Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/QvcAa__rqiZtX9AwsXEv5UYiCeI.roa
File: QvcAa__rqiZtX9AwsXEv5UYiCeI.roa (raw, json)
Hash identifier: o3WUNQ31rmLoxE/mUKgX/Nv+l3fh61cGYUTA4il0onE=
Subject key identifier: 42:F7:00:6B:FF:EB:AA:26:6D:5F:D0:30:B1:71:2F:E5:46:22:09:E2
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 018CC3B6D3670C072DC0F97C8078AA025F2C
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/QvcAa__rqiZtX9AwsXEv5UYiCeI.roa
Signing time: Mon 01 Jan 2024 06:29:47 +0000
ROA not before: Mon 01 Jan 2024 06:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31141
IP address blocks: 62.192.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d3:67:0c:07:2d:c0:f9:7c:80:78:aa:02:5f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 1 06:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42f7006bffebaa266d5fd030b1712fe5462209e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:e7:f5:6a:4b:ba:64:18:64:22:2e:66:aa:
d8:4d:8d:04:99:87:02:d5:57:6c:94:05:20:84:f8:
e5:45:a3:f1:fd:f8:8d:27:c6:b0:8d:98:5f:ae:3b:
76:a4:f9:ea:c8:5b:37:92:80:e2:91:d8:f3:cd:73:
a7:06:c4:80:a9:6a:41:cf:46:b6:21:80:75:7a:41:
76:19:13:f8:14:e9:ad:f7:29:df:5d:06:3d:2d:85:
b2:38:4e:79:ad:72:fa:69:b1:28:16:ad:10:c6:25:
26:07:2a:b2:cb:68:e2:f9:d9:0b:5a:57:b6:c8:8e:
fd:4b:e3:5c:53:f0:99:8c:5c:8f:7f:00:ef:4b:c1:
da:e1:f3:70:9b:c5:1b:da:a2:20:df:36:97:73:3b:
83:05:f0:75:2d:88:6d:6a:8a:00:f8:b4:64:95:27:
97:3b:3c:55:39:77:48:d7:50:cb:58:39:82:1a:a4:
1c:58:c7:b5:79:38:91:a6:ea:0a:32:d8:c1:84:b7:
87:b5:a5:58:6b:3f:35:9d:05:d1:8e:6e:06:ff:a0:
95:8d:7e:80:f9:9e:29:4d:8a:90:f8:9e:32:c0:4e:
ae:1a:0b:3e:85:b9:59:07:a3:c6:cb:4e:da:24:29:
ca:3f:8a:ac:a8:55:48:4c:6e:da:8f:f0:39:8c:1f:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F7:00:6B:FF:EB:AA:26:6D:5F:D0:30:B1:71:2F:E5:46:22:09:E2
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/QvcAa__rqiZtX9AwsXEv5UYiCeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.17.0/24
Signature Algorithm: sha256WithRSAEncryption
86:fb:43:b5:76:c6:24:f2:70:c0:37:52:d4:02:46:8e:d0:7c:
a9:ef:e9:ca:ab:a8:c0:69:3a:34:02:b9:be:14:7f:c5:b5:5e:
d4:16:ee:8d:5b:6f:e1:08:49:05:60:68:7a:ee:ce:8d:2b:a7:
70:16:71:4b:b0:59:50:7b:0c:df:53:60:d9:21:3f:07:2b:b3:
2a:de:70:87:19:64:fe:a1:1d:c8:16:5d:7f:34:c4:40:f7:31:
35:ac:df:f9:12:9d:b6:37:3e:e5:fc:42:91:43:81:cf:58:14:
4f:68:47:9a:94:30:93:4a:16:e8:4c:e2:6f:8c:fb:6b:2e:a8:
ad:8c:96:83:47:2d:46:16:40:e4:4d:88:27:13:90:6d:b3:da:
0b:c5:29:03:24:22:bb:66:67:bd:dc:73:3e:24:a0:2d:f1:25:
b7:74:04:aa:08:5b:0f:7f:29:ec:15:62:b4:93:f1:b5:b1:ae:
3e:a0:80:a8:4a:5d:27:64:2c:5c:86:b5:d0:57:9f:16:be:82:
c0:a8:cd:c0:62:13:4f:c1:b3:09:44:d8:80:1c:7c:89:c6:55:
7f:8b:41:6e:29:ad:7c:7e:62:7a:c2:77:da:85:be:27:e9:9f:
06:3d:aa:e0:00:51:35:d9:65:7a:a2:62:d7:db:b3:6f:ec:f0:
d8:ed:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:18:30 2024 by rpki-client on console-ams.rpki-client.org