Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/qMgBjNXYMjFY3rRnSveleTgbUNU.roa
File: qMgBjNXYMjFY3rRnSveleTgbUNU.roa (raw, json)
Hash identifier: cQdVZ4FSDOz6oz0m1XKc6LxJE7xwC565dDLtkVnpQ1E=
Subject key identifier: A8:C8:01:8C:D5:D8:32:31:58:DE:B4:67:4A:F7:A5:79:38:1B:50:D5
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 018CC727005D9E4320D868830BFDFBB49596
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/qMgBjNXYMjFY3rRnSveleTgbUNU.roa
Signing time: Mon 01 Jan 2024 22:31:11 +0000
ROA not before: Mon 01 Jan 2024 22:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8647
IP address blocks: 193.200.175.0/24 maxlen: 24
185.23.164.0/22 maxlen: 22
2a0f:3a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:00:5d:9e:43:20:d8:68:83:0b:fd:fb:b4:95:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Jan 1 22:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8c8018cd5d8323158deb4674af7a579381b50d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:72:2a:48:ff:89:a4:be:84:bf:04:28:88:
1f:96:f0:5b:00:7f:d4:65:29:5b:e3:32:ab:9e:da:
a9:33:e0:d0:34:63:04:ca:84:4e:a1:60:2d:4d:27:
0d:2b:d7:48:c9:0e:7a:e0:4f:83:9d:32:5b:b4:9b:
fd:ba:89:64:04:ef:33:41:65:e6:05:4b:06:71:c8:
d3:a0:80:3d:5f:db:3d:3c:e8:58:7b:f6:1a:d0:55:
1f:47:9d:61:7a:ff:9e:0a:7b:1e:b7:f9:b5:ea:25:
d4:36:93:12:aa:0e:9a:00:64:12:f2:08:45:05:9e:
4b:78:2e:e4:f1:8a:9f:ee:34:bc:7b:67:3a:8e:e3:
b1:d0:40:bd:5b:6d:41:ff:4e:95:9a:e0:9d:c2:6c:
a9:f4:da:24:22:91:fa:c8:98:6a:9a:a1:5e:76:14:
33:68:03:28:cb:ba:bc:d0:57:11:49:4a:eb:32:1e:
a4:5b:8f:72:87:2a:dd:95:61:47:ab:6b:3a:03:ce:
36:fb:eb:12:ed:ef:69:bc:e5:ae:5c:a2:97:bb:01:
88:62:a1:9e:60:26:ac:7e:e9:9f:6c:34:2d:d8:1f:
da:05:58:93:9e:28:9e:38:d2:62:c0:5e:c6:01:3a:
15:02:44:20:c2:84:b2:3e:5a:7d:da:d2:81:fa:7e:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C8:01:8C:D5:D8:32:31:58:DE:B4:67:4A:F7:A5:79:38:1B:50:D5
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/qMgBjNXYMjFY3rRnSveleTgbUNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.164.0/22
193.200.175.0/24
IPv6:
2a0f:3a00::/29
Signature Algorithm: sha256WithRSAEncryption
56:fb:d6:d3:64:fc:6e:25:98:73:b1:ab:d1:31:3a:03:40:90:
17:85:02:83:c4:b2:44:c4:d5:33:6b:b9:f4:2c:76:fe:3e:0e:
73:50:c6:e7:00:ff:93:97:5c:66:aa:8e:4e:7d:b5:04:73:4d:
2e:15:f7:5c:23:de:4c:cd:bc:7d:5f:19:33:07:50:34:5b:b1:
02:6f:40:f2:23:07:9e:16:2b:44:3a:a0:95:7b:b7:13:6f:d3:
89:11:bf:0b:6b:a1:0a:3f:87:f1:f4:09:b6:63:e6:7e:28:32:
ad:8c:c9:d2:d2:7b:3c:f7:b8:67:63:ff:6b:ca:61:ab:24:49:
e9:9d:bf:23:a4:83:7a:1b:ad:8a:4f:03:3c:b6:9e:12:c2:f7:
d2:74:1c:f3:cc:22:6e:88:05:00:ee:38:88:7d:d0:45:4b:52:
14:d3:4e:0c:2d:10:3c:5c:8e:8b:45:0c:47:dc:72:86:31:e3:
f7:ac:b1:ed:e4:f2:07:23:dc:d8:6f:2c:98:26:d4:34:fc:c7:
1c:ab:c8:43:fa:f6:b5:bf:62:a8:e5:2f:be:70:78:69:96:e9:
39:af:8f:e0:1d:5c:79:e0:1f:25:3e:db:08:f3:59:3e:08:cc:
36:cd:b8:e5:10:ce:ed:9e:73:c6:e1:18:51:1f:4a:e5:43:50:
83:d2:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:03:48 2024 by rpki-client on console-ams.rpki-client.org