Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/qlbaeelQzZSLPioECTdtAVzRvUs.roa
File: qlbaeelQzZSLPioECTdtAVzRvUs.roa (raw, json)
Hash identifier: 1QWsZnZPtpnqDBC1X4PGhSUN5IceaQpeyBz53mSLIkE=
Subject key identifier: AA:56:DA:79:E9:50:CD:94:8B:3E:2A:04:09:37:6D:01:5C:D1:BD:4B
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 018CC8DCF6F78ED3D7A6C5C01E6FA044BB0E
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/qlbaeelQzZSLPioECTdtAVzRvUs.roa
Signing time: Tue 02 Jan 2024 06:29:33 +0000
ROA not before: Tue 02 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207442
IP address blocks: 45.143.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f6:f7:8e:d3:d7:a6:c5:c0:1e:6f:a0:44:bb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jan 2 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa56da79e950cd948b3e2a0409376d015cd1bd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:97:00:ad:a3:60:fe:af:5f:33:d7:78:0a:
7b:e0:6b:16:65:7c:c0:9d:10:6c:4a:96:72:74:dd:
43:da:d4:1d:c2:54:d5:fc:ed:60:3d:25:d0:c8:87:
4f:13:0a:93:2a:e3:2d:4d:e8:9c:c6:fa:ac:82:8a:
ed:03:f1:47:54:43:bc:a9:bb:36:93:3c:a9:cb:75:
0c:a4:f4:c9:7f:e7:67:c5:e1:9b:30:5f:ac:8e:b7:
b1:1a:fc:79:42:42:6b:91:c3:b7:6f:2b:ed:fd:41:
ce:ad:91:ae:c9:de:92:9e:c5:a4:a9:3d:a1:7a:45:
1c:b0:74:74:33:df:ee:52:bc:14:7c:8e:98:f7:04:
c0:3b:7e:bc:56:18:91:52:ba:66:83:1f:58:22:84:
14:d3:95:fd:66:4e:05:51:81:a8:7e:8a:ff:d3:07:
67:d3:c0:55:19:8f:a6:e4:dc:4a:d5:97:21:6c:8d:
8b:61:98:70:d5:11:6a:90:a7:57:fa:7f:dc:03:f7:
31:90:66:a2:56:c9:7c:92:74:9f:26:d6:1f:84:5b:
c5:3e:2c:53:d3:45:75:c3:e2:f4:83:51:9b:6c:bf:
0b:49:5b:22:04:cb:49:ee:d3:1d:27:62:0c:f2:df:
75:c3:77:31:e4:1e:3a:7a:49:2f:d1:36:f7:ce:8e:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:DA:79:E9:50:CD:94:8B:3E:2A:04:09:37:6D:01:5C:D1:BD:4B
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/qlbaeelQzZSLPioECTdtAVzRvUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.30.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b2:b9:0e:c0:d0:17:39:de:e0:79:a7:6b:b8:0c:31:96:f9:
48:da:c1:86:8a:d9:27:9b:db:fc:e0:ba:b9:99:0b:c5:c3:a8:
5b:08:b0:bf:b2:2a:54:f3:af:bc:32:d7:b8:60:cc:20:e9:ae:
90:47:5e:7e:a8:3a:ca:1b:c0:47:0d:8f:11:4a:6c:2d:9b:b7:
6a:f5:61:de:6e:16:24:e1:7c:f4:ea:bb:70:b2:14:5e:19:35:
d4:2b:ae:6d:df:eb:3c:4a:15:c4:0f:ed:03:77:12:06:e1:13:
7e:c5:ce:37:36:b3:cd:37:66:da:09:5a:88:81:cf:ea:34:ac:
15:d7:54:4c:57:16:b7:a9:89:14:be:9c:fa:79:2f:b4:eb:dc:
7e:d9:0b:a7:d7:48:5b:05:85:d5:3f:48:05:ea:26:b2:42:a3:
cd:d8:a3:b7:04:32:b9:22:2c:49:f3:8e:01:3f:c5:b6:a8:8a:
fb:74:93:6c:38:8a:b0:24:9e:07:36:81:ac:f0:77:43:70:78:
03:f7:73:b3:f5:4c:2c:24:7a:6a:bf:8b:89:74:2a:e0:be:54:
ea:ce:8e:50:2a:ba:35:c6:13:21:9c:da:39:ca:54:06:46:c1:
32:4b:5b:af:62:e4:19:b2:17:a6:62:ea:21:f3:f1:e7:ae:2e:
f1:bb:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:55 2024 by rpki-client on console-fra.rpki-client.org