Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/QQYxK_tkgXrigJ4YubeNJsjHcQk.roa
File: QQYxK_tkgXrigJ4YubeNJsjHcQk.roa (raw, json)
Hash identifier: RbybevO9NgPzwbsOqAMgT3fSDUB7Mq0qifvewxygxEs=
Subject key identifier: 41:06:31:2B:FB:64:81:7A:E2:80:9E:18:B9:B7:8D:26:C8:C7:71:09
Certificate issuer: /CN=6aa34a4bac3bf7813cd2a66b4f45b9c786dd3542
Certificate serial: 018CC2DAEF1E58F00B553621DFDF08A47D37
Authority key identifier: 6A:A3:4A:4B:AC:3B:F7:81:3C:D2:A6:6B:4F:45:B9:C7:86:DD:35:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqNKS6w794E80qZrT0W5x4bdNUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/QQYxK_tkgXrigJ4YubeNJsjHcQk.roa
Signing time: Mon 01 Jan 2024 02:29:37 +0000
ROA not before: Mon 01 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59877
IP address blocks: 217.197.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqNKS6w794E80qZrT0W5x4bdNUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ef:1e:58:f0:0b:55:36:21:df:df:08:a4:7d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa34a4bac3bf7813cd2a66b4f45b9c786dd3542
Validity
Not Before: Jan 1 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4106312bfb64817ae2809e18b9b78d26c8c77109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:42:a7:15:61:50:75:b0:08:2b:43:4c:c2:
f9:cc:b0:02:10:db:02:ff:15:39:7e:cc:d6:b8:55:
13:11:5e:7f:fa:21:29:70:68:3b:20:81:4a:51:d8:
98:e5:b6:9c:ca:23:a2:e0:6b:e1:01:a0:c4:a1:aa:
3b:57:b0:fe:61:17:5f:6a:d0:77:95:86:fc:bf:85:
03:f1:f6:62:c6:2f:23:a3:c5:3f:95:bf:51:84:10:
7a:62:6a:10:0c:19:69:ea:02:ec:f3:83:92:e9:6d:
f9:1b:8d:5c:81:9f:b1:16:ba:7e:29:35:4b:51:0a:
e8:a0:c4:19:7a:74:50:87:00:16:2c:09:cd:f3:16:
3f:f9:1b:5d:b2:37:fb:d1:5f:d3:9b:a1:3b:b1:72:
75:4f:9a:df:f3:04:97:d7:89:9f:42:77:77:bb:bc:
7c:bd:91:39:a6:1e:29:d7:3a:e8:63:33:46:51:d1:
53:5b:72:c6:12:75:4c:e8:3e:16:3d:ce:f3:58:89:
5d:0d:a6:44:30:59:6a:8c:9b:e8:65:b0:99:00:e3:
1e:4e:6e:d3:ee:45:07:82:e7:92:a5:75:0c:85:ea:
fc:c7:c9:f2:1a:34:21:76:58:46:9a:e2:01:4b:c9:
b2:03:1b:51:dc:9b:33:13:0c:7e:42:18:9b:3b:f5:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:06:31:2B:FB:64:81:7A:E2:80:9E:18:B9:B7:8D:26:C8:C7:71:09
X509v3 Authority Key Identifier:
keyid:6A:A3:4A:4B:AC:3B:F7:81:3C:D2:A6:6B:4F:45:B9:C7:86:DD:35:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqNKS6w794E80qZrT0W5x4bdNUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/QQYxK_tkgXrigJ4YubeNJsjHcQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.108.0/24
Signature Algorithm: sha256WithRSAEncryption
60:52:1d:02:05:23:ae:03:c8:75:ad:11:31:5d:91:ec:01:1c:
e7:98:5f:e9:99:c6:3b:10:5b:72:09:1e:86:b2:aa:c4:18:54:
b1:8a:7f:2e:c8:b3:52:7c:94:ce:42:c1:20:39:36:89:36:b4:
76:11:f0:8d:c0:86:8d:01:75:b8:70:f6:3d:1d:d9:ce:8a:00:
2e:13:c0:4e:fa:fc:bb:63:cc:22:c4:cb:83:fa:fe:7f:78:5b:
d2:4d:b1:8e:2b:30:fc:78:1b:57:a1:d2:da:1c:82:86:4d:da:
ad:f1:ec:ff:32:ba:b9:21:c9:84:61:a1:fb:8a:cf:93:07:d0:
76:b2:b5:8f:44:e4:3b:bb:7b:e7:b0:a6:d1:e1:1b:7f:53:70:
72:f4:b7:de:42:e3:88:d3:81:d9:c3:e9:8d:c4:3c:38:4e:0f:
f3:a3:27:83:d6:f7:96:6a:d9:2c:33:cf:6b:95:37:3e:59:2a:
6c:7d:c4:36:d7:29:a9:2c:6a:ab:23:be:16:67:b8:c9:4c:2f:
c7:33:6f:73:b4:1c:ef:b3:93:a1:e4:8f:81:e8:a5:79:90:c3:
7c:bd:c8:be:df:98:0b:d5:df:6d:0d:d2:ef:1e:9e:08:91:18:
03:86:ae:c5:5f:e5:0c:5d:82:73:c0:4c:41:87:36:53:79:a0:
7f:c0:c0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:33:35 2024 by rpki-client on console-ams.rpki-client.org