Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/Q2RBsuj5H8a-blj6QwQ-ZJQ3nRQ.roa
File: Q2RBsuj5H8a-blj6QwQ-ZJQ3nRQ.roa (raw, json)
Hash identifier: WxWayYte1E6mevqej1GCZohiRzGrcK4HjHADWZKefZs=
Subject key identifier: 43:64:41:B2:E8:F9:1F:C6:BE:6E:58:FA:43:04:3E:64:94:37:9D:14
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 01930B6706E847933A9FE56FC3CE59B79CEE
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/Q2RBsuj5H8a-blj6QwQ-ZJQ3nRQ.roa
Signing time: Fri 08 Nov 2024 10:52:01 +0000
ROA not before: Fri 08 Nov 2024 10:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20879
IP address blocks: 93.113.90.0/23 maxlen: 24
176.223.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0b:67:06:e8:47:93:3a:9f:e5:6f:c3:ce:59:b7:9c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Nov 8 10:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=436441b2e8f91fc6be6e58fa43043e6494379d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:76:ef:9b:11:f6:bf:78:69:da:fb:8f:21:1e:
ee:ab:23:36:c4:4d:92:54:09:69:a5:5c:0a:ec:0f:
1c:9b:f6:29:6e:5c:e8:6e:75:06:0a:2f:11:4e:0b:
2a:b1:e4:1b:57:b8:9f:e7:8f:98:d8:76:47:bf:d4:
9a:4f:8a:d8:2b:0a:e7:5a:92:d9:92:00:7a:7a:e1:
e8:58:f8:14:b2:fb:56:82:59:3e:03:72:cb:c6:75:
e9:e4:1d:8d:0d:4c:77:16:53:00:2d:b3:72:30:11:
d2:b0:ca:5d:36:b4:4c:67:4a:41:83:79:f0:3f:d6:
cb:3e:30:f0:4b:0b:3d:38:f5:51:87:74:ad:55:fc:
e0:51:1b:75:87:39:70:8d:82:9d:b9:f6:88:b6:72:
58:bc:4d:db:c0:04:93:f7:1c:18:f6:18:c3:9b:e7:
f6:51:cd:d9:43:23:ca:07:47:6c:50:b0:77:d5:aa:
d8:c5:c9:b8:dc:78:e3:49:78:da:46:1e:51:ed:50:
e5:34:9d:aa:2a:13:0c:f8:0e:87:7f:52:d0:1a:99:
e6:ae:75:e2:5f:2c:fe:f7:76:87:34:8b:ce:9b:b8:
9f:8c:9d:a0:31:f3:22:a9:18:b2:d8:41:6c:98:e7:
da:0e:74:bc:96:fd:11:3a:26:c7:c7:49:79:75:74:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:64:41:B2:E8:F9:1F:C6:BE:6E:58:FA:43:04:3E:64:94:37:9D:14
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/Q2RBsuj5H8a-blj6QwQ-ZJQ3nRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.90.0/23
176.223.0.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:67:74:09:ee:d0:48:71:3a:47:0d:19:d4:0b:e0:b2:a5:5a:
f1:0a:5e:12:9b:be:58:98:15:b0:3d:02:1f:61:69:de:9d:b8:
09:a2:6d:9b:25:0b:10:f9:6d:eb:1a:52:97:d9:19:e0:72:db:
cf:5f:b5:37:92:b1:45:f8:b2:20:52:1c:61:ef:cc:8a:cd:30:
0f:f4:b7:45:96:3f:69:9a:19:55:aa:7c:0c:40:6b:8f:c3:16:
42:a6:84:34:1c:7b:c4:f6:42:c0:5f:bb:62:48:35:8b:27:07:
c2:0b:cf:c5:fe:d1:0d:7f:4e:a2:69:5e:23:10:94:89:c9:b4:
38:55:7d:7e:87:ba:9a:47:45:7e:e7:a2:14:64:c3:a0:6b:a2:
25:bd:bd:68:ed:60:a7:21:ee:2a:62:3d:d1:59:65:1d:ce:fc:
8c:16:35:c8:a7:56:2d:b6:5c:ea:f2:d1:db:2e:4f:66:96:04:
45:37:c9:30:bf:48:e3:83:2b:ee:db:05:c8:a5:f9:8a:6c:84:
f1:ad:60:28:36:3d:a9:8d:59:ba:fc:62:4f:be:04:08:2c:6c:
7a:72:7f:3e:e7:bb:f0:cc:87:5b:e5:7c:c8:fa:90:fd:e6:3b:
e4:d3:23:6e:f3:5a:7d:e0:7c:25:f9:dc:2a:14:dc:54:61:60:
77:7d:23:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:15:43 2024 by rpki-client on console-ams.rpki-client.org