Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/qDxzwe0GH2VujRXVat7iKSXXH00.roa
File: qDxzwe0GH2VujRXVat7iKSXXH00.roa (raw, json)
Hash identifier: Hp5j1dWr8/uRQ/HI0SV7xvaSLiKYrO1nEWM9jqAf2SQ=
Subject key identifier: A8:3C:73:C1:ED:06:1F:65:6E:8D:15:D5:6A:DE:E2:29:25:D7:1F:4D
Certificate issuer: /CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Certificate serial: 018CC2DB29CE9361FC73D433E6BF792ABA54
Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/qDxzwe0GH2VujRXVat7iKSXXH00.roa
Signing time: Mon 01 Jan 2024 02:29:52 +0000
ROA not before: Mon 01 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28686
IP address blocks: 194.147.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:29:ce:93:61:fc:73:d4:33:e6:bf:79:2a:ba:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Validity
Not Before: Jan 1 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a83c73c1ed061f656e8d15d56adee22925d71f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:4f:db:b8:e8:03:42:3c:1a:5b:27:c8:7a:
a7:53:82:79:9d:d5:10:06:84:97:19:2e:95:6a:16:
b5:cd:74:b3:9c:10:92:9e:5b:7e:e4:71:b2:cb:22:
46:d0:12:cc:a7:f6:a7:af:48:2c:ba:36:85:ac:1c:
89:6d:74:fc:70:97:35:bc:c2:08:6a:ca:c5:7a:0e:
ac:68:80:26:8b:78:74:cd:46:d5:13:74:bb:44:c3:
65:cd:be:e0:b8:45:1b:6f:45:55:fd:4b:e2:fd:79:
73:66:df:f0:a0:81:b2:48:d6:53:49:86:74:e8:d4:
3c:cf:a5:05:3c:d5:5a:f5:0f:a8:52:56:e3:a0:f7:
62:10:e4:24:af:93:db:58:bf:df:45:dc:9e:2c:58:
a3:9b:ed:e5:11:e9:25:e2:be:27:f9:df:05:4e:78:
3b:58:3f:f9:ce:fd:9d:e3:ba:6f:d4:00:cc:e4:00:
ef:b1:62:08:8a:8c:d4:89:52:b3:7b:84:93:e1:c6:
4e:4e:98:06:93:11:05:6d:e6:3b:cb:c3:bc:96:5c:
fb:99:3c:e8:89:dd:b6:85:1a:18:0f:32:dd:ab:30:
01:55:34:d3:93:fa:9c:0b:ae:69:5a:ca:33:99:e5:
76:19:2b:f7:d8:00:6a:3a:a4:92:b7:fc:65:0b:77:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3C:73:C1:ED:06:1F:65:6E:8D:15:D5:6A:DE:E2:29:25:D7:1F:4D
X509v3 Authority Key Identifier:
keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/qDxzwe0GH2VujRXVat7iKSXXH00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.192.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:6e:fe:1b:35:08:7e:ff:39:42:dd:e5:d8:48:01:6e:53:21:
cb:3d:da:1f:a9:bf:f6:b1:9d:9f:b5:ce:f1:b7:2f:5b:7c:ab:
fc:13:8e:a0:7b:c3:38:e1:07:6a:5e:52:1c:1d:8b:71:0d:7e:
e4:3b:97:03:39:ed:c6:3c:45:c7:0c:02:65:8c:05:4a:58:b2:
33:c6:01:17:4e:d1:0f:21:2a:18:c9:03:bd:88:00:68:a4:de:
1c:dc:5d:5c:e4:29:f8:b0:8a:72:76:d1:eb:3f:d2:3b:e7:d9:
9d:0b:69:69:31:0f:11:5b:94:3c:4b:00:69:5a:ad:f1:72:73:
64:9f:91:0b:f7:00:ca:80:71:1b:4a:cf:f7:5c:c9:ce:13:86:
f5:bc:a5:4f:3d:53:4c:07:08:77:ea:0e:e4:5a:91:7c:cd:d3:
6b:47:fe:68:04:92:5c:bf:79:b4:cf:9b:c6:9a:5a:a7:88:52:
a8:c4:12:cc:ca:be:73:6b:3d:b4:ac:c9:ad:77:bf:f4:bd:77:
9d:ce:73:61:e8:c4:07:01:c7:7b:6f:35:06:63:90:bd:4c:f6:
9b:09:4b:b2:99:24:b7:a6:a2:02:87:13:29:e2:e7:d1:0b:57:
b6:e3:a4:ac:da:9c:52:6a:69:33:e0:de:6f:85:ee:a3:14:b4:
46:6b:d9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:32:51 2024 by rpki-client on console-ams.rpki-client.org