Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/qsKIPbHveiCP8xnSrxIMqZdVk6Q.roa
File: qsKIPbHveiCP8xnSrxIMqZdVk6Q.roa (raw, json)
Hash identifier: tErfnGfNrbtatT/OHnsoFUmZd85cqmf/258GdBmrxUk=
Subject key identifier: AA:C2:88:3D:B1:EF:7A:20:8F:F3:19:D2:AF:12:0C:A9:97:55:93:A4
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 018CC794DC3631C0A4FAFB58BB476274AF6C
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/qsKIPbHveiCP8xnSrxIMqZdVk6Q.roa
Signing time: Tue 02 Jan 2024 00:31:10 +0000
ROA not before: Tue 02 Jan 2024 00:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60602
IP address blocks: 81.19.131.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:dc:36:31:c0:a4:fa:fb:58:bb:47:62:74:af:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 2 00:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aac2883db1ef7a208ff319d2af120ca9975593a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ff:3d:cd:38:f2:e8:fa:d8:d8:95:3c:8c:aa:
be:c2:a7:41:66:f1:cd:66:ae:c2:5b:3f:d1:60:6a:
0d:df:f4:dd:3f:b2:1d:de:b6:93:ef:05:ce:5e:af:
16:56:3f:07:c2:de:7f:f4:9b:5f:8b:a0:1f:31:10:
ee:bb:7e:2e:45:f6:d3:79:06:81:29:6e:0d:96:13:
f8:c0:e6:98:9c:43:e4:b9:e0:2e:c8:ad:0c:aa:86:
64:e3:70:d4:57:55:48:e8:e1:6e:61:f3:22:e8:b9:
34:4a:54:18:17:3b:80:86:eb:b6:19:12:8d:22:a0:
03:42:87:96:8f:c3:59:82:4d:20:ee:d7:c2:ee:4d:
69:3d:d4:20:a0:b9:93:4e:65:6e:28:aa:9d:8d:96:
06:98:32:20:b2:b6:51:f6:7a:92:d2:a0:32:77:7a:
c2:8e:7d:cc:de:94:e8:1f:f5:d8:50:02:0c:2f:9d:
dd:e1:72:a3:cf:ad:51:25:70:85:d7:d8:77:74:ee:
00:d6:9d:a1:f3:a3:fd:2e:25:03:54:6f:77:81:00:
04:b0:a3:63:8b:50:28:bd:6c:16:ae:bc:31:71:e2:
3b:0b:59:3b:10:fe:36:e3:a4:04:25:96:6e:43:4b:
23:d8:fc:03:b7:4e:18:96:5f:d7:b1:6f:2f:21:3f:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C2:88:3D:B1:EF:7A:20:8F:F3:19:D2:AF:12:0C:A9:97:55:93:A4
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/qsKIPbHveiCP8xnSrxIMqZdVk6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.131.0/24
Signature Algorithm: sha256WithRSAEncryption
24:95:32:ad:c0:e9:0e:a8:f8:ae:df:99:01:46:84:ce:e4:80:
92:a7:fe:a8:69:fc:2b:7f:b6:16:de:fa:74:49:20:a9:fe:3f:
fb:5f:8d:8c:09:30:21:f2:e8:88:39:c8:3b:37:f5:2f:cf:ab:
56:e9:6c:f6:88:c0:cf:b2:f9:95:60:e3:48:f0:04:90:4c:65:
85:d5:02:f7:0f:81:c8:65:fe:af:1b:4e:94:7f:8e:92:1b:30:
c4:9c:04:58:c4:dd:26:9a:5f:c7:f3:2b:f9:23:36:53:e8:e0:
78:1f:33:d0:67:07:47:d3:d5:e7:9c:bc:b6:4b:d4:79:aa:5b:
60:e7:cd:20:af:65:09:a1:68:d0:e8:aa:1e:5d:30:c4:7b:ed:
28:bf:9c:e9:e4:92:99:21:98:4e:85:1c:9f:56:c9:41:e4:df:
6a:95:96:a6:be:a7:e7:4f:4c:a9:4c:57:a5:7c:d7:f0:12:9a:
b2:a5:c4:df:dc:34:ec:75:de:b0:6c:41:e6:11:a6:47:e2:36:
44:77:8b:33:0a:dc:3e:c6:67:ff:33:dd:c5:38:71:03:f2:1a:
e6:e4:64:01:4c:9b:b4:48:ff:50:11:f7:89:26:1d:d0:49:e3:
18:59:f0:97:45:12:d5:2d:86:63:48:7a:a3:65:df:91:af:f2:
32:1e:3d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:44:38 2024 by rpki-client on console-ams.rpki-client.org