Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/QM8Qlh_hSOmrhPQdCNt7iutvIDc.roa
File: QM8Qlh_hSOmrhPQdCNt7iutvIDc.roa (raw, json)
Hash identifier: 7g6YPIXr7LB4TaCE9aOmNOHDaX6TVSBRmBgOJ1WEYlk=
Subject key identifier: 40:CF:10:96:1F:E1:48:E9:AB:84:F4:1D:08:DB:7B:8A:EB:6F:20:37
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018CC794526D25043393400CB5A433892F52
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/QM8Qlh_hSOmrhPQdCNt7iutvIDc.roa
Signing time: Tue 02 Jan 2024 00:30:35 +0000
ROA not before: Tue 02 Jan 2024 00:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48359
IP address blocks: 2.189.175.0/24 maxlen: 24
2.189.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:52:6d:25:04:33:93:40:0c:b5:a4:33:89:2f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 00:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40cf10961fe148e9ab84f41d08db7b8aeb6f2037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:0e:dc:66:24:07:55:46:6f:63:ab:13:57:
54:2d:59:96:4c:8e:b8:bc:04:63:a1:a1:16:15:2c:
d9:66:06:4f:2f:0f:02:dd:b1:3a:bd:45:be:ff:7b:
c0:15:e5:0c:2e:53:f8:77:5b:7a:e7:4c:81:44:df:
fd:b2:72:38:09:28:12:00:d8:d9:9a:e3:84:41:bf:
19:7c:28:e3:79:b9:e7:ff:58:d1:86:c6:af:35:4b:
b8:33:ce:da:71:d6:ce:b3:21:b2:3b:d5:7c:0b:25:
ce:90:ca:9a:5f:8c:79:18:b7:6b:66:5c:33:2c:ae:
0d:9d:a6:0a:85:71:8f:4d:b6:7d:d2:39:e2:e8:8b:
ae:95:18:81:80:2c:bb:ea:ec:32:b0:80:01:f0:e8:
ac:5a:50:04:87:e0:6b:d5:a3:9f:cc:0b:38:4b:cc:
d0:99:f9:31:fa:4b:93:c0:d3:34:7e:bb:dd:77:32:
43:3f:9f:88:f3:c8:69:1c:0e:c4:4f:7c:56:b3:b8:
36:50:d5:02:36:41:78:4e:f1:0d:4d:7b:f9:36:ba:
fc:f5:fc:64:f2:02:2b:7d:f2:b5:e5:b2:02:96:c5:
58:49:f7:ce:cc:78:09:46:96:b9:8d:ea:d8:1f:db:
c5:48:95:3e:ac:cf:49:65:cb:68:23:40:24:b7:a8:
26:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CF:10:96:1F:E1:48:E9:AB:84:F4:1D:08:DB:7B:8A:EB:6F:20:37
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/QM8Qlh_hSOmrhPQdCNt7iutvIDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.189.88.0/22
2.189.175.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c8:a9:0e:a6:84:de:f0:b9:a8:ec:32:e4:7d:67:53:2a:ed:
67:62:58:00:a4:fa:f7:54:a2:c9:7e:bb:c0:4b:71:b6:ae:d8:
63:e7:8d:91:e3:16:5a:71:11:0a:e4:80:12:3a:22:fa:6f:9a:
04:9d:76:0c:fe:66:5f:08:64:d5:a2:82:0a:90:fc:00:b2:d4:
e8:5c:5e:0c:1b:b2:7c:75:56:de:00:3f:cf:c6:aa:99:f7:f6:
4e:3d:6d:b4:f0:f6:40:e1:57:1e:f2:e0:dc:9a:6b:60:63:a6:
a0:f5:d4:af:b4:bb:db:db:d8:a1:4a:22:c1:67:52:07:7b:9f:
f0:df:ec:42:c0:0e:f3:f2:9e:7e:c6:13:1d:e2:92:25:b7:7e:
a9:6c:2b:3c:4b:c8:00:33:df:dc:25:ad:33:59:b9:41:22:77:
d8:b4:f0:14:81:e8:79:70:a4:7a:83:95:96:7c:bd:94:dd:d4:
37:76:f7:d4:38:67:47:85:ff:56:fa:39:c4:88:1d:2e:d1:3e:
12:b9:7e:26:e8:6f:bc:fb:65:0e:8a:01:53:ff:d2:97:81:1d:
30:e7:7f:d9:df:d3:3d:f3:61:e9:e2:82:4a:66:10:25:e9:64:
23:93:80:2a:c8:14:8b:5d:84:6c:ea:b9:88:29:16:a0:0b:0c:
ec:ae:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 18:30:42 2024 by rpki-client on console-ams.rpki-client.org