Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/Qml9SyeRjUOWuE1hVRihuu0Lo7M.roa
File: Qml9SyeRjUOWuE1hVRihuu0Lo7M.roa (raw, json)
Hash identifier: jbkxw2b8mChEmY5mQNvVNj64jOKLZrqSeqANgR2IIJ0=
Subject key identifier: 42:69:7D:4B:27:91:8D:43:96:B8:4D:61:55:18:A1:BA:ED:0B:A3:B3
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 018DF43972437B48E8080B3032891BABEE21
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/Qml9SyeRjUOWuE1hVRihuu0Lo7M.roa
Signing time: Thu 29 Feb 2024 09:37:01 +0000
ROA not before: Thu 29 Feb 2024 09:37:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204198
IP address blocks: 193.176.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:39:72:43:7b:48:e8:08:0b:30:32:89:1b:ab:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Feb 29 09:37:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42697d4b27918d4396b84d615518a1baed0ba3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:6c:b2:85:3f:21:12:23:82:bb:2b:0a:2c:
37:eb:bc:99:a3:70:48:97:fc:32:35:e0:4a:8e:b1:
11:37:35:d6:85:78:44:ba:69:5f:cc:00:46:cc:87:
c3:d1:4f:7b:3f:5c:ab:df:7c:8a:1a:8a:eb:b6:49:
3e:67:bc:d5:bd:7c:7a:e8:87:a8:64:5d:dc:99:f7:
2b:fe:84:21:52:1d:31:17:28:82:87:47:36:92:b7:
38:0e:38:2f:e5:6b:f4:ba:8c:11:d8:c7:7c:89:fc:
05:c2:57:aa:af:52:72:38:99:04:11:25:2e:ab:67:
44:08:93:66:b6:3b:a6:6c:df:be:30:43:24:47:f4:
b6:a8:6c:71:0d:09:62:f5:be:27:19:ca:96:41:fb:
68:14:9b:be:3b:95:14:78:c7:3d:06:37:af:1d:01:
8b:40:76:a0:2f:77:de:4c:bc:f0:77:29:c4:d7:1e:
22:6b:e5:35:4a:ec:4f:ec:23:55:2d:82:19:3c:2d:
84:d2:d6:b7:1c:ad:9a:27:3f:a8:c1:12:07:11:fb:
df:c6:d0:40:48:72:8d:e6:90:b2:ea:9e:6a:79:58:
4f:9a:82:e5:04:8e:0c:c6:d6:07:87:8b:57:a6:b4:
be:8e:88:dd:1f:96:de:f4:b1:a3:8a:cd:08:b4:01:
c4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:7D:4B:27:91:8D:43:96:B8:4D:61:55:18:A1:BA:ED:0B:A3:B3
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/Qml9SyeRjUOWuE1hVRihuu0Lo7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.92.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:8d:3e:0a:c0:ee:39:d3:72:be:b7:47:91:63:dd:9f:0e:fb:
4b:b2:f1:d6:5e:49:7f:6c:ab:b1:ee:87:cf:4f:f9:ea:ef:49:
df:e0:6b:17:f6:31:53:3a:33:e2:47:bc:8a:65:7f:87:4b:e0:
51:02:7f:41:b2:21:53:1d:48:f0:bb:30:a9:7a:79:10:09:47:
a8:2f:90:25:3e:ff:3c:96:7c:fb:8a:0a:be:f8:e8:2f:d6:e0:
61:ef:17:11:a8:a4:38:54:8f:49:25:8d:71:67:01:75:c6:47:
3b:70:8c:f4:d8:11:43:63:7d:8b:55:93:9d:d3:97:ff:b4:fa:
65:13:e8:e7:3e:38:e9:e6:71:d6:6f:5d:69:e3:ba:ce:0f:5d:
52:30:f9:19:6a:98:73:0d:3b:bd:3a:df:a7:b1:e9:9c:38:43:
f7:a0:67:8e:d1:50:ea:11:4d:7f:46:40:7e:71:d3:cc:92:73:
34:d3:c0:1b:82:a1:2c:f5:62:18:0c:d8:8a:84:ec:53:5f:9f:
65:d6:71:54:9f:cf:77:63:f9:e2:5a:c2:e5:51:6a:48:2d:fb:
1f:ef:e9:09:b1:75:75:07:83:23:43:3e:4d:3e:2f:06:a9:f7:
87:de:c5:d1:c1:e2:c4:ef:43:8a:c1:1d:3d:6e:7c:ad:79:93:
fb:2e:ae:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 05:23:44 2024 by rpki-client on console-fra.rpki-client.org