:3f:dc:82:a8:98:12:e0:35:a3:f4:33:2f:8d:63:e8:04:
24:75:af:65:e1:73:b9:8d:5f:42:17:d7:22:fc:07:ca:ce:8e:
02:db:66:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:43:58 2024 by rpki-client on console-ams.rpki-client.org