Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/QolFqAuannDI-xpcpFmcLmWidd4.roa
File: QolFqAuannDI-xpcpFmcLmWidd4.roa (raw, json)
Hash identifier: jJfETHRxX53fHKUVfFLRUUIiYKbD0xS6cyr1vRFy7fs=
Subject key identifier: 42:89:45:A8:0B:9A:9E:70:C8:FB:1A:5C:A4:59:9C:2E:65:A2:75:DE
Certificate issuer: /CN=211b57e26f1c5a004dfbb0fed34736da9088ae3c
Certificate serial: 018CC6B85C62CFF3A25064CFC03BB882013C
Authority key identifier: 21:1B:57:E2:6F:1C:5A:00:4D:FB:B0:FE:D3:47:36:DA:90:88:AE:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRtX4m8cWgBN-7D-00c22pCIrjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/QolFqAuannDI-xpcpFmcLmWidd4.roa
Signing time: Mon 01 Jan 2024 20:30:20 +0000
ROA not before: Mon 01 Jan 2024 20:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210052
IP address blocks: 176.118.178.0/24 maxlen: 24
176.118.179.0/24 maxlen: 24
176.118.176.0/24 maxlen: 24
176.118.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRtX4m8cWgBN-7D-00c22pCIrjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:5c:62:cf:f3:a2:50:64:cf:c0:3b:b8:82:01:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211b57e26f1c5a004dfbb0fed34736da9088ae3c
Validity
Not Before: Jan 1 20:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=428945a80b9a9e70c8fb1a5ca4599c2e65a275de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f7:93:1f:b6:ca:3a:5c:b0:f2:b9:52:e4:9f:
1e:24:92:08:f8:3a:1d:73:e2:b5:ea:17:88:ec:cb:
fc:d0:18:b1:12:81:6f:8c:bd:d8:9c:86:ee:54:5b:
7a:bd:99:e9:20:00:8b:35:ef:fd:14:32:4e:6b:87:
4b:f9:33:b2:bd:33:d8:84:e0:7e:79:19:89:f7:4d:
6b:9d:d7:1c:95:3c:1e:b3:d9:90:10:a9:19:0d:28:
47:05:39:93:ee:d8:70:2f:a5:4e:22:46:3e:36:98:
04:b5:e4:fd:e8:6b:4d:55:bb:91:72:df:15:45:d3:
fd:52:29:f5:4d:2e:69:2e:a6:6e:d8:80:72:b3:74:
36:ce:30:5a:50:eb:82:25:ac:ec:ae:95:40:98:89:
b5:88:0e:e3:f1:d6:6a:fd:e3:8a:c9:a0:8d:b1:eb:
5c:7d:87:46:47:0b:2d:9f:73:f3:42:b7:f0:a3:e6:
43:2c:81:86:21:cc:0e:e1:68:3f:d5:68:e9:96:ca:
c2:bf:ea:1c:6d:c7:eb:be:37:84:82:3a:70:31:33:
07:a5:0e:bf:1d:e9:92:01:32:f0:db:16:9c:14:82:
27:f2:a7:4f:88:cf:37:c5:c7:39:67:c8:c2:dc:97:
35:b3:3f:0e:6d:03:c3:38:21:29:a9:ea:c2:e1:0f:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:89:45:A8:0B:9A:9E:70:C8:FB:1A:5C:A4:59:9C:2E:65:A2:75:DE
X509v3 Authority Key Identifier:
keyid:21:1B:57:E2:6F:1C:5A:00:4D:FB:B0:FE:D3:47:36:DA:90:88:AE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRtX4m8cWgBN-7D-00c22pCIrjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/QolFqAuannDI-xpcpFmcLmWidd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:0e:a0:59:28:b0:e8:3d:8c:b8:18:45:f4:ef:e5:87:16:65:
ef:3d:89:3e:26:51:46:6c:51:bf:f9:c9:0e:48:dd:f1:49:db:
1b:94:47:68:1d:7a:a1:3e:28:22:5d:e3:f1:30:01:62:77:92:
a3:1e:44:99:6f:fc:8f:53:94:82:c9:8f:8b:1d:b1:07:99:03:
4f:55:e7:cf:64:43:ca:8f:cf:ed:7a:4c:20:46:0b:1b:c6:4e:
c6:d0:37:08:1a:58:ce:45:4b:43:ac:9a:07:c5:27:1b:e7:1c:
7d:eb:7a:55:25:13:71:c2:a7:41:43:c4:39:7b:1e:66:de:bf:
69:84:99:8a:c7:62:77:83:37:b1:5b:58:b9:50:3e:38:fc:9c:
8b:fe:d4:82:3d:66:9d:5c:8f:21:30:53:13:15:c4:8a:ce:c9:
a2:f1:8d:dc:0d:e5:03:3d:93:e6:06:dd:c2:e7:ad:0a:c1:20:
3c:55:77:05:db:75:2c:fe:c9:10:af:5c:54:e5:a4:52:d6:72:
a1:91:76:c0:57:3c:dc:f7:77:c7:16:80:4f:2d:eb:98:54:cc:
41:0c:f6:02:a5:2c:80:ca:fc:f2:28:71:c5:02:de:17:7e:ae:
f5:d3:57:4c:28:c9:c7:55:d6:43:5c:80:ce:8d:98:00:b1:81:
b4:22:22:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 22:29:58 2024 by rpki-client on console-ams.rpki-client.org