Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/qR7AVrCbsw9nhMlFwJzvWnG4Idw.roa
File: qR7AVrCbsw9nhMlFwJzvWnG4Idw.roa (raw, json)
Hash identifier: anQusnkb2mwqJPiSQF0KBkZVsmsIv8TKYw80ekLhsAc=
Subject key identifier: A9:1E:C0:56:B0:9B:B3:0F:67:84:C9:45:C0:9C:EF:5A:71:B8:21:DC
Certificate issuer: /CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Certificate serial: 018CCA29C9A415A64670FC38AF23AC4195D9
Authority key identifier: 1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/qR7AVrCbsw9nhMlFwJzvWnG4Idw.roa
Signing time: Tue 02 Jan 2024 12:33:05 +0000
ROA not before: Tue 02 Jan 2024 12:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48417
IP address blocks: 193.169.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c9:a4:15:a6:46:70:fc:38:af:23:ac:41:95:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Validity
Not Before: Jan 2 12:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a91ec056b09bb30f6784c945c09cef5a71b821dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d0:17:e7:b0:c0:3e:e8:91:e7:39:ed:68:52:
9a:58:04:50:29:d8:e4:79:17:7b:91:9f:ea:09:a7:
c7:72:a0:87:5b:83:e6:d3:04:9f:a2:b8:0c:99:e8:
93:47:98:01:2a:77:3b:12:38:0a:1e:7b:e2:e9:80:
3f:99:b9:56:16:f1:d1:f3:1c:1e:36:11:cb:40:ab:
b0:48:18:e5:6f:79:59:9f:18:81:00:ca:5b:ac:8a:
7e:3b:b0:9c:af:6c:39:30:d8:a9:09:90:83:82:c2:
a6:0e:b6:37:e3:1c:b7:b0:3c:9d:13:49:2a:70:ea:
b4:2e:a8:2c:e9:47:2a:16:bd:a5:cf:b0:51:a1:34:
9a:53:fd:c9:26:29:f8:ee:46:2c:44:bf:a0:52:3d:
78:62:6f:00:e3:51:37:98:a4:5e:b9:2e:c4:9e:25:
34:25:47:76:51:af:e9:b1:0c:49:42:f9:74:06:a2:
12:90:fc:93:94:fb:b7:a8:61:0c:8d:ca:62:11:ba:
66:dd:d6:a4:ee:41:ce:9c:93:a3:59:38:43:68:6b:
33:3a:da:18:1b:40:ad:73:76:c1:af:a0:ee:89:8c:
be:8a:91:5f:11:bf:18:12:49:0f:5d:e5:06:08:f8:
5f:63:ac:81:a0:46:02:5c:9c:48:2d:c4:d5:1c:74:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1E:C0:56:B0:9B:B3:0F:67:84:C9:45:C0:9C:EF:5A:71:B8:21:DC
X509v3 Authority Key Identifier:
keyid:1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/qR7AVrCbsw9nhMlFwJzvWnG4Idw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.182.0/23
Signature Algorithm: sha256WithRSAEncryption
99:20:59:f0:90:05:08:bc:0a:66:6f:f1:8b:d9:b6:9f:1c:f2:
69:bf:44:be:17:8d:9d:07:6c:d3:72:ce:a5:a0:0e:52:db:26:
0a:7f:e5:8b:43:1a:9b:23:6f:89:74:52:b1:3b:78:0b:c4:f4:
c4:7d:a4:ba:96:11:07:4f:b8:01:71:94:c3:ef:3d:66:03:b8:
04:a9:7c:3a:72:f5:9e:55:dd:1a:16:93:e7:c8:06:98:9f:bb:
f8:e8:53:cc:19:b5:e0:49:76:9a:35:8d:1c:19:53:54:3f:38:
08:cc:d2:b0:0c:15:22:e1:8a:96:dc:b1:0b:f8:6c:64:a3:9c:
9c:a1:9e:1a:b2:09:e3:8e:2a:7a:6e:fc:b7:bf:b4:e6:65:55:
18:f7:ec:95:86:7e:62:6a:0d:d1:9c:50:16:7d:91:82:d9:10:
c8:07:c4:ee:ce:d9:42:20:ed:6a:dd:ad:5f:ee:3e:39:0a:0d:
c6:67:6f:94:57:7e:dd:28:f0:1f:2a:0f:62:2c:47:e2:1e:77:
e8:e5:ea:d1:c7:fe:fd:23:08:fc:a2:6b:94:5c:4c:fa:3e:d4:
46:ce:5a:93:0c:47:e8:02:68:7b:5b:e8:65:a0:5e:bd:4e:e3:
5f:1f:65:5c:0f:3a:3b:21:cb:0a:59:46:b6:69:a1:e6:af:2b:
84:92:df:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 13:04:26 2024 by rpki-client on console-fra.rpki-client.org