Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/2vsyjeR71N7DPM_qcl-5EKJJbic.roa
File: 2vsyjeR71N7DPM_qcl-5EKJJbic.roa (raw, json)
Hash identifier: WQwGFmzixMWRAKQnLnjAqNnCB785IXnMvxe3O8bbZzo=
Subject key identifier: DA:FB:32:8D:E4:7B:D4:DE:C3:3C:CF:EA:72:5F:B9:10:A2:49:6E:27
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348D881642B3E61CE726468C8B62C69
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/2vsyjeR71N7DPM_qcl-5EKJJbic.roa
Signing time: Mon 01 Jan 2024 04:29:40 +0000
ROA not before: Mon 01 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41521
IP address blocks: 194.209.55.0/24 maxlen: 24
194.209.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d8:81:64:2b:3e:61:ce:72:64:68:c8:b6:2c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dafb328de47bd4dec33ccfea725fb910a2496e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:79:9c:91:f1:11:9f:06:39:ac:33:19:21:
49:a3:ca:ec:c7:89:e1:96:bf:0a:a6:f7:af:3b:6f:
66:3a:55:2f:d8:66:c7:77:79:6d:4a:47:b2:74:4e:
7b:a7:33:f0:37:ab:d3:dd:3c:90:44:62:56:ce:48:
2b:f0:3c:ad:4a:d0:d7:8b:7e:47:84:bc:b2:ab:96:
d8:4f:70:d6:0c:05:13:d0:23:32:f0:49:0a:c4:98:
9f:49:a4:99:17:be:bd:60:0e:b8:bd:f5:e7:06:2f:
90:cc:55:2c:9c:91:a6:e4:30:62:42:c0:ca:b8:cd:
cb:98:41:58:a4:1d:c2:94:6c:c9:91:dd:2f:40:bd:
d1:66:1b:c8:60:fb:67:03:a5:20:f5:04:9e:20:1b:
90:df:c9:55:5f:0c:a0:90:ab:93:38:4a:56:7b:7c:
3d:8a:f5:58:fa:3f:97:3b:4e:2b:b3:23:58:a2:5a:
0a:9d:aa:95:33:fd:18:f6:de:35:aa:65:e3:5f:fc:
4e:19:04:a9:81:17:c9:96:33:59:3d:d7:7d:32:32:
fd:05:97:ec:f1:ae:c4:14:03:ee:be:3e:92:00:64:
c4:4e:32:bc:08:1a:54:a6:c1:7f:fb:d4:e0:22:b2:
1f:0a:c5:01:8e:fd:6e:5e:5e:11:7e:8c:02:b1:7d:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FB:32:8D:E4:7B:D4:DE:C3:3C:CF:EA:72:5F:B9:10:A2:49:6E:27
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/2vsyjeR71N7DPM_qcl-5EKJJbic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.55.0/24
194.209.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d4:96:3c:77:7b:18:73:59:ab:f2:50:c9:97:40:ca:47:4e:
ee:6e:06:99:d2:cf:fb:6f:1a:9d:23:a8:80:7b:f7:32:0a:94:
58:4d:3b:d4:cf:92:f9:03:75:e7:1e:c2:7f:b1:ad:a4:67:a7:
72:eb:13:be:79:97:ff:a9:10:29:94:67:d3:28:58:ca:9a:77:
e8:3d:3a:be:87:ca:27:eb:8c:fe:af:38:c4:bc:5f:c8:49:70:
02:63:8f:ed:10:77:03:29:da:8c:22:33:fd:c7:bf:48:3f:fa:
0b:68:b2:71:d5:9c:ed:fa:7c:ad:78:2e:81:a1:e3:07:ee:53:
92:ae:b9:25:62:66:be:71:30:c2:3b:2e:a8:5c:6f:25:1f:cf:
e8:6b:5c:d2:38:9b:79:65:e1:14:e2:8f:d2:be:6c:25:5f:d9:
e1:dd:d7:bb:96:98:ea:79:89:05:8b:8a:85:84:9a:20:ac:5c:
af:e4:1c:9f:c5:bb:1c:de:af:ee:45:ab:03:b0:e7:8c:75:1f:
63:dd:d2:f8:a3:4f:dc:f4:fa:80:f3:e0:dd:7a:0b:a9:00:d3:
56:34:fc:ed:d7:93:9a:00:d9:ea:81:d5:09:44:03:4a:28:1d:
d1:74:a2:04:e2:c9:ea:fd:15:7b:d9:93:49:f7:39:e3:a2:70:
9a:49:80:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:45:51 2024 by rpki-client on console-fra.rpki-client.org