Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/qq0xftY9MbnVe7YjHsXhRZJU9sA.roa
File: qq0xftY9MbnVe7YjHsXhRZJU9sA.roa (raw, json)
Hash identifier: HXSf/t7IFbcGGepEAWp3926o35SH/63jfEWRR6X51xA=
Subject key identifier: AA:AD:31:7E:D6:3D:31:B9:D5:7B:B6:23:1E:C5:E1:45:92:54:F6:C0
Certificate issuer: /CN=8b27483dc16c318e5afff8322930c817fd192c91
Certificate serial: 018ED2344D3D6220FA6D006E28E0141FD9E7
Authority key identifier: 8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/qq0xftY9MbnVe7YjHsXhRZJU9sA.roa
Signing time: Fri 12 Apr 2024 12:07:06 +0000
ROA not before: Fri 12 Apr 2024 12:07:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49368
IP address blocks: 188.94.32.0/21 maxlen: 21
188.126.32.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d2:34:4d:3d:62:20:fa:6d:00:6e:28:e0:14:1f:d9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b27483dc16c318e5afff8322930c817fd192c91
Validity
Not Before: Apr 12 12:07:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aaad317ed63d31b9d57bb6231ec5e1459254f6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:18:e0:5e:93:dd:e3:08:bc:da:a0:3e:c0:eb:
cf:db:3c:e5:82:f8:56:ff:5e:ec:8f:aa:da:b9:19:
1b:99:f1:fc:84:d2:fe:12:98:e2:36:23:e2:ed:f8:
4b:55:56:8e:38:d8:5e:88:86:f4:85:a2:89:1e:d7:
1d:c5:2c:be:fe:71:b8:d8:4b:92:18:4e:3e:d6:8d:
fe:18:30:33:93:fc:dc:04:0d:95:71:1d:be:c9:f8:
41:2d:82:ff:35:6e:43:e6:ce:7f:a2:fb:b8:ca:2c:
34:7f:5c:21:ea:4d:d4:11:18:65:5c:5b:ae:4c:2f:
eb:b5:35:72:f8:dd:e3:49:dc:83:8c:30:86:c1:b8:
a4:74:95:0c:ba:a7:4e:8a:40:f3:65:e8:0c:df:ff:
37:e1:5a:63:13:7b:64:75:b7:47:63:52:4e:bc:4a:
fd:47:a2:db:e0:06:27:92:e4:3d:aa:cb:b8:c9:9c:
e5:6c:c6:dc:46:e5:61:97:d1:cd:36:72:ae:72:4a:
40:91:3d:e3:48:c2:d7:13:94:26:67:0d:f1:09:ed:
fd:c0:16:6e:10:80:7d:17:99:a4:9c:24:6a:1f:f7:
13:c7:6b:6b:5d:b7:cc:28:87:58:a9:f5:79:9b:84:
5f:87:94:a6:38:73:b4:97:37:9d:4a:8e:65:e3:fe:
bd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AD:31:7E:D6:3D:31:B9:D5:7B:B6:23:1E:C5:E1:45:92:54:F6:C0
X509v3 Authority Key Identifier:
keyid:8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/qq0xftY9MbnVe7YjHsXhRZJU9sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.32.0/21
188.126.32.0/19
Signature Algorithm: sha256WithRSAEncryption
c3:eb:d6:a0:d6:88:f9:4c:c0:c1:23:91:5e:08:4a:57:7b:b7:
e4:4a:29:2a:7e:9f:c2:8b:89:47:ca:21:ed:12:c6:8f:d4:c3:
45:a5:02:24:84:a5:ce:de:73:02:36:b8:d2:97:15:e2:40:86:
d6:61:51:76:4e:87:85:49:a6:3f:77:cb:6b:3e:31:5f:95:e0:
cc:0e:b9:7e:f1:b9:e6:fc:77:44:7f:50:1c:62:69:e9:6d:b2:
65:7c:48:d2:6c:83:91:9d:dd:4b:26:a2:2e:b0:01:d4:5e:7d:
75:18:33:e5:c4:ff:4b:1d:0f:a6:70:68:7d:29:d6:07:17:ff:
ba:2f:28:d7:36:65:e1:39:71:24:eb:5d:22:8e:65:46:8f:dd:
75:31:42:40:83:5a:aa:27:9c:a3:cf:24:87:33:00:7f:55:ad:
db:9c:c7:d6:f6:a7:be:13:52:96:b7:c5:72:65:dc:0c:28:7f:
66:14:d4:75:4e:c9:b2:e9:e7:a4:85:f6:71:67:39:5a:09:a0:
7f:4b:c0:dc:b6:1a:12:67:49:27:44:d7:81:e9:bb:6c:e1:a8:
3e:44:74:fa:93:7d:86:19:f3:6f:2c:59:71:b5:23:73:78:e4:
65:81:6b:77:82:14:ce:90:48:c6:a3:39:c4:43:a4:16:20:be:
0a:10:1b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:48:44 2024 by rpki-client on console-ams.rpki-client.org