Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/QTS4pfPguVgwQOFWzW9C_NpOfKI.roa
File: QTS4pfPguVgwQOFWzW9C_NpOfKI.roa (raw, json)
Hash identifier: G9Srle6Lels3XGCDmkX8WgVcp/8GB5hWE5Dbnx7LpNk=
Subject key identifier: 41:34:B8:A5:F3:E0:B9:58:30:40:E1:56:CD:6F:42:FC:DA:4E:7C:A2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 018CC3B71C507209B1DE5DD77BF6D4FBDAAB
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/QTS4pfPguVgwQOFWzW9C_NpOfKI.roa
Signing time: Mon 01 Jan 2024 06:30:06 +0000
ROA not before: Mon 01 Jan 2024 06:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.153.168.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1c:50:72:09:b1:de:5d:d7:7b:f6:d4:fb:da:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Jan 1 06:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4134b8a5f3e0b9583040e156cd6f42fcda4e7ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:93:bd:c0:c9:5e:85:0d:97:59:9f:c1:c9:ac:
2b:f9:b7:98:c4:c0:73:c8:d3:48:1b:f0:98:f8:62:
0c:ec:43:45:0f:a5:1d:e6:84:6a:57:55:54:1f:3a:
53:2b:a3:f3:ac:19:50:70:0d:84:c8:e8:70:5f:1b:
21:c9:44:12:34:a6:85:5b:0d:d1:e3:91:20:06:48:
ca:3a:1d:9c:fa:5c:31:28:10:03:68:ce:71:0f:09:
76:30:74:0b:d5:03:f8:13:fe:c0:59:68:24:52:1c:
3e:62:5d:bc:54:34:f5:c7:ad:90:c7:fb:c6:d7:bd:
e0:e7:47:e7:17:4b:b7:40:87:61:18:41:1a:c6:f0:
78:86:24:37:82:2c:e9:78:50:e8:74:86:ac:30:cd:
ed:54:33:a1:b1:12:ec:4f:1b:2a:f3:3c:6d:24:b4:
8e:cd:f0:47:23:e1:5d:c6:e7:6e:82:53:f0:bb:65:
07:23:96:10:5d:f2:9e:fb:f9:da:a2:76:4b:a6:69:
0c:9a:6f:56:90:b6:0a:85:ef:c9:80:4d:ae:88:09:
e1:08:13:b7:bc:b8:63:bf:de:a0:56:67:a7:a3:8d:
5f:e5:8d:fd:48:3c:be:09:20:21:f0:f3:b3:2b:bc:
6a:da:ca:15:b5:82:39:8d:ea:02:e3:64:2b:41:79:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:34:B8:A5:F3:E0:B9:58:30:40:E1:56:CD:6F:42:FC:DA:4E:7C:A2
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/QTS4pfPguVgwQOFWzW9C_NpOfKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.168.0/23
Signature Algorithm: sha256WithRSAEncryption
38:82:6c:08:81:ff:c1:ee:ed:16:bd:c1:78:79:40:bf:c6:05:
f5:a7:87:27:98:89:37:f8:88:79:16:a0:a5:1a:31:15:f9:06:
0b:ec:dc:34:49:38:90:be:2f:50:60:f6:b6:ef:89:22:af:56:
4c:e4:03:20:f1:6f:fc:68:a1:43:af:0b:b3:32:7a:65:88:e8:
cc:af:3d:f6:7c:85:fe:90:21:32:b6:5a:70:2b:bb:12:43:47:
3a:ad:d3:cb:cd:94:92:d9:62:e4:1c:64:01:cf:6e:31:80:f6:
d8:31:16:90:d2:5a:f0:71:84:03:e3:bc:37:5f:0b:b4:6b:bf:
ff:f7:95:65:92:b7:fb:ea:b6:11:d5:f3:24:10:e6:c6:0e:7e:
7d:f2:1e:98:63:06:7e:04:aa:63:82:4b:b1:1c:26:68:17:7d:
7a:09:1c:0b:11:34:c9:e7:46:aa:79:ca:fa:3c:b7:c9:f4:34:
3a:a2:27:60:d9:cf:2c:97:d4:4e:14:0b:3a:5d:e7:43:11:f7:
b4:90:1f:55:38:3e:a8:6a:f4:d2:1b:4d:8a:4a:36:30:c7:5e:
c2:a0:61:eb:48:c8:1c:15:83:01:78:2e:55:ba:13:21:28:49:
c0:40:ba:05:d3:a5:2e:21:25:6b:7a:67:f7:eb:23:c4:fe:7d:
8d:07:82:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:41:44 2024 by rpki-client on console-ams.rpki-client.org