Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/qxc410M2xfbFDJ9yqcb0qd8AeLs.roa
File: qxc410M2xfbFDJ9yqcb0qd8AeLs.roa (raw, json)
Hash identifier: KbMoxJA11g0opH0e40U6fvTt0tSpLxH2i61hzc6alo0=
Subject key identifier: AB:17:38:D7:43:36:C5:F6:C5:0C:9F:72:A9:C6:F4:A9:DF:00:78:BB
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 018CC2DB261B640578366CA7D3EFA5ECFD1E
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/qxc410M2xfbFDJ9yqcb0qd8AeLs.roa
Signing time: Mon 01 Jan 2024 02:29:51 +0000
ROA not before: Mon 01 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209860
IP address blocks: 212.87.242.0/23 maxlen: 23
212.87.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:26:1b:64:05:78:36:6c:a7:d3:ef:a5:ec:fd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Jan 1 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab1738d74336c5f6c50c9f72a9c6f4a9df0078bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:35:63:9d:9e:6c:d2:5f:da:33:95:78:e6:
04:34:82:4c:c0:28:b4:77:77:15:be:4f:57:d1:68:
82:7a:b6:7c:44:3c:ca:81:9e:86:c9:73:e7:21:3b:
f6:aa:2d:71:fe:bc:06:70:20:32:d6:99:ca:5c:e3:
a8:dc:f4:c4:37:45:6c:1d:1e:39:e5:59:b6:c8:d9:
b7:8c:e5:d9:c1:c2:8d:8e:55:d6:cf:06:24:8f:a8:
e0:cc:e1:5f:3e:68:46:84:ee:5e:36:04:ff:74:9d:
f9:1f:83:7c:2d:e2:e2:b0:64:0b:6b:67:f0:a5:6b:
e7:99:ac:8e:ab:ea:b9:aa:9e:4b:6a:be:7b:aa:17:
52:2b:17:dc:89:20:eb:82:53:40:b2:24:fc:48:42:
a9:2e:4c:b8:05:4e:35:bc:7b:ee:59:e0:15:5b:36:
be:fe:7a:72:cd:67:d0:55:a6:59:1a:29:09:86:35:
17:59:e2:e3:80:9a:a7:05:26:85:f8:da:43:36:8b:
12:ff:76:ca:21:6c:79:bb:e5:a7:fb:a8:ce:69:f8:
ea:af:aa:5c:7e:be:00:48:31:52:6f:27:66:58:33:
9f:11:f7:e4:f0:f7:8f:50:77:50:3a:b7:b7:e1:bc:
97:97:d6:2b:cb:b0:b0:0d:ee:73:58:fe:77:34:0a:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:17:38:D7:43:36:C5:F6:C5:0C:9F:72:A9:C6:F4:A9:DF:00:78:BB
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/qxc410M2xfbFDJ9yqcb0qd8AeLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.242.0/23
212.87.249.0/24
Signature Algorithm: sha256WithRSAEncryption
81:23:8b:ee:44:e1:6e:ca:b9:c7:8b:8f:10:e0:26:01:51:40:
c9:b1:45:4c:ed:19:94:67:e3:f4:e8:6b:47:bb:92:e3:f1:b7:
f8:0d:fe:d3:b1:5d:53:ad:c1:92:8d:5b:ff:a3:73:ce:8e:1b:
e9:01:8e:fa:63:27:9f:9a:1d:51:f6:0e:6e:fd:a0:4c:84:1a:
76:35:9a:de:ad:f9:6d:d4:2e:05:d1:56:bf:67:28:e9:f5:db:
bc:42:79:53:46:dd:2e:76:8a:8d:df:06:ca:8a:f7:d6:80:5c:
83:8f:9c:b9:25:1d:8e:c6:8b:6f:26:4f:55:a1:15:95:d8:ba:
b2:41:6e:6b:5e:56:79:3d:bd:47:cc:94:25:92:0b:f6:ed:e6:
bf:9b:a9:c1:f9:d9:ba:e3:ef:50:73:e0:a0:2c:19:37:8c:90:
e0:da:00:1b:69:a0:d2:b7:69:91:08:9b:26:20:30:48:6a:e7:
b0:0a:d1:17:1f:8c:c9:ca:5a:83:7e:72:86:4a:4a:82:69:49:
1f:0c:dc:6b:0e:f9:9e:91:3c:e5:a7:a4:f1:47:a4:c6:ac:5e:
4e:7e:ba:9b:44:8d:97:0c:39:c9:42:6d:53:84:98:9e:aa:42:
02:5b:62:ae:7d:d3:9a:a9:d7:ab:41:07:b1:7e:58:e5:e8:58:
27:c6:03:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:31:17 2024 by rpki-client on console-ams.rpki-client.org