Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/qVR7cNRaSfd9E9sZr9bORI5h-Ho.roa
File: qVR7cNRaSfd9E9sZr9bORI5h-Ho.roa (raw, json)
Hash identifier: 9hvl3/ycJJRFc3yuTEgfHZcR7CWsdQR9kLeDmD4zVHc=
Subject key identifier: A9:54:7B:70:D4:5A:49:F7:7D:13:DB:19:AF:D6:CE:44:8E:61:F8:7A
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 018CC56EF612E529AE875C21943C8FE55C59
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/qVR7cNRaSfd9E9sZr9bORI5h-Ho.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29286
IP address blocks: 192.58.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f6:12:e5:29:ae:87:5c:21:94:3c:8f:e5:5c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9547b70d45a49f77d13db19afd6ce448e61f87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:61:a9:56:a6:8e:fe:66:4c:87:61:98:f1:
93:0c:90:b1:9d:23:af:d5:7c:c5:cb:07:8e:29:be:
71:a7:da:60:c5:fa:30:b1:bb:c0:4b:98:b8:98:01:
03:70:ed:f4:e3:85:9a:62:4a:81:d5:93:de:75:19:
c8:00:b8:8e:ab:6a:ee:3c:39:28:c5:5c:94:9d:a7:
f6:fe:a4:90:84:ac:b5:ef:61:2d:ec:e2:f1:6e:9e:
2a:e1:e8:ae:2b:65:b7:6a:29:69:da:8d:40:ef:ad:
e0:99:83:fc:f1:2c:e6:16:73:05:4e:09:0b:d1:07:
53:7a:4c:ed:b1:58:ef:41:ad:0a:f9:6e:d4:03:c6:
59:99:5f:80:75:21:46:34:54:bc:14:20:c8:57:d5:
23:3e:af:c4:0a:d2:a0:39:7e:a4:1b:f2:41:66:b9:
6e:8d:32:29:d0:89:48:04:be:1f:1b:f5:d6:17:b5:
96:c0:fe:fe:7c:e5:26:b2:6c:34:02:27:35:e7:ce:
1a:7c:87:13:66:6d:30:46:20:2d:55:c4:be:1a:e3:
77:13:71:58:c9:a4:10:a8:8b:04:2a:59:ae:a7:ba:
95:ac:c0:d5:f9:91:c3:7d:c4:92:0d:8d:cb:5a:c5:
40:18:ff:1d:84:51:21:0b:cc:11:c1:c2:3f:62:ec:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:54:7B:70:D4:5A:49:F7:7D:13:DB:19:AF:D6:CE:44:8E:61:F8:7A
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/qVR7cNRaSfd9E9sZr9bORI5h-Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.58.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:fe:b7:cd:b0:58:65:cd:19:40:f7:f3:26:26:90:d5:f4:c8:
e0:a2:ab:7b:02:db:cf:8e:e8:c7:58:d7:63:6c:2d:e6:2a:1b:
99:f3:b4:a2:14:c2:16:83:dc:97:01:d0:f2:d2:55:89:bc:c4:
9f:f8:b5:27:20:96:dd:e8:eb:08:68:7a:17:cc:a8:fd:1c:03:
88:48:26:92:09:ac:4e:c6:72:64:61:4e:cb:32:7d:1a:d9:cd:
28:68:0c:6d:c4:42:92:14:fe:7a:ce:bf:0b:e4:4e:a8:d6:c8:
2a:c6:d2:fa:28:85:96:c5:35:26:a0:52:c7:66:7d:66:98:b2:
a4:64:ae:ba:b0:88:f4:53:57:bd:e4:4e:c8:de:d8:8a:5d:a2:
5f:a1:8b:dc:7e:7c:99:fd:4a:b2:bb:77:a4:be:c1:96:52:cf:
31:56:e9:c8:f5:77:32:87:e7:f2:ec:9c:2a:f0:19:c1:b2:f7:
ad:2b:88:5f:88:b6:34:54:50:59:05:18:89:43:c2:0b:05:97:
69:c5:44:47:b3:d7:a0:f1:77:af:60:a0:66:4f:4d:74:15:2a:
ff:4e:7a:90:24:fb:a4:a3:f7:51:38:86:7d:31:72:fc:8e:a8:
87:66:a9:ec:83:bc:a9:15:a4:ee:d1:30:7c:62:19:55:e2:af:
c4:ef:37:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:29:42 2024 by rpki-client on console-ams.rpki-client.org