Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/qrYh07CXCZGn5k4tIQpxDYJ-BWw.roa
File: qrYh07CXCZGn5k4tIQpxDYJ-BWw.roa (raw, json)
Hash identifier: 1J0hkbESrGUZiOz1GuZ8O2r+GMtwtwptTiCJhtxisqU=
Subject key identifier: AA:B6:21:D3:B0:97:09:91:A7:E6:4E:2D:21:0A:71:0D:82:7E:05:6C
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 018F954EDCC31F3641E2A6D520FA56BD9824
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/qrYh07CXCZGn5k4tIQpxDYJ-BWw.roa
Signing time: Mon 20 May 2024 09:22:04 +0000
ROA not before: Mon 20 May 2024 09:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 185.193.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:4e:dc:c3:1f:36:41:e2:a6:d5:20:fa:56:bd:98:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: May 20 09:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aab621d3b0970991a7e64e2d210a710d827e056c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:61:a4:09:a8:c6:8e:25:a4:9e:57:65:44:
a5:b9:70:13:0f:b6:a1:13:6e:a1:e0:fb:93:ff:59:
d5:24:59:98:e0:72:9e:ba:e8:2f:87:c7:9c:7d:60:
25:25:0e:ac:cc:04:23:72:05:79:b3:7a:10:48:c5:
33:11:ff:19:68:0e:f0:cf:12:5a:cf:99:27:e2:24:
7b:f6:8d:38:51:12:95:5a:2e:6f:df:6a:61:1f:ad:
1c:80:c5:74:56:47:a5:eb:ae:94:56:14:73:6e:53:
c0:a4:a9:d8:5d:91:7a:1d:5e:a2:03:6a:87:c0:07:
bf:6a:41:ac:88:9b:ff:b2:b0:60:fe:7f:93:6c:84:
ae:ed:07:d3:94:27:e8:5c:9e:9a:f4:c3:8c:7a:3d:
ff:54:52:73:d8:e5:a7:14:93:3e:a9:00:08:11:38:
a3:ad:04:cb:a4:d5:5b:54:ea:9e:35:e4:8a:78:47:
6f:a5:b1:60:6d:c5:b3:a3:cc:3d:cd:21:b6:fe:ec:
61:de:9b:f6:f5:b0:99:76:3f:bc:bf:46:34:85:b2:
9e:ff:30:38:22:28:c8:4b:2c:91:52:da:68:27:59:
f9:44:b9:ca:79:b4:b8:8d:06:d4:63:e9:ff:37:0a:
bb:3d:76:88:c7:fb:a2:21:cb:c4:a1:86:b4:6f:ea:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B6:21:D3:B0:97:09:91:A7:E6:4E:2D:21:0A:71:0D:82:7E:05:6C
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/qrYh07CXCZGn5k4tIQpxDYJ-BWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.167.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a9:3d:e4:ab:7a:73:69:e2:77:58:0e:d2:8c:42:0d:28:f2:
a7:fd:01:85:50:7b:a4:66:42:20:8f:55:d3:0a:35:0a:a4:d2:
6b:fc:7f:54:ee:50:32:13:59:40:83:c0:8e:b3:69:7d:69:0d:
23:c5:ee:a1:5d:ae:5d:a0:bc:c4:36:48:c4:e9:08:9f:2f:f3:
9e:fd:41:63:86:cb:a4:f8:b4:1f:10:bb:8c:1c:62:f5:45:9c:
1e:d6:d9:19:8c:df:85:9b:f9:38:ff:0c:b9:13:91:35:80:cf:
de:47:e9:d1:92:97:7c:cc:b7:6b:59:e5:62:e4:04:b2:da:c5:
d5:ff:2a:33:61:da:63:ab:de:38:85:d0:e4:d0:ea:b6:6c:a2:
71:a6:cf:c5:69:15:48:6c:8f:f5:6a:7a:28:83:27:b4:75:f6:
3e:6f:47:06:c6:f8:6e:ed:a1:3a:fe:73:48:24:64:fe:a8:cf:
65:05:42:e2:bd:13:8b:9b:9c:49:99:75:75:de:ca:ad:7f:80:
b2:b1:bf:6a:ad:77:c7:8a:2d:38:65:d3:68:3e:86:75:1a:a2:
89:fb:88:44:f0:c9:2e:d5:39:c6:2a:ed:3b:73:1f:42:d8:27:
6b:60:b8:33:57:43:ac:ee:03:ea:d8:4a:e1:2a:c7:e3:2c:bd:
b9:62:88:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:40:57 2024 by rpki-client on console-fra.rpki-client.org