Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/qvfhmF5mEYsoGctQhrbJCiGZh4U.roa
File: qvfhmF5mEYsoGctQhrbJCiGZh4U.roa (raw, json)
Hash identifier: O8Q6aB9CiJsm7fy9aACylhu7RDvmS0vI/a06YCM9k58=
Subject key identifier: AA:F7:E1:98:5E:66:11:8B:28:19:CB:50:86:B6:C9:0A:21:99:87:85
Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial: 018CC49231C642B1E0FB8592B9E611289D92
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/qvfhmF5mEYsoGctQhrbJCiGZh4U.roa
Signing time: Mon 01 Jan 2024 10:29:24 +0000
ROA not before: Mon 01 Jan 2024 10:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200520
IP address blocks: 193.17.96.0/21 maxlen: 30
2a03:35c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:31:c6:42:b1:e0:fb:85:92:b9:e6:11:28:9d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Validity
Not Before: Jan 1 10:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aaf7e1985e66118b2819cb5086b6c90a21998785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:5a:55:1c:26:ed:e2:83:92:f3:42:48:d2:
1b:d7:47:9d:14:80:bc:97:0b:d5:43:e0:61:f4:38:
a9:4d:ca:50:db:58:14:59:63:0b:21:c5:a7:7b:d1:
37:5e:6b:7c:38:fe:4b:c3:e6:c6:80:ae:da:cf:84:
bf:09:8a:6e:81:ee:9c:10:fc:98:97:5a:38:6b:81:
dc:09:23:07:2e:75:62:95:5d:aa:42:4c:3c:4b:70:
84:62:fe:60:48:92:a9:9b:c7:b6:f0:f8:4a:50:31:
ec:60:41:09:da:2f:a8:73:24:97:7c:29:4f:36:37:
fd:3b:2d:a4:db:e7:f8:87:8f:6c:26:f3:5f:3c:4c:
cc:9b:8c:41:fe:48:20:e0:03:df:9a:9c:dc:95:df:
ae:2e:59:42:8d:8a:c5:68:d4:ea:eb:1b:70:14:8d:
58:98:14:9e:19:45:c5:2b:bb:5f:05:19:8a:e8:29:
7f:0d:86:c0:a0:b5:3d:b2:46:b5:31:ff:f9:07:4d:
30:8c:85:ac:00:3c:ca:84:a8:82:1c:34:a6:b0:f4:
dc:99:78:ef:b6:9c:f0:04:2a:4d:fc:33:75:5c:80:
ed:21:34:17:86:c3:40:b5:52:65:27:17:a3:d0:a8:
d2:fd:d1:a0:cc:76:dd:9d:78:17:2e:55:eb:d9:b2:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F7:E1:98:5E:66:11:8B:28:19:CB:50:86:B6:C9:0A:21:99:87:85
X509v3 Authority Key Identifier:
keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/qvfhmF5mEYsoGctQhrbJCiGZh4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.96.0/21
IPv6:
2a03:35c0::/32
Signature Algorithm: sha256WithRSAEncryption
29:1d:83:1e:99:1f:c3:a1:3d:7d:cd:61:40:fe:ed:88:65:fe:
35:b8:33:75:8c:be:30:cd:41:c5:29:be:2a:2c:bd:e2:98:57:
6f:ed:9d:0d:ae:e1:da:fd:80:39:03:86:f7:4e:e2:ea:86:5e:
43:60:f1:2a:55:2f:82:85:f9:36:d6:40:e4:83:9c:2b:b4:21:
21:17:b7:b7:dc:ab:eb:5d:ae:90:60:9f:b5:db:7b:74:ce:54:
b1:76:ce:e2:56:81:8f:be:3c:d0:85:bf:c3:16:04:41:ed:7c:
34:c9:91:ac:b7:ba:1f:c2:a4:3b:7f:6d:3c:42:c2:b4:b5:4f:
2b:bd:9a:93:a7:41:3a:b1:ac:29:57:93:0e:84:ee:6e:5b:3b:
94:5e:4c:a7:06:a2:0e:a4:47:c7:9a:84:69:83:f7:e9:39:66:
4c:1b:f9:7e:cf:89:7d:ed:d2:7f:58:67:1f:47:8f:ca:03:f4:
7d:a9:a1:55:9e:07:34:dc:77:eb:6f:cd:14:1f:a0:fa:da:0d:
9b:fc:90:3d:3c:5d:9a:da:51:cb:81:40:6a:48:b3:70:f5:2b:
39:3c:1b:9c:ab:7d:54:f4:94:fb:60:11:b3:8a:0a:11:11:6f:
08:df:0b:e1:8a:7f:60:93:87:1e:5a:de:86:98:f6:64:99:e1:
d7:71:9e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:04:09 2024 by rpki-client on console-fra.rpki-client.org