Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/QhiyUwjtkgLslJbuRq72D6KCG4M.roa
File: QhiyUwjtkgLslJbuRq72D6KCG4M.roa (raw, json)
Hash identifier: 9wwcXyFdrALwOL0kKzvyy+UJ9nw49+cR/FSLV1UPHxw=
Subject key identifier: 42:18:B2:53:08:ED:92:02:EC:94:96:EE:46:AE:F6:0F:A2:82:1B:83
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 018CC49242BFB7190FD904E4AE8EC2A23D31
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/QhiyUwjtkgLslJbuRq72D6KCG4M.roa
Signing time: Mon 01 Jan 2024 10:29:28 +0000
ROA not before: Mon 01 Jan 2024 10:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397243
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:42:bf:b7:19:0f:d9:04:e4:ae:8e:c2:a2:3d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 10:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4218b25308ed9202ec9496ee46aef60fa2821b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:6f:19:79:fd:8a:09:6d:0d:57:78:51:c6:
04:25:e2:89:91:84:12:c4:b0:f5:11:36:1b:4a:0e:
77:de:41:a9:7c:f5:cd:82:86:8a:0b:7c:53:66:e5:
dc:8e:48:84:42:2a:49:42:84:0b:f8:36:c8:ea:48:
cd:5f:45:82:47:89:33:4f:29:79:b6:4d:fa:f2:13:
1a:18:0f:9f:a7:23:77:3b:e7:50:24:3a:7d:3c:62:
6c:6c:5f:1f:b0:e6:ab:a5:66:67:af:0f:fe:5e:1f:
02:3b:a0:93:aa:43:25:d1:5a:8f:18:04:77:7e:9f:
5d:21:0f:09:2a:45:67:a2:3a:7e:00:91:29:e9:e3:
f5:a1:ad:c7:c3:55:2c:ac:cf:bc:05:b4:8d:98:34:
8b:13:f3:af:88:3c:4d:a5:d4:10:5c:2b:d4:00:45:
10:97:b2:43:2c:ed:01:5a:f1:f6:48:4d:9d:a7:cb:
2f:a3:4e:1d:ff:86:79:df:09:d6:91:5c:eb:86:30:
24:11:bf:e2:5e:40:1a:8d:9b:6c:66:20:08:be:bd:
a7:7c:1b:74:47:0b:ed:38:3f:97:f2:9c:e1:cb:42:
4d:17:13:75:a2:d0:f6:2a:a0:64:d9:03:b4:4f:cb:
8e:f1:13:f3:6b:d7:f5:e6:b1:20:c1:b3:54:3c:45:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:18:B2:53:08:ED:92:02:EC:94:96:EE:46:AE:F6:0F:A2:82:1B:83
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/QhiyUwjtkgLslJbuRq72D6KCG4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ca:89:a1:9c:56:e0:42:a6:f2:fd:43:6b:15:95:1f:a0:bf:
0f:d6:78:d5:f2:0d:97:53:76:a1:93:fc:f9:b0:f1:55:a2:f7:
ba:d5:f0:4f:77:50:21:6a:39:b5:3c:ec:06:e0:ce:ae:9a:e0:
f6:8b:2e:2f:08:b8:9f:79:c8:c5:3b:44:5a:e5:80:e8:c6:09:
09:c7:be:87:c5:35:12:ee:ae:3d:c0:1d:c7:cd:19:3b:9c:24:
76:f8:bb:ef:ba:a1:89:38:80:2a:d8:ef:f7:cc:1b:b8:2f:bf:
14:8f:20:f6:95:39:58:73:b4:6a:50:90:0e:c6:09:3e:4d:4c:
4f:99:a5:11:d4:8d:ee:b7:af:59:af:fb:85:1c:33:4f:35:26:
f0:17:51:2b:72:16:f7:00:e2:3a:76:0a:9b:fe:29:68:9f:aa:
8f:2a:9d:f1:57:2c:7f:9e:68:5b:28:c0:79:54:ee:c1:f3:72:
2e:21:13:55:88:b1:40:ac:47:b3:c2:79:47:25:13:fa:76:07:
f0:93:0c:3a:e5:2c:09:f0:da:be:85:11:2e:5c:ee:86:62:69:
dc:6b:8b:24:73:56:4d:62:0b:99:d1:ba:54:6e:1a:5b:c0:95:
5a:fb:49:83:d4:d3:e5:1f:a8:39:ef:5c:bf:a6:de:54:0a:3d:
b1:e2:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:11:54 2024 by rpki-client on console-ams.rpki-client.org