Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/QoyIa1EzgzqGIh8gbcK-1lO9YUc.roa
File: QoyIa1EzgzqGIh8gbcK-1lO9YUc.roa (raw, json)
Hash identifier: 8MgF+r932cbzaYgbGZmPiovkpDXD8dtgbY3gpHyxuDs=
Subject key identifier: 42:8C:88:6B:51:33:83:3A:86:22:1F:20:6D:C2:BE:D6:53:BD:61:47
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 018CCA2B7D75EBDBA45C9921A95C2A57DC9E
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/QoyIa1EzgzqGIh8gbcK-1lO9YUc.roa
Signing time: Tue 02 Jan 2024 12:34:56 +0000
ROA not before: Tue 02 Jan 2024 12:34:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29068
IP address blocks: 94.184.160.0/20 maxlen: 21
94.184.171.0/24 maxlen: 24
94.184.172.0/22 maxlen: 22
94.184.170.0/24 maxlen: 24
94.184.168.0/23 maxlen: 23
94.184.168.0/22 maxlen: 22
194.225.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:7d:75:eb:db:a4:5c:99:21:a9:5c:2a:57:dc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 12:34:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=428c886b5133833a86221f206dc2bed653bd6147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:00:5e:a5:55:03:c4:bb:f2:1e:d6:16:f3:
51:be:e2:1d:15:a0:3a:ab:e5:24:27:3c:92:e7:24:
48:42:d2:17:35:1f:74:8f:29:11:49:43:bd:e5:8f:
8d:e5:11:2c:58:75:48:ed:57:4e:d2:db:19:45:07:
55:1d:2e:91:bd:f8:58:9c:97:00:48:e8:c1:47:b7:
1a:b7:c9:94:21:d1:19:ed:37:e8:c7:81:01:df:23:
e5:50:9f:6c:54:c3:83:95:84:85:ab:60:61:03:ef:
7d:6c:cc:95:77:5a:74:13:cb:02:bf:58:dc:e4:4a:
79:4f:4f:d8:61:b3:47:c4:a5:6e:24:57:29:e4:fd:
b3:91:3e:b1:b8:f9:b2:2b:e3:c4:9b:16:82:12:7f:
2c:bf:b7:a2:7d:a1:aa:08:96:0e:21:58:8a:77:1b:
b1:2f:92:5d:7f:0f:c7:70:98:fa:2b:cd:4b:7e:ed:
ef:0c:f0:e4:99:2f:68:3f:89:5f:85:3f:87:f9:e8:
d9:28:af:58:44:d8:95:f9:c4:04:8d:89:a1:2e:6d:
ba:4d:16:58:73:09:1b:5a:b6:0d:21:57:12:e4:03:
d6:df:20:2e:db:eb:a5:c8:a6:de:cf:86:66:be:44:
98:3d:fa:cd:a6:47:06:2b:ca:38:52:11:dd:e6:e0:
fd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:88:6B:51:33:83:3A:86:22:1F:20:6D:C2:BE:D6:53:BD:61:47
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/QoyIa1EzgzqGIh8gbcK-1lO9YUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.160.0/20
194.225.0.0/20
Signature Algorithm: sha256WithRSAEncryption
64:ae:f5:24:70:4b:fd:16:b0:15:51:98:d7:fb:13:02:9f:6b:
b1:04:2a:8d:6d:97:70:81:b9:64:d0:9a:5c:ae:87:a4:23:52:
d1:99:92:95:0c:23:b8:80:b4:d7:ad:ec:9e:cd:db:ce:24:56:
c8:bb:38:89:b3:89:f7:c0:7f:fc:07:6f:e4:0e:f6:1b:61:ca:
d0:f3:41:6d:c7:02:aa:3b:65:b7:5c:9b:16:9f:92:1c:22:ab:
7a:0c:bf:5d:96:19:4c:a3:f1:ad:78:b7:c6:65:96:22:7b:7e:
09:42:cf:dc:a8:3b:4a:b0:c2:b2:b2:a7:d9:75:92:9a:e4:a6:
1a:9f:6f:e9:76:e6:ab:66:c5:74:a5:cd:d5:f7:71:09:d2:0a:
42:7f:69:b5:dc:01:aa:3d:e5:2a:f1:1b:01:58:2c:71:9e:61:
1a:64:32:75:87:09:5a:e9:6b:53:62:42:be:8c:f4:26:f2:05:
5b:13:93:ad:66:ad:e7:83:0d:cd:a2:7b:d5:3a:c5:d9:44:f0:
a8:3a:1d:74:bd:38:43:87:f9:5f:31:2c:64:9b:ba:69:77:a2:
3b:aa:ee:17:f5:70:15:64:95:7d:87:a6:ec:51:89:d4:e6:47:
fa:7f:77:41:c2:45:2c:f1:60:77:88:7a:ac:a9:95:08:fe:37:
06:d2:89:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:47 2024 by rpki-client on console-ams.rpki-client.org