Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/qiVeRvbfdTNhBfxX7-inCepafPM.roa
File: qiVeRvbfdTNhBfxX7-inCepafPM.roa (raw, json)
Hash identifier: z2rjhvN3bUbiIctiiUmazITJ9NsxgM9NYzXT3dQKm6I=
Subject key identifier: AA:25:5E:46:F6:DF:75:33:61:05:FC:57:EF:E8:A7:09:EA:5A:7C:F3
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0190E9AE2D7AE6DE3D61038AC6706AA2DD05
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/qiVeRvbfdTNhBfxX7-inCepafPM.roa
Signing time: Thu 25 Jul 2024 11:37:04 +0000
ROA not before: Thu 25 Jul 2024 11:37:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 167.160.28.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:ae:2d:7a:e6:de:3d:61:03:8a:c6:70:6a:a2:dd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 25 11:37:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa255e46f6df75336105fc57efe8a709ea5a7cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:a7:71:3b:f4:2a:21:4c:4d:cf:8b:33:ea:
3a:48:67:05:5b:14:37:70:d3:5a:e0:2d:dc:1f:43:
95:99:ef:fa:f4:f1:5c:73:34:c6:e7:9e:d4:3f:84:
7d:0b:87:68:78:6a:0b:2c:23:2c:01:60:c4:7a:75:
e5:df:03:59:e5:c3:fd:d6:f3:f4:fd:08:ad:7e:cd:
25:d6:3b:b9:04:86:b9:66:be:32:ef:91:14:f4:72:
98:34:a6:5d:fc:f6:12:0f:24:65:19:0a:60:3a:5c:
c0:fe:a4:02:33:ca:eb:a3:b3:8d:a2:dd:00:8a:6f:
ea:43:b5:b6:2f:08:07:f7:0a:7f:bb:f1:3b:9b:a6:
99:40:70:68:2a:bf:fb:c2:9f:fc:70:5b:6f:3e:cd:
6f:22:c3:85:cf:35:92:d2:6e:b8:aa:3b:f8:27:77:
bd:ff:f4:34:7d:62:60:1e:ee:7e:0f:f2:be:f3:4b:
3c:e8:11:10:0f:f1:58:99:bb:cc:e7:bf:c3:74:1e:
24:b4:68:ee:a8:84:65:a8:0b:c9:46:29:0a:96:d5:
5d:33:28:b2:ca:9d:b5:91:f3:96:54:e2:b3:89:38:
ed:54:bb:f3:4d:3a:c7:e9:bf:28:f2:18:ff:d4:88:
3d:5b:b4:62:78:d6:28:5d:62:61:5a:bd:e8:42:a5:
0f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:25:5E:46:F6:DF:75:33:61:05:FC:57:EF:E8:A7:09:EA:5A:7C:F3
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/qiVeRvbfdTNhBfxX7-inCepafPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.28.0/24
198.55.31.0/24
Signature Algorithm: sha256WithRSAEncryption
df:5d:e2:39:f6:4a:1a:d0:fa:d1:1d:c6:9b:6a:7a:d7:dc:ae:
88:cf:db:d5:13:5b:f7:49:db:6e:ab:db:dc:4b:0d:59:a1:73:
76:26:45:4c:26:0a:89:de:9c:81:ae:b2:c5:48:d8:16:0a:94:
3f:95:e4:51:72:2d:12:ba:b6:8c:2b:e4:0c:4b:a0:2c:df:44:
b6:80:ba:2f:b8:ad:ec:74:35:38:78:09:59:9a:ef:fc:32:66:
1b:ea:3c:f8:0e:bb:4a:3c:dd:c4:05:c4:e0:73:19:f2:b6:53:
ef:84:a8:14:99:61:e2:c8:fa:00:2d:17:01:d3:b7:4e:a6:e5:
96:ed:11:83:99:c5:09:c6:cb:51:60:09:eb:c1:4a:85:34:fb:
35:ab:91:dd:67:b6:61:0b:9f:cd:a1:63:fe:ec:f0:58:e2:1b:
72:75:ff:a9:a5:6c:35:d5:69:5d:17:ca:ee:b1:61:90:13:c9:
df:a3:45:71:a0:f9:e2:81:43:ab:bf:7e:e9:e7:07:3f:cb:fa:
07:01:ad:73:5e:8d:e8:fd:b4:84:66:08:98:21:66:e9:56:2d:
31:0f:b4:b3:af:d0:1b:c1:32:3e:91:a2:95:83:cd:f9:44:20:
93:f6:5c:d1:15:51:9b:c6:8b:0a:fa:13:f6:d3:c5:e0:4d:c4:
7e:3a:db:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:42:58 2024 by rpki-client on console-fra.rpki-client.org