Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/quiug_vQERQVxjmIxJkz9kj7XOc.roa
File: quiug_vQERQVxjmIxJkz9kj7XOc.roa (raw, json)
Hash identifier: P6JAo2Qnu/BuqlzvrFZDnj2Xch4ha7p59aC8bt2eXY4=
Subject key identifier: AA:E8:AE:83:FB:D0:11:14:15:C6:39:88:C4:99:33:F6:48:FB:5C:E7
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F3E9669E6D48363BA83451A2819EC
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/quiug_vQERQVxjmIxJkz9kj7XOc.roa
Signing time: Tue 02 Jan 2024 04:29:42 +0000
ROA not before: Tue 02 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 195.177.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:3e:96:69:e6:d4:83:63:ba:83:45:1a:28:19:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aae8ae83fbd0111415c63988c49933f648fb5ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:a7:31:26:d7:42:c5:44:60:65:13:3b:33:
e7:49:2a:28:9b:6b:14:91:88:f0:77:8c:14:ab:ac:
4e:67:32:84:65:b7:af:f3:88:a9:b8:70:ce:79:42:
33:a5:e6:b3:22:07:a2:b7:95:1a:a3:2d:d5:ed:d9:
ad:3f:68:03:3a:7f:e1:49:bd:7a:9b:ab:04:1d:b1:
cc:0e:8d:89:72:16:8b:24:03:82:e1:38:15:55:77:
54:5a:1f:6d:3b:66:36:37:f3:a7:aa:2c:2e:27:f6:
f4:c7:7f:fe:26:d3:eb:3a:b6:69:ba:38:d8:61:03:
3d:c6:f1:89:a0:e4:47:bb:cc:78:6a:8e:7c:65:3d:
0e:c0:70:4e:64:d1:43:63:b2:98:cb:58:5f:6b:b9:
d6:7d:90:0b:c3:87:bf:0f:3b:b9:35:55:d7:ee:ff:
f5:28:3f:5c:7e:b8:33:c0:28:51:07:04:93:ed:ff:
68:5e:25:0a:16:b3:86:65:90:b1:5f:8c:75:21:81:
21:eb:8a:77:ef:87:e1:1e:ca:06:5e:ee:93:2c:51:
6b:d7:a3:e1:34:56:c2:f8:ab:64:44:75:72:f1:da:
57:03:eb:c6:b3:13:c5:b5:fe:ae:4f:ec:cd:b9:6c:
9b:ed:c4:7a:dd:28:a4:bf:1e:88:ea:4f:e6:df:83:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E8:AE:83:FB:D0:11:14:15:C6:39:88:C4:99:33:F6:48:FB:5C:E7
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/quiug_vQERQVxjmIxJkz9kj7XOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.94.0/24
Signature Algorithm: sha256WithRSAEncryption
04:17:53:37:8d:bc:1e:e6:a2:a0:04:3e:d2:48:e8:20:9f:95:
91:7c:45:9a:4e:92:9d:c8:e2:0a:e2:8d:c4:12:35:52:56:e4:
e2:bd:ff:92:d1:e4:0b:07:24:f5:31:0c:83:5b:fc:ef:53:41:
5f:85:bf:af:a3:5b:17:f1:4c:d4:c6:ae:a1:a3:a9:be:61:b1:
e8:8e:17:98:8d:59:3c:da:4f:eb:41:7e:4d:ff:48:57:8a:9e:
11:38:a8:38:49:d7:cd:d7:0b:c2:39:7d:11:f9:e2:f0:2a:d2:
d4:a8:11:bf:4f:4e:9d:07:0e:84:1a:d5:8d:e9:0d:18:50:b5:
6f:3c:a2:ba:7f:07:c2:5c:2f:2f:80:1e:e4:0b:c6:2b:b3:60:
89:2a:5a:66:73:81:13:d9:44:fb:d0:a8:74:b7:ed:96:b2:ca:
fa:92:d8:bf:dd:aa:fd:25:e0:af:3a:91:a9:b8:97:b6:3f:eb:
58:91:94:7a:48:3e:08:d7:cf:ac:10:1b:aa:7e:b2:a8:aa:54:
f9:cb:2e:2f:93:ff:0b:89:fb:5f:3f:4f:87:89:1e:bb:56:37:
a0:60:27:66:0b:a9:2d:45:d1:86:02:76:77:c1:03:89:4a:48:
fc:e1:92:8b:04:c0:71:3e:25:82:bf:d0:43:af:94:10:2c:45:
84:00:7b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:43:46 2024 by rpki-client on console-ams.rpki-client.org