Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/qeCYqVvs73wZRR9qkN3rEvi-874.roa
File: qeCYqVvs73wZRR9qkN3rEvi-874.roa (raw, json)
Hash identifier: PD/2jkDj5N4zg7S+G5Bg2cmOIkm0KcDOgZNaHnh90MU=
Subject key identifier: A9:E0:98:A9:5B:EC:EF:7C:19:45:1F:6A:90:DD:EB:12:F8:BE:F3:BE
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC72756FA70A0993FBF84380E31FF93E9
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/qeCYqVvs73wZRR9qkN3rEvi-874.roa
Signing time: Mon 01 Jan 2024 22:31:33 +0000
ROA not before: Mon 01 Jan 2024 22:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211557
IP address blocks: 213.238.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:56:fa:70:a0:99:3f:bf:84:38:0e:31:ff:93:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9e098a95becef7c19451f6a90ddeb12f8bef3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:09:ec:c2:fb:f1:63:96:32:53:87:38:77:7e:
60:57:7d:3e:e3:a4:f0:12:d0:87:04:18:a2:11:f1:
71:58:41:1b:71:13:b8:4a:7a:c8:16:a2:c2:c3:85:
46:bd:36:93:09:ee:ff:3b:9b:43:50:da:7b:68:af:
fe:d8:9d:58:29:58:5a:fe:37:65:5e:db:09:8c:0d:
e3:ce:47:c7:6d:85:f0:fc:e8:35:8b:3b:6c:14:fc:
83:59:22:d9:7f:f0:ec:90:f3:18:4f:5c:02:44:eb:
d6:6d:5f:62:41:f5:4e:fe:5c:5d:e9:81:24:0a:ae:
46:78:a9:2a:58:ec:b5:2d:9c:54:ec:1f:f2:b8:ae:
9c:8e:2b:80:c2:9e:59:c7:c7:80:16:56:ec:3c:0b:
81:c0:63:28:7b:ba:8b:6b:7c:cb:2f:bf:da:fb:13:
13:9e:e4:2d:07:ad:b8:32:df:61:01:cc:74:58:43:
2b:b9:0f:a1:9d:f9:44:fb:1c:8e:a8:f5:35:98:09:
d3:03:0e:f1:69:29:4f:0f:0f:45:32:ac:d2:85:ae:
58:e7:68:eb:63:05:04:1e:18:83:33:76:f5:77:fd:
f0:bd:48:38:45:44:b1:d1:f4:85:e3:70:64:27:9d:
73:9b:d4:13:dc:d5:68:ea:37:72:60:03:95:0e:06:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E0:98:A9:5B:EC:EF:7C:19:45:1F:6A:90:DD:EB:12:F8:BE:F3:BE
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/qeCYqVvs73wZRR9qkN3rEvi-874.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.166.0/24
Signature Algorithm: sha256WithRSAEncryption
14:70:96:fd:b9:cf:f5:a0:7d:64:c1:79:b7:d6:c7:76:c7:71:
b0:4a:31:7f:7d:4e:77:0e:0b:7f:96:53:9b:b7:06:5c:51:33:
d9:6f:11:65:8e:af:46:38:82:34:31:7f:95:eb:77:20:ce:fa:
ca:1f:3c:a6:d7:13:ad:48:70:15:e3:26:a7:8c:7c:3c:88:17:
0c:09:fb:d6:9b:bf:3a:ea:a7:53:62:e8:87:5d:d0:d9:fa:0a:
f1:7b:6c:c6:c0:fe:3e:4d:fe:8a:5e:ba:74:a4:df:7c:70:de:
6d:57:a4:22:ad:15:82:a2:be:44:de:8a:cf:1b:16:a6:57:97:
cf:7b:c1:03:0f:77:c6:14:54:1f:40:e8:cb:b8:a1:7d:81:52:
32:fb:78:46:6a:73:c3:d8:9a:8c:73:65:dc:0a:bb:9e:cd:12:
ac:6e:76:9c:a3:f8:79:16:4a:d2:7c:59:43:c6:3b:fc:48:5f:
87:9f:ee:1a:d3:ae:a7:e0:84:c8:6c:97:68:fc:10:f9:a6:5e:
6a:de:28:55:23:03:50:c0:ce:d6:61:77:fe:04:b0:59:63:9c:
81:c1:0b:0f:4d:fe:d3:55:34:80:f7:b8:ec:bb:2f:20:8c:fc:
9a:a5:25:80:d9:81:a9:59:1c:3e:85:e6:60:e0:a1:ef:ab:d2:
9c:f3:f7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:07:53 2024 by rpki-client on console-fra.rpki-client.org