Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/qUF8-3PAX5ouCZOJ4138XkTt4Rs.roa
File: qUF8-3PAX5ouCZOJ4138XkTt4Rs.roa (raw, json)
Hash identifier: ag2lJLJXarj/edmWmMocxvP5G72fGT577Lu21azdr1o=
Subject key identifier: A9:41:7C:FB:73:C0:5F:9A:2E:09:93:89:E3:5D:FC:5E:44:ED:E1:1B
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94E06556EA5864C441D37BED3169CF8
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/qUF8-3PAX5ouCZOJ4138XkTt4Rs.roa
Signing time: Tue 02 Jan 2024 08:33:02 +0000
ROA not before: Tue 02 Jan 2024 08:33:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202854
IP address blocks: 194.181.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:06:55:6e:a5:86:4c:44:1d:37:be:d3:16:9c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9417cfb73c05f9a2e099389e35dfc5e44ede11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:64:4a:15:ac:f9:50:10:84:fc:8e:ba:2b:
c6:03:3c:3c:11:be:e2:55:bb:a7:03:bc:7c:3b:bf:
37:bd:e7:b4:01:6b:9c:44:32:dc:c1:5b:29:19:0b:
34:b9:ce:bb:11:ba:29:47:cb:a4:47:18:02:30:b0:
a7:52:84:a6:f2:18:7a:70:9d:1b:b3:8c:33:e4:0a:
9a:a9:24:ba:53:c8:34:58:cf:a1:71:2a:0c:41:1c:
c1:b3:d2:40:3a:38:bd:3e:b9:ad:db:4c:08:45:99:
24:3b:5a:65:cd:cc:83:f3:74:cc:fd:19:57:5b:71:
5b:29:0b:41:75:99:5a:d4:a5:8b:98:71:17:04:bf:
18:bf:50:e4:48:74:77:35:e6:46:7c:eb:8b:47:81:
4c:eb:8d:f5:bd:ee:d6:f7:5e:6f:c6:9e:d8:71:05:
19:6d:4f:14:33:ec:3b:92:f7:45:07:78:e8:63:3c:
f3:25:ad:30:d3:68:0c:90:63:72:39:c1:d4:67:a7:
9f:b4:15:aa:78:e2:9c:29:c2:e1:e8:d0:c7:cc:4c:
b0:3f:d7:b1:b6:09:d3:b5:bf:18:8a:bf:90:10:77:
20:06:34:52:ac:54:c2:7a:97:40:b1:a1:ec:12:39:
38:3c:9f:56:b9:df:35:fd:1f:41:b9:4e:3c:26:7b:
4c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:41:7C:FB:73:C0:5F:9A:2E:09:93:89:E3:5D:FC:5E:44:ED:E1:1B
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/qUF8-3PAX5ouCZOJ4138XkTt4Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.181.67.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c0:00:83:46:cf:06:97:b8:d5:1a:02:d3:e8:8e:33:5b:ee:
b1:c3:ce:8f:f1:86:cd:6e:e0:e2:2f:83:67:db:40:5b:2a:9b:
06:3c:23:46:1f:b3:bd:a7:8a:0c:e8:f4:5b:25:83:a3:88:71:
76:ff:f3:34:2c:48:a4:e2:09:0d:5b:bb:fa:05:74:d4:c7:46:
1b:2c:5f:85:fd:38:9e:76:e0:6d:57:d8:48:6c:4a:b3:12:9a:
85:e2:4e:d4:b3:4d:04:51:fa:97:e4:55:1c:6b:2a:e5:fe:3b:
61:87:48:63:44:0d:c4:52:ef:c1:f0:cc:17:8d:06:eb:5d:75:
61:78:6e:23:d1:d6:48:f1:c1:fb:b0:b8:6f:30:69:65:56:00:
84:bd:17:99:86:e2:e5:22:58:e2:14:78:22:9a:cf:09:c0:3c:
c8:7f:ce:55:d1:f5:cb:cc:e8:75:bf:77:b6:f4:a0:8c:1a:bf:
dd:52:83:ec:fc:2f:c1:2c:f5:fd:c5:13:be:88:00:95:a4:7f:
90:28:ab:90:6d:fc:71:e2:85:6d:1b:01:e9:2b:37:69:74:c4:
79:1d:48:bd:21:92:e0:d6:56:0e:e8:74:54:88:64:46:fa:db:
b9:d0:97:c2:14:0d:31:f8:63:cc:8e:5e:8e:de:c8:8c:58:84:
9d:31:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:56:09 2024 by rpki-client on console-fra.rpki-client.org