Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/asQyemIrgQaOdxx1TKdBw8DqmAQ.roa
File: asQyemIrgQaOdxx1TKdBw8DqmAQ.roa (raw, json)
Hash identifier: fn/9z7AiGvnVm64adMFgGkPsQfxocew0F5mvpzo1tTs=
Subject key identifier: 6A:C4:32:7A:62:2B:81:06:8E:77:1C:75:4C:A7:41:C3:C0:EA:98:04
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 018DB256FE3620754F874EC2937A6220EB3E
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/asQyemIrgQaOdxx1TKdBw8DqmAQ.roa
Signing time: Fri 16 Feb 2024 14:34:22 +0000
ROA not before: Fri 16 Feb 2024 14:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 193.9.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 01:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:56:fe:36:20:75:4f:87:4e:c2:93:7a:62:20:eb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Feb 16 14:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ac4327a622b81068e771c754ca741c3c0ea9804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:ef:df:0d:05:7a:36:50:34:e8:de:f1:cb:
fd:3c:d9:7f:71:bb:c0:36:4b:b1:cc:4f:78:e2:2e:
0d:e8:8e:38:ee:81:33:d0:84:65:0e:d5:14:f6:d8:
c5:6a:bd:eb:ff:dd:b5:1f:f2:66:a1:5e:c1:bb:09:
2a:6f:37:d2:ca:0e:31:38:16:b9:82:e0:1f:6f:90:
37:ef:48:4c:3e:4e:3d:d5:af:89:6c:03:b2:ff:c7:
80:c4:b6:37:96:93:4e:ea:f7:b3:0c:c9:12:89:bf:
c5:8a:4c:86:6a:99:09:59:ac:d9:e1:b9:71:9d:2a:
56:5a:0c:ba:0e:09:5f:7c:10:ec:47:b9:80:5e:67:
3d:4e:66:0f:fc:0c:ea:07:b8:22:0b:cc:da:33:f4:
13:b4:1d:99:ba:59:c1:34:5b:b5:09:59:8f:76:2f:
6c:62:19:4a:7d:1d:70:df:2d:0a:cc:ca:8f:21:4f:
63:cc:e1:2e:52:54:66:31:9f:67:78:63:2f:dd:1c:
42:ad:f0:1a:01:0f:ef:24:16:d5:aa:f4:b3:67:3e:
de:d9:8d:2d:90:de:d6:ac:2b:36:d0:64:61:5d:3f:
c0:cc:43:66:40:1f:d3:b0:be:97:9c:48:e3:50:b3:
04:c0:0a:9e:cc:05:68:af:5b:54:8c:6d:29:fb:11:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C4:32:7A:62:2B:81:06:8E:77:1C:75:4C:A7:41:C3:C0:EA:98:04
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/asQyemIrgQaOdxx1TKdBw8DqmAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.36.0/22
Signature Algorithm: sha256WithRSAEncryption
22:f6:c3:f3:ed:0f:aa:79:0b:48:c5:4c:f7:dc:4e:1b:1d:ad:
5f:56:e8:34:03:b6:0f:73:2c:6d:e8:3c:fb:ad:89:69:e5:42:
dc:de:47:1c:8b:c1:f1:62:ce:28:f3:33:c5:ef:35:17:8d:96:
4f:39:99:d5:b8:08:76:d7:35:e4:13:ab:75:0a:8a:34:53:9c:
ca:c2:15:0e:0b:14:10:5e:73:1d:39:01:a3:87:e0:1f:87:5c:
3a:1e:6d:63:01:95:a5:5b:c7:e0:31:f5:db:1e:32:30:ca:52:
c1:6d:0b:f6:a1:c3:60:b8:ab:41:a3:e5:9d:e3:45:2f:b0:6e:
9c:07:bb:98:cc:43:92:7a:d3:27:4c:08:08:d0:e5:00:0f:d8:
3d:78:08:30:94:6a:fc:31:d7:8b:56:2c:98:63:46:88:ae:a2:
13:09:54:c3:b0:d0:8e:d8:2d:d6:ee:35:a3:24:6d:58:62:cf:
51:dd:b7:67:00:8c:61:81:85:17:a0:20:9b:d5:ef:50:ff:11:
0e:b0:4f:2d:21:e1:44:e3:d5:a9:97:fa:75:00:f4:e3:00:24:
23:07:cb:31:b9:0a:9e:85:f3:c7:60:90:f3:f5:2c:d6:f6:ef:
d9:50:22:d4:8d:b7:5f:7f:fe:15:27:52:a8:c0:f4:dc:68:b4:
81:43:1e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:37:14 2024 by rpki-client on console-ams.rpki-client.org