Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qGzReoVQ80Gaxznyi6M1Zw6ai1g.roa
File: qGzReoVQ80Gaxznyi6M1Zw6ai1g.roa (raw, json)
Hash identifier: w1u/4foU1B6PMbVFtbsmBTM9quYfn3IYOAdwS1B/Pa8=
Subject key identifier: A8:6C:D1:7A:85:50:F3:41:9A:C7:39:F2:8B:A3:35:67:0E:9A:8B:58
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018E7711982C23BDADD1EE0C7827FE39FCD0
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qGzReoVQ80Gaxznyi6M1Zw6ai1g.roa
Signing time: Mon 25 Mar 2024 19:23:45 +0000
ROA not before: Mon 25 Mar 2024 19:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30823
IP address blocks: 46.19.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:77:11:98:2c:23:bd:ad:d1:ee:0c:78:27:fe:39:fc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 25 19:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a86cd17a8550f3419ac739f28ba335670e9a8b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:79:c5:10:a1:9d:2b:73:ad:6b:d6:b3:7b:
6d:0d:24:e3:cd:97:57:fc:70:25:90:13:69:4c:2d:
22:94:77:db:7b:1a:0d:3c:5c:c4:eb:68:5f:b3:3e:
4d:10:0b:11:4d:21:56:f3:d2:22:2f:16:c0:18:2a:
24:1c:d0:bf:2c:3a:71:47:ff:38:7a:a5:e2:a5:f9:
d3:58:f6:f2:84:75:53:0f:c3:7d:42:e6:67:b0:d6:
b7:35:bf:02:25:40:d1:d6:6a:ac:5d:a6:d9:5e:66:
9e:8d:02:5f:fe:a9:b1:98:51:f3:3d:03:11:37:0e:
4b:d9:ce:51:1a:46:f8:15:cd:47:16:4a:62:b6:fc:
97:4c:a6:24:d5:9c:f5:20:82:fa:68:43:b5:10:d4:
1d:8c:f1:01:44:cd:95:5c:a5:36:29:fa:fa:bc:a9:
d8:14:39:ee:cb:1b:21:9a:4f:d7:b9:dc:81:49:31:
18:2b:0d:d4:c4:9b:a7:77:c6:67:c6:a4:6b:af:78:
c8:28:18:b9:d5:db:b2:7d:f9:5a:89:75:9f:ce:c2:
d7:b6:e2:15:c6:a1:9a:19:a7:29:bd:06:49:06:67:
43:e4:44:65:b8:a4:da:b5:78:fb:50:d2:a6:c6:40:
03:33:04:6c:5c:3c:97:02:1f:74:dc:0b:13:6c:a5:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6C:D1:7A:85:50:F3:41:9A:C7:39:F2:8B:A3:35:67:0E:9A:8B:58
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qGzReoVQ80Gaxznyi6M1Zw6ai1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.207.0/24
Signature Algorithm: sha256WithRSAEncryption
56:48:45:9a:10:36:6d:5e:22:71:88:56:ed:5c:15:ee:45:1c:
24:20:95:33:72:24:71:20:c9:a3:79:10:9a:e1:5f:21:65:74:
fc:11:22:63:8f:d7:b3:94:0d:78:db:e7:15:b5:60:8f:d5:50:
56:1d:7d:89:47:23:48:07:d5:15:9d:f2:2a:90:e8:e9:10:5f:
34:6f:67:32:2c:61:5f:30:a6:59:ee:95:45:a8:a7:fd:76:7b:
0d:21:4e:d1:da:70:fe:3b:80:a9:a0:6c:07:83:2c:5e:0e:59:
ec:b0:27:c5:af:13:a5:89:bc:df:47:c1:19:52:6e:0b:4f:b9:
03:8e:6c:ac:6f:95:73:de:16:8f:9b:33:36:58:60:0a:e2:a2:
7d:5a:dd:56:23:5a:0b:3e:ca:ad:18:ee:30:10:1d:ce:d1:00:
8c:a1:d7:af:c2:07:09:ce:2e:06:cc:7a:0a:4a:e6:1a:db:57:
48:ec:91:73:56:d5:9e:e8:45:19:c1:e1:ed:9d:b0:c1:0d:10:
56:30:3d:ac:2a:a8:53:c5:d2:b5:11:54:a4:41:8f:fb:98:89:
da:5c:c7:70:2b:86:a7:70:85:10:74:bc:f5:53:a6:26:a7:3c:
d1:c6:51:cb:d7:80:b3:6c:ac:4e:a5:8d:b2:d8:2b:1d:f5:dc:
cb:1c:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:39:26 2024 by rpki-client on console-fra.rpki-client.org