Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qIr9RjzRbUswleoErWEgc9VrKTk.roa
File: qIr9RjzRbUswleoErWEgc9VrKTk.roa (raw, json)
Hash identifier: FU8aUyUlAJjnmjO6X9qweyKq5iYpfIAyh3mB8xtWeGw=
Subject key identifier: A8:8A:FD:46:3C:D1:6D:4B:30:95:EA:04:AD:61:20:73:D5:6B:29:39
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A7CF4A037CBEA71C7B2E35756CCCF
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qIr9RjzRbUswleoErWEgc9VrKTk.roa
Signing time: Mon 01 Jan 2024 18:30:19 +0000
ROA not before: Mon 01 Jan 2024 18:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60005
IP address blocks: 141.101.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7c:f4:a0:37:cb:ea:71:c7:b2:e3:57:56:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a88afd463cd16d4b3095ea04ad612073d56b2939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e2:bd:35:08:a7:40:86:fc:02:4c:52:14:ae:
f7:16:84:75:9b:d7:14:6e:82:f7:f7:32:7a:6a:9f:
56:3e:ad:6d:56:0c:6c:55:98:a4:13:57:9a:32:c4:
74:eb:b7:f4:4b:48:cf:87:1d:ed:bb:59:a2:2d:b2:
22:5a:74:e2:17:82:24:04:28:ed:83:55:7c:31:90:
1d:44:79:c4:6c:96:77:a6:4d:85:0b:ca:d8:27:2c:
fb:50:83:cd:74:83:1b:e4:97:67:25:c2:15:fb:76:
95:3e:0c:d9:30:2f:35:1c:ba:3d:92:4c:31:db:73:
7b:56:3d:30:ee:75:90:32:90:75:61:6b:1b:2f:28:
e7:4e:c3:cb:77:dd:4e:33:61:b3:a2:99:dc:70:da:
d2:b7:fe:02:f2:5d:8a:4e:50:b1:23:b1:6c:48:2a:
09:86:6b:f1:96:43:79:ff:81:6c:95:4a:73:ad:73:
ea:c9:fb:bc:85:13:a0:c8:01:f4:27:55:92:68:de:
fc:a1:d3:98:5e:4f:da:7e:6c:8e:51:e1:62:2e:b4:
c6:de:41:ae:44:4f:90:55:73:46:d9:38:7b:c4:8d:
8b:49:95:66:eb:83:8e:b1:1a:ef:f6:17:aa:fb:a8:
2a:eb:62:fd:cd:74:c0:98:15:aa:4c:b9:27:4d:de:
b5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8A:FD:46:3C:D1:6D:4B:30:95:EA:04:AD:61:20:73:D5:6B:29:39
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qIr9RjzRbUswleoErWEgc9VrKTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.176.0/24
Signature Algorithm: sha256WithRSAEncryption
19:df:de:36:9b:df:81:86:e6:97:97:ed:7b:3c:21:1c:e1:dc:
5f:f4:b0:2a:27:ee:4b:42:03:ee:c3:8e:ce:46:ff:03:a2:05:
9f:6e:ce:63:20:01:39:01:78:b0:a8:61:40:cf:7f:af:d0:7b:
0f:b4:71:e8:8f:39:3b:a3:3d:d9:6e:eb:14:6d:06:12:eb:d9:
84:4e:c6:7f:39:2e:ac:aa:43:fa:7c:ee:2c:e9:66:99:6c:62:
53:75:92:90:fe:2e:4f:2b:1a:1f:1b:2b:d5:4c:0a:92:28:40:
6a:74:5d:aa:26:5a:7f:cf:57:35:b5:9e:1e:f2:3d:b4:0c:c3:
a4:e4:9e:bc:bd:4e:86:38:15:b6:23:a9:39:77:04:e8:c8:9b:
44:1a:2c:cf:9f:3a:f9:36:66:c8:7b:db:07:25:bb:d5:aa:37:
f2:1f:62:01:a7:a5:24:95:c9:94:0c:df:9f:3e:8a:31:4f:b2:
92:f8:e3:86:15:73:94:a2:df:35:a8:f8:de:4e:38:e7:ae:97:
4c:7c:68:4b:e1:71:cb:0a:ba:2f:dc:d6:69:3d:ba:2a:52:b0:
c1:4f:7b:b6:77:80:c9:f1:2e:4a:c6:68:44:d1:4f:fe:e9:77:
a5:ea:e2:a4:6c:84:8e:ac:e6:97:1a:7c:ab:bb:1b:4b:00:70:
1e:61:ff:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 14:06:19 2024 by rpki-client on console-ams.rpki-client.org