Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/r7GtwL33NPcsZrXjfl1V9hRqf7w.roa
File: r7GtwL33NPcsZrXjfl1V9hRqf7w.roa (raw, json)
Hash identifier: L1Lw7EUY5rxGNGLxVH79z36x4UCCS5gXs0EOkx8+uzI=
Subject key identifier: AF:B1:AD:C0:BD:F7:34:F7:2C:66:B5:E3:7E:5D:55:F6:14:6A:7F:BC
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 018CC424A331460ADABA908ECC2B135245C4
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/r7GtwL33NPcsZrXjfl1V9hRqf7w.roa
Signing time: Mon 01 Jan 2024 08:29:44 +0000
ROA not before: Mon 01 Jan 2024 08:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21032
IP address blocks: 193.58.88.0/22 maxlen: 24
2a0c:94c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:a3:31:46:0a:da:ba:90:8e:cc:2b:13:52:45:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Jan 1 08:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afb1adc0bdf734f72c66b5e37e5d55f6146a7fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:3f:7d:ea:09:1a:83:a1:6b:07:7a:d9:9e:
bb:e5:50:39:ec:7f:bc:11:df:3a:21:8d:18:6d:95:
7b:71:c6:17:d3:17:7f:a2:86:84:88:36:bc:7d:5c:
f4:04:65:41:73:20:37:59:14:a3:29:2f:7e:1f:ae:
1d:2a:08:f6:53:9b:35:14:8a:f3:16:11:71:f4:da:
40:a2:e8:dd:fc:ec:e1:b6:39:59:46:f2:c4:43:ce:
70:a5:7c:49:cd:f0:8e:df:c3:ee:69:7f:cc:50:31:
89:94:25:b3:e1:60:06:e6:1f:96:86:ca:e4:98:bd:
29:3b:27:2b:ce:6f:f9:7c:70:c5:c2:24:5a:02:ed:
c9:e6:9e:e8:fd:98:be:99:9f:53:b9:36:5e:59:bb:
04:1a:ca:bb:71:df:e3:f7:cc:1a:4d:b2:4e:c4:82:
4e:3f:cb:27:fa:8e:c3:c5:fb:13:76:bd:05:ff:1f:
77:11:42:d1:2c:6c:3d:cf:e6:6d:4b:0e:c2:37:63:
95:40:f7:11:14:67:ed:fc:22:ed:ef:de:52:3e:bb:
10:51:a4:df:b6:d5:6f:55:af:df:3d:be:ce:18:57:
50:5c:f8:e0:89:09:f2:fa:f7:ce:9a:d5:43:21:14:
ea:a8:a1:67:ea:41:8a:a3:6d:45:c6:4c:13:25:ae:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B1:AD:C0:BD:F7:34:F7:2C:66:B5:E3:7E:5D:55:F6:14:6A:7F:BC
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/r7GtwL33NPcsZrXjfl1V9hRqf7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.88.0/22
IPv6:
2a0c:94c0::/29
Signature Algorithm: sha256WithRSAEncryption
a1:de:eb:b7:da:04:69:4c:75:23:74:d9:2a:e2:02:e9:39:46:
83:a0:7c:de:50:cd:88:6c:00:96:22:ca:22:9d:a0:e0:2c:eb:
fc:81:93:cc:1b:c7:e0:a3:f8:0e:2f:4e:b1:5a:fb:2f:99:c8:
07:1b:27:93:92:a9:85:3e:c8:9e:66:fa:ee:92:c1:ae:62:c8:
5d:d6:93:34:b1:a1:86:52:d8:1c:57:06:3d:ea:1c:d6:93:bc:
31:92:8d:f6:88:89:5a:90:cc:42:f8:62:cd:be:15:73:a3:d5:
d1:fc:91:c0:60:d7:76:f2:29:8e:dc:99:c7:c8:1e:bb:1c:14:
d5:2d:01:6f:c2:11:43:af:59:ac:58:f7:da:9b:4f:37:19:60:
4b:9f:c8:92:68:b7:22:c7:81:44:93:76:5a:0a:ff:f0:bf:b7:
71:fe:96:5e:b5:57:73:51:a6:f4:14:c1:7b:47:49:7b:0d:d7:
de:2f:6d:01:5c:30:f0:2d:de:86:58:b7:03:6a:b0:e9:5a:0e:
d5:bd:de:f8:d8:19:3a:67:99:be:7c:31:a2:f0:35:b6:02:35:
39:c3:0f:20:22:e4:6c:59:52:28:17:41:c7:30:9b:2b:41:8f:
6d:43:90:da:68:bc:ae:7f:fa:b1:4e:79:fb:67:59:da:69:1f:
72:a6:32:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:24:21 2024 by rpki-client on console-fra.rpki-client.org