Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/qsfVMW1iEDSLMY1cwFfYKBK-C9Y.roa
File: qsfVMW1iEDSLMY1cwFfYKBK-C9Y.roa (raw, json)
Hash identifier: UKn5+xaCrEuBwnRhDThghfMKeKZ7V4iNL07fdbTJfDc=
Subject key identifier: AA:C7:D5:31:6D:62:10:34:8B:31:8D:5C:C0:57:D8:28:12:BE:0B:D6
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 01913A958B289B22D9250E27960190355CC4
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/qsfVMW1iEDSLMY1cwFfYKBK-C9Y.roa
Signing time: Sat 10 Aug 2024 04:39:24 +0000
ROA not before: Sat 10 Aug 2024 04:39:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6424
IP address blocks: 82.215.71.0/24 maxlen: 24
185.162.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3a:95:8b:28:9b:22:d9:25:0e:27:96:01:90:35:5c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Aug 10 04:39:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aac7d5316d6210348b318d5cc057d82812be0bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:a5:59:4c:7c:37:2e:7e:d2:2d:7c:55:88:
82:bc:48:20:ff:fa:1e:a0:e8:a1:ea:2e:a2:a6:9a:
39:be:cd:92:6f:b4:9f:01:4a:8a:38:01:fb:85:c5:
ee:c2:87:ba:28:91:4c:20:b8:70:e0:c5:22:c0:be:
5a:94:80:1a:eb:e9:80:bf:6d:74:8b:b6:2b:4e:e0:
72:fa:b8:a8:22:73:e6:27:c3:41:46:cc:b0:59:b7:
c1:05:50:b3:2c:ac:49:b8:f6:08:51:37:1e:12:1d:
1f:c9:20:b3:d5:3f:f8:0f:d4:09:17:db:8f:45:80:
a7:e6:f8:91:63:59:e4:a7:e6:f9:44:28:78:f2:e1:
f7:92:54:5f:e7:5b:0a:42:ce:c2:2d:d7:f0:54:57:
db:74:ed:e0:fe:8b:55:e0:06:dd:53:7e:a4:c7:78:
00:8e:69:9b:c4:dc:ec:a5:69:52:0f:9f:09:c0:30:
3a:d4:59:63:96:65:01:4b:93:54:86:99:c9:c8:73:
da:5d:3e:74:73:1e:da:f5:0c:fe:d7:7c:87:14:2c:
70:aa:4a:da:d4:f7:7f:b1:c4:8d:13:5c:70:a0:2c:
c3:e6:a8:03:b7:5f:22:9d:e2:f9:96:34:2d:34:99:
e0:13:53:0c:9d:c1:41:ec:21:19:eb:94:e9:a3:fc:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C7:D5:31:6D:62:10:34:8B:31:8D:5C:C0:57:D8:28:12:BE:0B:D6
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/qsfVMW1iEDSLMY1cwFfYKBK-C9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.71.0/24
185.162.183.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:0c:ad:7e:14:fa:15:a8:08:5f:6a:b1:7b:04:6b:82:4f:9b:
15:99:71:6c:e3:53:18:df:da:8e:f1:24:1f:0a:2a:fe:5b:55:
01:c3:43:a8:2c:99:80:52:e5:2d:ac:d4:ab:c1:8d:0f:4c:eb:
69:e4:0e:e2:e3:bd:5f:7b:93:eb:a5:8e:c7:6e:3a:c3:1f:15:
d8:63:b1:4b:03:10:c5:18:21:fa:87:5e:99:af:fb:76:e7:5f:
49:1e:58:f6:e7:9c:b0:e0:e0:c9:16:07:49:9f:25:24:1e:88:
89:80:e1:4d:49:06:91:e5:c1:b3:f1:57:ba:75:a3:c8:2c:49:
cd:13:34:e4:47:86:b0:3c:13:70:94:9a:72:33:2b:3c:b8:89:
c4:11:a3:10:f5:4f:3c:50:8d:2e:20:b2:76:b1:1b:ca:dd:82:
2c:c1:aa:3b:d8:c3:26:bc:46:31:46:b2:15:94:f0:8d:b9:65:
fc:3a:ef:89:3f:6c:57:a6:3e:a7:55:7f:2e:af:ee:6d:2f:41:
97:f8:f2:f7:d4:27:9b:19:1a:b7:e8:4a:74:c8:6e:f9:39:c0:
d0:b8:8e:3e:15:d3:ac:05:79:b7:cb:54:4e:45:c0:21:9a:a0:
af:62:95:47:2e:1c:2a:9e:90:47:5d:3a:31:75:4c:bb:db:25:
5b:b2:48:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:50 2024 by rpki-client on console-ams.rpki-client.org