Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/qtbRqc_GfqudrqQeORiTylCX8lc.roa
File: qtbRqc_GfqudrqQeORiTylCX8lc.roa (raw, json)
Hash identifier: eIX7vHWs2TiJ6dBUKQ9hUrFynOfOfW9uGq+gDO7jQec=
Subject key identifier: AA:D6:D1:A9:CF:C6:7E:AB:9D:AE:A4:1E:39:18:93:CA:50:97:F2:57
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01926B8689349DB837E6958A5AEE2C6D3D91
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/qtbRqc_GfqudrqQeORiTylCX8lc.roa
Signing time: Tue 08 Oct 2024 09:47:11 +0000
ROA not before: Tue 08 Oct 2024 09:47:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 188.66.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:86:89:34:9d:b8:37:e6:95:8a:5a:ee:2c:6d:3d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Oct 8 09:47:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aad6d1a9cfc67eab9daea41e391893ca5097f257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:2c:a3:35:51:e3:75:79:b1:0a:d4:ed:29:
a3:16:aa:f6:56:3b:b7:62:92:4c:27:c5:22:15:ae:
ba:25:ce:7b:cd:d4:40:e8:94:32:da:eb:ea:85:cd:
85:09:b9:e4:54:7a:6a:c8:9e:7f:18:98:17:6a:0c:
8d:c1:ba:37:e3:5b:77:ee:86:24:be:3d:e4:b3:0a:
99:b0:6c:d3:7d:60:41:1d:d2:af:ab:0a:d3:6e:f0:
c2:8b:99:77:65:37:97:fc:da:38:26:a2:6b:56:9b:
be:0e:78:9f:43:d8:93:ea:bf:77:05:0f:15:ae:61:
a3:e0:89:7e:8a:e5:6f:6d:c4:5b:71:29:a7:06:44:
97:9f:58:ed:f5:0f:ae:82:1b:7f:f4:b9:f7:97:27:
70:eb:81:d2:18:da:0f:93:9e:a7:03:4c:5b:76:cc:
ab:4d:e3:b0:b3:b1:46:8c:4f:05:b5:b2:33:ce:d2:
ee:c3:c2:9a:92:8c:e9:51:c6:7c:55:e3:f7:62:82:
37:aa:6b:17:63:49:a9:2a:1e:db:d0:23:da:21:03:
61:41:3f:e9:7f:38:cf:64:58:fd:0e:aa:ce:8c:c3:
5e:df:9f:66:a4:3c:e0:d1:e0:aa:37:8c:63:61:92:
b9:a1:4b:18:7e:28:a8:25:44:a0:37:d4:4b:e8:41:
63:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D6:D1:A9:CF:C6:7E:AB:9D:AE:A4:1E:39:18:93:CA:50:97:F2:57
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/qtbRqc_GfqudrqQeORiTylCX8lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:89:ed:08:2d:44:a6:37:e0:aa:1d:c0:27:89:42:37:a1:af:
2f:61:37:e5:90:a9:89:1b:ac:34:98:8b:9b:5f:6e:f7:23:27:
6f:bf:d8:cd:54:16:b0:31:79:90:9a:9c:0d:bb:c5:fd:f1:fe:
4d:3f:91:3a:9c:dc:e9:bc:77:70:04:f7:e5:1e:34:1c:de:f5:
11:80:a0:c9:ad:af:78:d2:b9:bf:98:7a:c0:fa:a8:10:1a:1f:
70:d6:d9:6c:4a:d6:5c:ad:05:2b:76:65:a9:28:ee:da:48:97:
66:83:09:d7:78:38:ba:d1:18:1a:df:1a:5e:a3:12:47:f1:fc:
7d:63:99:13:0b:7d:d4:b4:d5:7b:1b:b4:62:5a:5c:ee:e4:40:
47:24:28:b1:d3:2a:b3:52:63:e5:66:54:ae:d9:64:c8:27:c7:
9d:dc:c2:dc:2f:d9:04:2a:53:5f:5f:da:1d:98:d8:5a:ea:de:
ac:d4:3c:c6:26:0a:bc:c7:5e:38:64:69:9f:3c:80:d9:b1:4d:
00:32:f8:4f:ff:e6:59:a7:5e:ae:ab:b6:a4:26:78:b0:e5:55:
5e:fe:f9:40:57:93:27:bf:45:6f:fe:1d:d0:a5:d3:a2:e6:2a:
f4:2b:e7:c0:b8:61:05:b8:61:19:17:5d:46:6f:45:95:a8:62:
c2:45:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:22:58 2024 by rpki-client on console-ams.rpki-client.org