Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qfDU4p2h1imWoaWhym9G1APtrSc.roa
File: qfDU4p2h1imWoaWhym9G1APtrSc.roa (raw, json)
Hash identifier: VdF2fGoY/ZsGv5IxlYScSZPWAyX3IiYBUC72ZSNKamw=
Subject key identifier: A9:F0:D4:E2:9D:A1:D6:29:96:A1:A5:A1:CA:6F:46:D4:03:ED:AD:27
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC493342923332384C35FF490179EB22C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qfDU4p2h1imWoaWhym9G1APtrSc.roa
Signing time: Mon 01 Jan 2024 10:30:30 +0000
ROA not before: Mon 01 Jan 2024 10:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9050
IP address blocks: 94.177.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:34:29:23:33:23:84:c3:5f:f4:90:17:9e:b2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9f0d4e29da1d62996a1a5a1ca6f46d403edad27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:27:0a:4d:c5:03:ef:8a:70:73:53:19:d8:
41:83:59:16:58:ef:7a:d1:57:bb:07:f8:ce:ee:a7:
d0:17:34:6e:61:f5:0c:93:87:c0:6c:1d:e2:1e:bd:
f4:b1:1b:d2:38:10:ad:1d:0f:30:56:87:31:07:61:
07:de:33:dd:d5:99:29:43:83:a4:5c:69:33:ce:c6:
60:36:d6:2e:5f:ac:97:bd:71:9b:53:1c:a2:4d:bc:
0b:4d:36:54:36:d3:25:59:c2:8c:b7:af:73:3a:cd:
23:02:63:2b:59:de:67:4f:84:26:75:a2:12:97:4c:
11:f0:7a:3b:c9:42:43:85:46:01:9a:3d:78:90:ec:
93:e4:37:c5:2d:13:d1:21:61:d4:ca:21:85:4b:70:
a3:22:aa:46:31:d1:95:50:68:07:62:31:f0:a7:2d:
cf:ea:70:c1:bb:4f:70:93:95:32:56:4e:f7:af:b7:
ef:68:31:26:4c:82:e5:9e:7e:01:73:ad:89:ac:a7:
93:30:ec:35:31:85:1c:ef:5e:f7:04:27:4e:f9:02:
27:1e:76:3f:64:11:17:19:74:89:28:c5:b9:6d:f4:
49:d7:38:55:27:42:28:16:18:6a:52:ae:39:d0:65:
e2:fd:a7:08:50:5c:49:28:a3:a9:e6:ee:9e:04:a0:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F0:D4:E2:9D:A1:D6:29:96:A1:A5:A1:CA:6F:46:D4:03:ED:AD:27
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qfDU4p2h1imWoaWhym9G1APtrSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.106.0/24
Signature Algorithm: sha256WithRSAEncryption
29:33:dc:3e:53:74:de:7a:74:33:3d:35:63:2d:7e:74:bf:27:
2d:83:80:aa:68:02:36:ef:49:92:36:55:67:45:a3:4b:5b:0d:
4b:78:fb:15:46:c3:36:8c:5c:5b:76:16:92:7e:64:56:2e:18:
36:3c:7c:13:a4:df:34:33:fa:28:94:50:4b:14:dc:57:b7:c5:
46:06:e8:d9:13:c7:f3:59:54:88:d3:b4:b1:1d:90:20:e6:d8:
b8:0f:fd:d1:3f:b7:cc:0a:2d:33:42:b9:22:e9:6c:ff:fb:69:
48:4a:bf:31:99:7a:9b:1c:e7:0b:ea:be:6c:a7:2a:4b:d5:d5:
75:d8:49:ec:af:07:c1:c4:b3:7d:60:87:17:27:ca:a4:09:80:
8d:73:4a:b0:5b:da:61:28:9b:dc:c7:d9:66:a8:a1:97:75:37:
bc:0c:0b:1b:b5:47:f5:6e:7d:f7:d0:09:89:5a:8d:57:ad:13:
99:95:bc:79:47:77:cc:fe:fb:07:e1:5a:8c:56:85:23:7f:d7:
35:8f:f7:ca:d7:c7:47:c9:a6:5a:b1:1b:4e:54:d9:7f:66:a5:
10:44:f4:70:f1:52:cf:67:49:e8:64:28:81:fb:7c:45:e8:a6:
05:19:21:62:9b:86:fe:27:48:cc:72:53:08:8d:50:67:c1:69:
3a:d4:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:33:33 2024 by rpki-client on console-ams.rpki-client.org