Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QihpQi7VFoZvJhib8dsBOoxKI7s.roa
File: QihpQi7VFoZvJhib8dsBOoxKI7s.roa (raw, json)
Hash identifier: GEYRmgD910dk6bJEJKVaolIgH26NVfTLI86gX9UXWdI=
Subject key identifier: 42:28:69:42:2E:D5:16:86:6F:26:18:9B:F1:DB:01:3A:8C:4A:23:BB
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B73074623C44DE59E85B58DDBE61C4
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QihpQi7VFoZvJhib8dsBOoxKI7s.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15436
IP address blocks: 193.251.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:30:74:62:3c:44:de:59:e8:5b:58:dd:be:61:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=422869422ed516866f26189bf1db013a8c4a23bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d8:75:5e:cc:e2:f0:8c:a3:b9:5b:af:9a:38:
1c:62:46:51:f0:b0:d1:df:7e:3e:7c:30:7c:69:9a:
54:79:36:00:28:dc:fa:c5:55:c6:af:2d:a0:11:cf:
cc:87:36:fb:44:89:e6:e2:f1:b0:67:d4:6e:97:f9:
e4:1f:4c:f4:39:f5:41:f3:6f:8f:c7:51:cb:ed:ae:
a6:fb:65:68:ea:c6:49:1c:eb:d3:d4:d4:b7:03:90:
be:a3:4c:c1:d4:67:f8:9c:03:d1:5a:2a:b8:5b:00:
7d:f1:1b:b0:c8:28:8e:69:f1:b5:e0:a6:48:ce:a0:
61:6e:20:4e:08:98:92:38:4d:39:ea:67:a7:98:1e:
b9:3b:f9:6c:b0:54:b9:4e:d1:a3:f5:a3:1f:bb:5b:
6b:a5:55:dc:e6:25:dd:5f:6e:b4:26:02:5f:85:0d:
7c:60:62:ce:f6:4d:a0:aa:2e:a7:5c:9f:4f:58:93:
a5:25:e2:cd:96:89:e5:8d:1d:39:85:37:7d:ed:13:
47:9d:a8:26:7b:57:36:77:0d:4a:7f:62:ef:af:01:
c2:ce:2f:55:d6:bc:50:9f:cf:84:ff:87:be:5e:fa:
d1:11:32:2a:5e:02:21:c6:c2:d3:68:54:09:46:70:
bf:2d:00:8f:fb:eb:56:b8:bd:0d:d7:37:77:49:c9:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:28:69:42:2E:D5:16:86:6F:26:18:9B:F1:DB:01:3A:8C:4A:23:BB
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QihpQi7VFoZvJhib8dsBOoxKI7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.251.229.0/24
Signature Algorithm: sha256WithRSAEncryption
79:9a:79:ad:31:2e:bd:9a:bd:33:b0:14:95:b1:b6:c7:fe:89:
e0:ce:d7:40:50:b9:72:55:8b:36:f7:16:ea:f0:9b:d1:7e:ef:
df:9d:40:3f:d4:13:61:61:3e:e6:80:52:4b:d6:15:ba:5e:3b:
e3:d6:e1:fb:a5:9f:d7:87:ed:e6:ae:f5:7a:e2:98:84:a6:03:
13:4e:3f:5d:46:b2:13:1b:20:8a:56:5b:c0:63:ea:73:15:86:
3c:61:31:5f:a8:0e:db:57:1e:55:ea:e1:3c:75:b7:ab:e3:cd:
23:5c:81:0d:13:f8:0c:f0:4f:2a:fb:f9:f8:fd:9c:71:64:74:
d3:10:67:35:cf:64:09:cb:b3:eb:ef:02:0c:21:d9:72:cb:54:
15:05:fc:7c:42:29:7d:58:13:45:5a:7b:52:dc:93:fb:47:8c:
db:59:dc:d0:bb:96:d1:8c:84:f2:7d:59:88:96:44:a0:cc:f1:
2e:a1:7e:2e:02:a9:ff:5a:e9:0b:f4:02:01:1f:0a:ff:ef:71:
38:f7:2f:26:95:cf:8b:10:b5:aa:7a:be:7c:d9:68:93:c5:f0:
9d:39:fb:1f:95:0c:dc:d6:c4:4f:61:74:74:9e:b6:08:49:1f:
db:12:9d:17:f8:3d:64:65:41:46:7f:98:61:31:48:02:7c:84:
a8:05:e0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:00:42 2024 by rpki-client on console-fra.rpki-client.org