Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/qtRGc0szunNYzfqSEe5aey0QvLA.roa
File: qtRGc0szunNYzfqSEe5aey0QvLA.roa (raw, json)
Hash identifier: TiusRc04aUav59i6fHZg6aYNGo/pBvKxFfgtw/WC1IU=
Subject key identifier: AA:D4:46:73:4B:33:BA:73:58:CD:FA:92:11:EE:5A:7B:2D:10:BC:B0
Certificate issuer: /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Certificate serial: 018CC3B72A5F2CD888B70F87E1E8C84C0AE9
Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/qtRGc0szunNYzfqSEe5aey0QvLA.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209234
IP address blocks: 2.56.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Dec 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2a:5f:2c:d8:88:b7:0f:87:e1:e8:c8:4c:0a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aad446734b33ba7358cdfa9211ee5a7b2d10bcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:11:c8:96:21:18:84:f9:d5:39:48:64:e1:
75:4e:b5:5d:3b:ac:ea:6c:d1:88:f7:11:44:70:56:
d9:60:cc:ac:6d:9f:86:c4:09:3d:6d:23:72:22:84:
60:cb:11:fd:56:a8:56:a2:43:7c:58:36:be:ff:99:
a1:64:e6:56:ac:f7:90:62:65:46:02:a3:0f:dd:e5:
86:d0:a1:3d:af:66:79:6f:db:b9:b5:5c:00:5d:8d:
d2:ed:0e:47:c0:aa:8f:d9:ff:bb:a9:e6:59:f0:50:
2d:bf:eb:44:f9:88:20:f9:11:dc:10:7a:e9:45:d8:
2c:60:dc:e0:d7:7c:d3:41:90:01:d0:17:9e:c6:09:
b0:43:a2:89:05:a6:5d:56:ed:31:24:9e:2f:8a:d8:
32:5b:e7:3b:cb:db:57:b0:c1:59:60:63:3e:97:76:
cd:9f:85:0f:0c:99:57:9f:b3:31:52:d5:b2:a9:80:
8d:4d:8a:17:5d:35:3b:d2:37:5b:2f:36:7d:72:f6:
10:14:7a:0c:aa:ee:73:76:c6:1f:cc:13:01:4d:58:
4c:e4:87:bf:70:b7:c6:aa:c2:8c:90:c3:2e:03:6b:
ea:ba:c5:12:1c:0b:8d:95:9c:f2:70:31:0f:44:54:
e3:35:63:26:ce:dc:da:44:8c:20:00:50:41:c3:88:
99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D4:46:73:4B:33:BA:73:58:CD:FA:92:11:EE:5A:7B:2D:10:BC:B0
X509v3 Authority Key Identifier:
keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/qtRGc0szunNYzfqSEe5aey0QvLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.92.0/22
Signature Algorithm: sha256WithRSAEncryption
13:2b:6d:54:ef:d8:ff:94:9e:e8:ed:d3:e1:15:29:6b:1e:20:
ad:4a:e6:5f:aa:a0:4d:25:f6:6f:47:d1:15:8d:bd:89:9c:3c:
b7:8d:f7:a3:f3:31:b8:5d:40:8c:01:e2:7e:fc:97:04:28:bd:
4a:1b:9d:0f:30:8a:93:52:86:df:f6:63:92:64:b3:45:67:80:
f1:e8:01:69:ef:9e:c5:ed:cb:dc:bf:17:ee:f8:a0:74:37:ec:
97:81:54:44:dd:66:55:93:ff:79:be:64:5d:07:2b:23:ef:af:
31:23:21:71:60:72:94:91:14:46:9a:6e:f9:50:6c:68:ab:68:
74:22:fa:50:db:6d:19:f4:61:aa:00:29:bb:49:e5:e7:4d:61:
c5:53:98:f8:14:c3:83:61:6c:bc:8e:ca:f3:6e:ba:99:8e:d7:
66:d9:11:94:37:71:3a:ad:f0:b7:2c:db:6a:6b:10:ec:5f:61:
72:ce:8a:4e:07:2b:3e:23:22:2a:8f:10:35:4d:42:bc:c9:6d:
7f:e5:30:cf:43:c9:9c:73:34:ee:b7:f0:7e:ab:f7:d7:4b:2f:
61:7f:2d:62:00:f0:71:5d:03:d9:66:8e:ed:be:ac:0f:4f:c4:
dc:90:37:1b:1d:5f:9f:7e:61:d3:29:60:40:4e:94:53:48:10:
13:a7:05:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 08:43:27 2024 by rpki-client on console-fra.rpki-client.org