Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/QDGrgIEElxAXs_kuiBfMkSBq_DE.roa
File: QDGrgIEElxAXs_kuiBfMkSBq_DE.roa (raw, json)
Hash identifier: BECiyhJGSrzF6EcG5MUlCgfzgamyn4DT0q+Gc4v/C9U=
Subject key identifier: 40:31:AB:80:81:04:97:10:17:B3:F9:2E:88:17:CC:91:20:6A:FC:31
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0190C37F8CDE1FD443F1BF988EAD8C7EA50D
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/QDGrgIEElxAXs_kuiBfMkSBq_DE.roa
Signing time: Thu 18 Jul 2024 01:40:34 +0000
ROA not before: Thu 18 Jul 2024 01:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 37.128.250.0/23 maxlen: 24
176.221.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c3:7f:8c:de:1f:d4:43:f1:bf:98:8e:ad:8c:7e:a5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jul 18 01:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4031ab808104971017b3f92e8817cc91206afc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:89:cc:53:ef:9e:3e:b2:c3:97:91:54:0b:
f8:a4:50:3b:97:b7:10:f8:ba:70:ca:a2:26:c0:4c:
e8:65:ab:bf:42:06:31:3f:ac:0a:4f:82:77:e4:ed:
cd:56:73:80:9f:c7:e1:03:08:63:9e:4d:77:42:d9:
b5:a2:1c:dd:1d:f1:6e:5c:25:8b:17:60:67:ba:68:
6b:fa:90:cf:47:0b:01:8c:ed:03:fc:92:55:07:d7:
e8:fa:52:09:88:b6:b2:a8:e6:2c:a6:9a:f0:b7:9c:
cf:5f:1a:bf:70:85:8e:c3:5d:cb:af:a6:46:7d:bf:
6e:d6:ea:1b:93:9e:44:34:4c:f6:f3:bf:52:79:30:
d7:be:a4:54:9b:0c:f3:c9:99:f7:fa:0c:94:21:b0:
a0:70:0f:e8:b9:c8:87:d1:87:90:8b:e8:7b:93:0a:
37:ce:3c:61:73:ed:34:39:86:85:db:ee:ad:ec:f1:
fe:13:ad:5e:33:3d:f5:64:79:d1:65:c1:37:45:42:
82:a8:4c:0f:32:b6:9f:a8:aa:12:df:cd:8d:b4:18:
78:88:2c:71:ca:78:ba:da:99:2b:5b:4f:ba:89:72:
95:fa:0f:a2:6f:89:32:92:34:43:1f:6b:cd:a2:75:
a2:18:1d:11:75:8c:64:e9:35:86:a8:c2:2a:17:5c:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:31:AB:80:81:04:97:10:17:B3:F9:2E:88:17:CC:91:20:6A:FC:31
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/QDGrgIEElxAXs_kuiBfMkSBq_DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.250.0/23
176.221.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:38:71:ce:51:42:d9:d4:8a:28:73:ac:79:df:f4:e8:91:7e:
1a:82:a1:5f:3e:a6:29:0f:1b:db:c5:ed:90:6c:48:ff:03:98:
a9:f9:1e:21:77:d8:b2:ed:c4:71:ec:03:f7:87:34:c1:e6:d6:
21:69:93:57:0f:aa:ae:2b:4e:32:a2:53:14:aa:a7:f9:5e:0c:
7b:6b:d4:56:32:59:a9:ca:8a:f0:4e:e5:b7:be:7e:df:19:7f:
be:b5:47:7b:17:dd:58:12:1e:c9:30:1d:c8:b8:be:00:a5:1d:
9d:dd:95:92:2f:01:fa:c4:a6:25:fc:40:02:4f:ac:64:d3:cd:
aa:0b:98:72:c5:a0:a6:e8:e4:3f:ea:20:eb:99:48:d4:2d:e0:
42:9c:80:1c:e0:4e:53:51:44:c9:ec:bc:77:7f:a7:c9:fc:2f:
f4:11:66:a8:19:e2:16:bc:f6:2c:fc:63:78:c3:f9:bc:03:03:
b9:cc:ac:a6:9a:ce:9d:45:07:d6:5c:2e:60:cf:8a:a1:f4:e1:
d8:b2:10:d2:6b:79:e7:7c:9d:38:34:38:e4:cf:42:dc:57:8b:
db:3f:73:a3:b0:b6:67:08:c5:c7:86:66:6d:eb:18:d4:22:74:
60:ad:f2:45:20:70:b9:d6:75:3e:e8:8a:d0:98:bc:4d:6a:f0:
07:6d:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:48:14 2024 by rpki-client on console-ams.rpki-client.org