Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/q3gQbSWOx-gMeYTIfu9CoadDYCU.roa
File: q3gQbSWOx-gMeYTIfu9CoadDYCU.roa (raw, json)
Hash identifier: hCvoMUbuUvrPmCb1DS5rQX6hdUjL6ZQcuYy4AmxLYGo=
Subject key identifier: AB:78:10:6D:25:8E:C7:E8:0C:79:84:C8:7E:EF:42:A1:A7:43:60:25
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 018CC492FE87613A7634BB680A1CAD315E86
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/q3gQbSWOx-gMeYTIfu9CoadDYCU.roa
Signing time: Mon 01 Jan 2024 10:30:16 +0000
ROA not before: Mon 01 Jan 2024 10:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 212.127.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:fe:87:61:3a:76:34:bb:68:0a:1c:ad:31:5e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Jan 1 10:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab78106d258ec7e80c7984c87eef42a1a7436025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:be:d4:2a:b0:98:36:fa:4e:a0:c9:a7:02:21:
54:57:66:d8:28:fe:3a:64:25:ed:e8:c5:d4:3e:22:
41:e0:f3:7a:29:07:f2:94:c1:fa:74:c6:a9:b4:c8:
04:01:66:1c:0a:84:f9:7c:7e:8d:d8:ef:12:0c:9f:
c2:fe:66:d6:3f:c1:52:32:18:9c:0d:b4:00:b8:7f:
17:02:73:8e:19:8d:ae:95:88:a9:3b:a2:dd:9e:32:
46:7a:15:3f:33:a9:63:86:44:89:75:bf:20:e2:83:
d0:f4:98:e5:1a:b0:a3:62:de:b4:9f:2c:63:be:eb:
5b:87:47:1d:64:02:0f:47:f1:8f:9c:3a:e1:e0:6c:
5d:97:fb:9e:7b:ca:b5:76:ea:90:60:3d:27:20:fe:
48:06:6c:ab:55:17:ce:b3:8e:b6:8d:f3:b9:36:fa:
93:db:18:8f:13:e2:79:ab:e4:fc:ed:42:76:d9:4e:
42:82:2c:af:2d:fa:98:8b:96:29:21:50:01:bb:32:
96:7d:b8:8c:ab:67:43:a3:5a:3e:6a:4f:de:61:56:
14:46:cd:12:4c:b9:d4:fa:e9:85:46:c9:2e:8a:43:
75:c5:18:d2:1c:03:13:be:a8:d8:42:c2:dc:07:dc:
71:06:90:4a:95:6f:2f:9a:d3:28:1f:00:27:06:44:
2f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:78:10:6D:25:8E:C7:E8:0C:79:84:C8:7E:EF:42:A1:A7:43:60:25
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/q3gQbSWOx-gMeYTIfu9CoadDYCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.127.96.0/19
Signature Algorithm: sha256WithRSAEncryption
44:0c:d9:c3:2c:48:28:42:36:3a:d2:09:cb:01:d7:e2:a2:64:
d5:4b:d8:b2:2e:24:0f:62:ef:6f:d6:08:d1:b4:12:70:4c:db:
22:b3:74:c6:6e:8a:98:1e:32:a6:6c:54:8c:32:65:85:e0:79:
81:7e:1a:3e:bf:ed:91:86:74:a1:7e:75:b2:6c:f1:49:42:65:
67:5e:66:05:22:ad:f1:af:48:c5:21:a8:d1:85:d3:15:0e:3a:
65:7c:ab:f8:ce:5e:1d:f4:4f:d8:ac:e8:46:53:4c:ae:db:2e:
a3:48:09:e2:79:18:69:74:b0:56:90:30:f2:27:d5:ff:df:44:
8c:6b:b5:c7:87:aa:f0:13:c5:60:5d:30:bd:b8:09:f4:80:be:
12:a2:36:44:28:26:02:7d:5c:92:c4:1d:b7:bc:3f:c7:fe:91:
b5:57:cf:b7:98:bd:da:36:67:dd:77:77:be:a4:ad:d8:18:5e:
02:d0:82:39:fa:54:bc:34:2d:e3:e7:1b:45:0f:4b:4f:3b:fc:
ac:3e:10:42:c3:d2:e3:ad:d2:7f:77:03:cd:65:c5:e7:bb:9f:
f9:bf:fe:6a:dd:c3:52:3a:fe:26:70:d5:55:7c:96:0c:80:84:
81:7a:88:58:bf:90:dc:3b:89:93:ec:d2:81:ff:25:a3:69:a9:
a7:fc:03:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:20 2024 by rpki-client on console-fra.rpki-client.org