Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/qIjLU34vdixbV-3eXTk0OQ3Gabc.roa
File: qIjLU34vdixbV-3eXTk0OQ3Gabc.roa (raw, json)
Hash identifier: yav/Kb4UtPv3OLFg0VlZLoU51UXi3bUcOsfd6Jg9rCg=
Subject key identifier: A8:88:CB:53:7E:2F:76:2C:5B:57:ED:DE:5D:39:34:39:0D:C6:69:B7
Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial: 018CC801530DB42DFBBD133D4778BC7AFD59
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/qIjLU34vdixbV-3eXTk0OQ3Gabc.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5588
IP address blocks: 195.90.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:53:0d:b4:2d:fb:bd:13:3d:47:78:bc:7a:fd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a888cb537e2f762c5b57edde5d3934390dc669b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:be:75:0b:c4:cd:b9:3c:f4:34:f0:2b:fd:
32:18:54:7b:3a:9c:87:62:2a:3b:b2:73:ad:a5:7f:
cc:cf:f1:47:5e:50:cf:87:2c:d6:49:c1:7b:fd:10:
70:7b:99:28:10:04:62:c6:81:48:97:da:a3:2a:eb:
5f:fb:e9:bb:98:2e:c0:2d:ef:c5:b9:fa:d5:28:f3:
e6:33:ea:b4:bb:ea:1f:9b:78:ac:17:4c:06:71:ed:
88:e5:d7:9c:af:e6:11:01:a0:a1:19:88:7f:97:28:
59:24:45:53:3a:b7:04:60:db:6c:23:4e:38:02:68:
a1:56:fb:84:8b:e3:97:c8:8f:05:86:64:3e:05:f8:
20:20:57:4a:ca:85:ab:2f:bd:fd:5a:d7:68:c1:78:
be:21:18:2f:1b:d5:70:d3:54:aa:53:4d:cd:c2:1b:
7b:73:56:87:8b:31:08:bd:ab:28:c9:b8:10:fa:d4:
26:5e:3e:9b:b2:90:7a:a8:9e:a5:ea:16:b0:2e:16:
2b:72:16:87:f2:02:cb:5d:a1:70:a8:60:6c:bb:1f:
eb:c9:62:fd:4e:0b:06:21:25:2a:c2:da:bf:f9:95:
ca:87:3a:ae:f9:08:26:52:e8:7c:a8:c6:19:ec:3c:
28:15:07:c7:1a:0d:54:f7:0a:22:a6:fd:d2:77:69:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:88:CB:53:7E:2F:76:2C:5B:57:ED:DE:5D:39:34:39:0D:C6:69:B7
X509v3 Authority Key Identifier:
keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/qIjLU34vdixbV-3eXTk0OQ3Gabc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.90.98.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ea:2f:a7:dd:93:7c:37:27:1b:e2:bf:a6:ac:77:03:b7:14:
c0:95:c2:27:7f:5c:7e:35:dd:e6:aa:b4:c8:f2:50:92:38:32:
eb:91:48:94:9d:a1:2e:fd:61:73:17:cf:a9:07:9c:6e:77:d2:
95:45:c8:06:cd:b9:fa:50:7e:81:a1:07:99:11:ec:f7:d7:e8:
65:16:f9:c8:9d:26:9b:f9:a5:5b:2e:dc:6b:93:b2:bf:ba:ad:
ed:84:9c:52:77:34:45:bb:10:2a:07:7f:7d:2f:80:56:7e:58:
35:c8:eb:2d:e5:00:83:88:40:32:3a:6b:58:da:31:7c:1a:be:
e1:65:97:55:0f:4d:f3:b4:67:d8:9a:69:01:a9:8b:dc:ac:39:
cd:cd:41:2d:0b:dc:16:62:92:a1:77:99:b4:eb:30:8c:77:d6:
a8:b7:5d:c7:a4:6d:e5:f2:4f:b0:27:28:3e:b2:a4:e5:16:18:
e0:31:44:c2:6c:2c:f3:a0:8c:4c:ff:ff:d5:88:76:68:47:cc:
17:f7:e5:49:d7:05:77:df:cd:7e:32:39:26:df:ad:30:fd:ab:
fa:d3:98:bf:0c:a1:66:7f:0b:7d:b0:98:87:bc:9d:03:29:04:
e0:4c:bb:9c:da:3c:cf:d3:bc:65:b4:6d:b4:1e:38:7e:d1:6b:
03:c0:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:24 2024 by rpki-client on console-fra.rpki-client.org