Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/QpupplWbjMYh1JkjVwabuQan_vo.roa
File: QpupplWbjMYh1JkjVwabuQan_vo.roa (raw, json)
Hash identifier: Rxs9UAEkniBEjiE8L4AltF/BWWvlhmV7HI4XkoWsOHA=
Subject key identifier: 42:9B:A9:A6:55:9B:8C:C6:21:D4:99:23:57:06:9B:B9:06:A7:FE:FA
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 018CCA990A40110580EFC8D50EDFF2096DDB
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/QpupplWbjMYh1JkjVwabuQan_vo.roa
Signing time: Tue 02 Jan 2024 14:34:36 +0000
ROA not before: Tue 02 Jan 2024 14:34:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 786
IP address blocks: 140.203.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:0a:40:11:05:80:ef:c8:d5:0e:df:f2:09:6d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Jan 2 14:34:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=429ba9a6559b8cc621d4992357069bb906a7fefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:e3:42:7f:5f:af:b2:c1:e3:f8:1c:f1:1e:
6f:4f:1c:b5:48:a9:3b:5a:6b:7c:f7:6f:ec:40:e3:
c7:52:3f:30:ed:5d:04:c7:51:43:a9:17:83:57:f2:
11:69:91:62:b1:af:a7:28:8a:f9:63:af:37:88:57:
a9:60:9c:59:2a:28:93:e9:57:97:85:65:15:76:5a:
d7:e0:1f:75:4f:6f:30:4a:74:28:17:63:7a:8b:a4:
14:40:4a:79:d3:3a:58:db:90:92:97:a2:39:c3:52:
61:bb:46:65:6d:a8:27:18:46:95:3b:33:24:c9:96:
be:03:13:bf:90:6a:b1:c0:a6:fc:04:84:4d:e1:be:
8c:85:86:71:58:d2:cd:7e:54:61:85:b0:51:f7:ce:
09:de:58:4f:98:e5:aa:89:a7:35:00:07:76:5a:f4:
a9:5a:93:e7:ea:80:2b:c9:27:32:5d:1c:d4:a8:d1:
bb:32:45:be:ab:79:ed:b6:f4:36:47:b3:de:fb:ac:
ec:14:f8:9f:29:76:37:2a:86:57:5d:01:bf:33:a4:
0c:f1:13:48:34:ed:6e:e0:a1:13:cd:f6:c3:17:62:
f9:e7:fa:da:27:a0:37:a4:3a:4c:2e:97:35:a1:cc:
b3:33:de:0b:2d:64:56:00:16:8f:e2:97:81:dc:59:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9B:A9:A6:55:9B:8C:C6:21:D4:99:23:57:06:9B:B9:06:A7:FE:FA
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/QpupplWbjMYh1JkjVwabuQan_vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.203.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:8b:3d:9d:80:5e:9e:7d:52:83:40:43:44:ea:c5:e1:f9:37:
13:6d:52:c5:d9:9f:bf:dd:5f:9f:57:1b:09:2b:3f:28:b0:2f:
90:fe:d2:ad:8b:5e:50:ed:49:89:e7:ee:4c:ae:ef:9c:14:59:
79:09:f1:14:2d:f4:93:4e:13:93:9a:05:bc:e0:3f:5c:a7:68:
f1:a4:28:e1:2e:ad:02:c7:88:86:8e:d7:fe:bc:9a:6e:20:31:
4d:db:e2:13:ca:c3:8a:b1:bb:37:11:6d:72:8b:75:21:8f:84:
9d:15:43:1a:ee:08:8b:5f:4a:35:0a:d5:bf:67:fa:1f:1e:57:
ed:91:ee:e2:0a:fc:50:8c:66:50:8f:49:75:1e:83:3d:ec:d5:
f9:51:6e:b5:08:9d:80:78:07:e5:9a:c2:56:ca:b1:8f:e2:fa:
e7:f3:c2:14:47:0d:2d:63:9e:7c:ca:71:2b:da:f5:23:15:91:
af:1f:24:25:ef:82:54:0d:24:2c:30:49:67:8e:c1:7d:15:e7:
df:2b:6a:e3:18:2a:7d:a2:c1:60:be:be:0a:c1:81:1a:a1:b3:
39:df:da:4c:91:e4:a1:8d:5a:f7:47:5b:83:5e:80:07:30:70:
0f:a4:fb:28:3c:1f:64:20:44:5c:29:6b:2f:fe:e6:1e:8d:78:
25:e7:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:05:17 2024 by rpki-client on console-fra.rpki-client.org