Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/qLY7yz0pUKLpHnyB2OVVCZ4xcoU.roa
File: qLY7yz0pUKLpHnyB2OVVCZ4xcoU.roa (raw, json)
Hash identifier: JuomKavYeMCbBUeNMSbuATZrUHua0nef5gKvyrTRFJY=
Subject key identifier: A8:B6:3B:CB:3D:29:50:A2:E9:1E:7C:81:D8:E5:55:09:9E:31:72:85
Certificate issuer: /CN=2fa765753cefe816d38b250379c95766a96f06d7
Certificate serial: 018CC94BFBFBCD0CC80A240AF10223104C4A
Authority key identifier: 2F:A7:65:75:3C:EF:E8:16:D3:8B:25:03:79:C9:57:66:A9:6F:06:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/qLY7yz0pUKLpHnyB2OVVCZ4xcoU.roa
Signing time: Tue 02 Jan 2024 08:30:49 +0000
ROA not before: Tue 02 Jan 2024 08:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209062
IP address blocks: 2.57.208.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:fb:fb:cd:0c:c8:0a:24:0a:f1:02:23:10:4c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa765753cefe816d38b250379c95766a96f06d7
Validity
Not Before: Jan 2 08:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8b63bcb3d2950a2e91e7c81d8e555099e317285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:5b:b1:6b:4c:80:7a:92:2b:c5:3c:7d:34:
6f:be:f7:cb:a5:2a:6e:e8:15:79:67:bd:d2:0d:10:
ee:68:33:fd:b4:c6:c2:51:b0:b6:67:07:14:9e:e2:
e6:11:e6:0b:24:e4:f6:64:80:40:d8:f0:b9:77:45:
b5:b0:80:af:4f:e9:87:32:e7:24:de:fa:f7:42:86:
11:fd:ff:4a:08:c8:39:25:66:e1:11:90:81:b7:c2:
31:20:05:2a:a3:d3:7f:f8:68:19:ca:12:af:4a:02:
d3:42:dd:41:9e:53:eb:a0:19:ae:53:e0:ff:80:74:
1f:dc:ec:4b:2a:89:41:7c:8d:14:38:d3:9f:a9:c8:
1c:52:7a:fa:a1:52:36:58:1d:fa:09:e3:c6:25:a2:
fe:c0:76:f1:fa:37:ed:cb:a5:64:45:f2:81:82:9b:
7c:c2:85:d9:27:b8:da:84:67:60:3c:3c:2e:17:13:
04:36:9e:bc:e6:52:46:c3:99:8e:49:ef:15:36:e9:
a9:54:8a:77:a8:d9:22:59:06:64:08:0a:e0:2d:81:
5d:06:b1:81:3b:6a:3a:de:04:f2:44:ed:7d:0d:65:
3c:8c:e9:89:86:52:ae:74:31:eb:fc:7c:55:30:4f:
b5:23:61:9e:12:b3:4a:3a:56:23:d8:86:2d:d6:99:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B6:3B:CB:3D:29:50:A2:E9:1E:7C:81:D8:E5:55:09:9E:31:72:85
X509v3 Authority Key Identifier:
keyid:2F:A7:65:75:3C:EF:E8:16:D3:8B:25:03:79:C9:57:66:A9:6F:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/qLY7yz0pUKLpHnyB2OVVCZ4xcoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.208.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:3b:85:ac:0f:c0:56:e9:e0:6c:31:85:cf:b9:0d:ad:6d:b6:
b0:45:b4:e7:dd:0c:42:c6:34:69:ac:d2:61:f0:17:70:bf:fb:
94:72:eb:bc:98:4e:be:68:9d:46:21:b1:9c:a7:99:31:bb:33:
ed:a2:00:ae:10:2e:69:d8:6e:95:7e:81:a5:2b:65:30:15:e9:
d9:bc:43:15:a5:ee:24:07:bd:45:04:39:46:5c:79:ad:46:32:
c0:17:ad:7d:23:06:0d:42:b4:ec:c7:78:8a:51:70:50:94:6e:
28:a2:62:de:2b:e4:5c:da:37:ff:78:ed:57:b9:11:96:cf:2d:
00:06:7e:33:46:fa:94:66:0e:94:0d:d2:73:90:e6:53:00:48:
ca:c0:12:70:8d:a5:e1:5e:f4:ac:1a:8f:76:a0:6b:2d:ee:88:
82:59:e7:f1:b0:e0:6d:17:9d:b2:e1:cb:d3:40:77:f0:e8:43:
6f:7a:a6:3b:32:69:15:96:fe:7a:40:bb:fd:58:55:52:3d:87:
97:50:8e:e2:eb:12:70:b6:c4:1f:e3:67:68:a6:c8:58:69:87:
2d:a5:df:0f:d8:0a:f3:99:18:bc:c9:2a:05:05:91:10:d3:c5:
6c:ec:cb:e7:44:4f:fa:59:fa:19:a3:72:6b:f5:24:4b:9c:2e:
d0:80:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:33 2024 by rpki-client on console-ams.rpki-client.org