Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/qVObmdZDcq_Sg7XpmnLyC6qhHWo.roa
File: qVObmdZDcq_Sg7XpmnLyC6qhHWo.roa (raw, json)
Hash identifier: GsG35NAp/Mja98gHiO07YChpzk54rWAQ65txG5aOxdk=
Subject key identifier: A9:53:9B:99:D6:43:72:AF:D2:83:B5:E9:9A:72:F2:0B:AA:A1:1D:6A
Certificate issuer: /CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Certificate serial: 018CC9BC583D307F031780C32C06E5F03822
Authority key identifier: 09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/qVObmdZDcq_Sg7XpmnLyC6qhHWo.roa
Signing time: Tue 02 Jan 2024 10:33:32 +0000
ROA not before: Tue 02 Jan 2024 10:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58243
IP address blocks: 185.84.120.0/22 maxlen: 22
193.163.169.0/24 maxlen: 24
45.14.96.0/22 maxlen: 22
2a03:70e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:58:3d:30:7f:03:17:80:c3:2c:06:e5:f0:38:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Validity
Not Before: Jan 2 10:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9539b99d64372afd283b5e99a72f20baaa11d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:31:f5:17:c5:4f:1e:36:7b:39:29:d4:50:
82:43:d2:7b:8d:12:8b:48:0a:48:d6:35:a3:3b:84:
62:26:29:0b:f4:57:0c:72:f2:33:28:6f:6a:79:08:
d0:c7:db:1c:5e:09:f3:dd:96:8b:2e:83:3f:e5:e7:
ce:5d:dd:b4:19:4d:84:ae:27:14:41:7f:ec:81:74:
eb:34:1f:2a:05:6b:c3:23:89:e5:f1:2e:7c:11:7d:
53:8e:87:3f:6b:6a:4f:c8:4b:91:ce:3f:68:79:f3:
d8:22:58:ab:aa:c6:f6:3c:8f:75:d7:21:46:45:a8:
07:b0:85:a4:30:e5:50:e7:b0:16:47:42:d9:52:0e:
d6:d1:8e:4f:e7:da:05:6c:6b:bc:4c:ba:b2:92:30:
fe:3f:d3:cf:fd:55:7f:fa:88:77:ab:71:0f:4e:81:
d8:2d:63:11:02:54:09:a8:88:22:29:6f:a3:82:a2:
42:3d:a8:50:b1:46:59:c8:34:f7:dc:9f:be:d9:36:
10:ad:88:9c:8e:0c:36:c5:33:74:ad:e3:24:bf:72:
1c:0a:a4:5f:88:f6:cc:b5:f2:c4:fe:6d:3a:c5:de:
69:f5:c5:d2:26:59:e1:3c:b1:69:b5:97:72:88:09:
f2:75:e5:ea:fe:c4:a9:d4:e6:1c:6e:70:e1:0b:a9:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:53:9B:99:D6:43:72:AF:D2:83:B5:E9:9A:72:F2:0B:AA:A1:1D:6A
X509v3 Authority Key Identifier:
keyid:09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/qVObmdZDcq_Sg7XpmnLyC6qhHWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.96.0/22
185.84.120.0/22
193.163.169.0/24
IPv6:
2a03:70e0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:08:a6:7e:34:39:f2:95:e1:fc:06:9b:43:cb:52:61:34:3a:
cf:23:82:f5:5c:d6:65:53:da:95:08:5c:a1:db:c7:b0:66:b8:
a2:f4:50:b0:b2:c8:04:31:11:34:ae:08:37:2d:0d:23:32:50:
d9:ba:2f:2e:ec:46:39:2c:09:85:6e:c5:f1:4c:af:af:d1:cc:
65:e2:b7:29:14:cf:0a:9e:a6:d6:a4:e8:dc:9e:be:5e:dd:88:
cb:5a:0d:a4:6c:b5:ad:ae:30:32:4b:bd:db:0f:8b:4f:32:1e:
ea:31:b6:0d:91:37:71:62:27:a3:97:25:13:95:6b:a4:63:3f:
91:c4:d5:fd:55:d8:28:9b:da:da:52:eb:5c:44:f2:64:5d:77:
25:ee:44:5c:5c:0f:dd:78:f8:a4:b0:29:4d:1d:78:9f:50:23:
bf:a5:50:1d:18:ad:b0:9c:e7:c0:dd:60:c6:7d:9c:11:c4:59:
01:03:7b:58:3f:ab:ea:30:50:71:a5:9d:4f:eb:3a:fc:a1:e7:
8b:3f:df:6a:c1:bc:05:5c:4e:23:13:d9:2b:9e:5d:11:47:5b:
83:36:3e:52:4f:c9:0d:e1:cb:2a:70:33:93:c5:8a:36:d5:c4:
36:32:f8:0a:82:a2:75:05:f5:b8:4c:1a:92:39:e4:c9:09:4a:
9e:b2:e8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 09:16:09 2024 by rpki-client on console-ams.rpki-client.org