Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/c-qz21WLjIgnp6jMw2CwZxJKMxM.roa
File: c-qz21WLjIgnp6jMw2CwZxJKMxM.roa (raw, json)
Hash identifier: +p5fsFATD06jL/hc+bHYOLiqBbdUOYXnsU50LImMvSw=
Subject key identifier: 73:EA:B3:DB:55:8B:8C:88:27:A7:A8:CC:C3:60:B0:67:12:4A:33:13
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 018CC49384533180D9E50D8EAF1FDD5F3CD3
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/c-qz21WLjIgnp6jMw2CwZxJKMxM.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3561
IP address blocks: 62.216.64.0/21 maxlen: 21
188.74.136.0/22 maxlen: 22
178.157.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:84:53:31:80:d9:e5:0d:8e:af:1f:dd:5f:3c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73eab3db558b8c8827a7a8ccc360b067124a3313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:ad:e7:25:bd:4a:ae:70:21:98:99:53:32:
1d:8e:e1:80:63:64:21:60:da:d2:0a:40:c8:61:e2:
c4:6f:b4:e1:6a:d9:a1:34:a5:db:cc:b7:50:ce:df:
28:49:aa:f4:1e:11:3a:22:10:24:6d:81:3a:a0:55:
74:91:65:91:79:13:d9:76:05:25:bb:fb:73:6e:19:
d6:1f:9d:ce:93:6b:ab:3c:84:17:2a:37:05:a5:2e:
75:aa:27:7c:7d:47:e0:7b:57:0a:cc:65:a7:0a:dd:
49:96:04:1b:76:65:2d:63:92:13:a2:b4:3e:9e:90:
97:78:48:e0:f1:0b:39:2b:cf:a1:37:95:90:87:3f:
a9:b1:7f:eb:66:55:a8:39:89:51:6b:f1:1e:89:42:
41:06:f4:9b:90:9b:4d:18:97:e3:9a:ff:4d:d3:f6:
4d:72:04:fb:5f:fb:0d:48:00:e5:2b:09:a6:da:b0:
ad:28:97:81:5e:de:05:0b:a8:15:d7:92:bf:98:3f:
da:1e:62:3e:2f:ec:73:ff:15:4b:9a:24:2a:ba:44:
fc:fa:ff:95:11:a2:10:3a:bf:a9:e9:2c:34:b2:a8:
16:dc:53:8a:a7:64:4a:ac:bd:4f:78:42:10:f9:2e:
4b:c1:aa:37:a2:f4:39:73:65:a6:8a:a1:f6:20:71:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:B3:DB:55:8B:8C:88:27:A7:A8:CC:C3:60:B0:67:12:4A:33:13
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/c-qz21WLjIgnp6jMw2CwZxJKMxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.216.64.0/21
178.157.64.0/22
188.74.136.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:8c:b9:41:b6:47:61:80:ec:a7:71:d5:a7:2b:25:33:9c:4d:
b6:33:66:b0:cd:9c:ea:90:b6:16:0a:28:7d:b1:dd:98:09:e5:
da:c8:05:ce:ec:83:52:f6:63:3f:18:8e:13:1f:10:62:66:f8:
d7:59:c4:df:a1:3d:05:a3:af:c1:6e:d1:1f:5a:d5:66:c7:04:
c4:86:e4:d1:ec:fd:db:30:d1:fe:87:4a:58:37:fd:01:a8:45:
b2:be:13:22:fb:98:72:34:24:32:51:dc:79:e0:bb:5c:40:f7:
09:65:6a:d5:08:10:2c:06:bd:02:dc:49:cb:2b:df:10:10:03:
35:69:aa:ed:75:d2:91:50:a8:22:47:b2:7c:1b:69:c6:fd:16:
79:09:ba:db:0a:7c:61:d5:57:1d:46:8d:a1:47:19:f1:bf:f1:
6d:4f:30:b5:f0:89:3a:7f:e2:d6:59:08:07:48:26:76:29:78:
df:39:7b:a4:55:64:97:f6:35:2e:ab:fc:5c:59:8d:74:e5:7f:
c4:ec:c1:08:ab:34:c3:04:50:6d:ed:92:c3:fe:56:38:01:77:
cd:ab:f4:62:f5:68:a3:66:a5:1b:83:c7:4f:12:f5:35:ca:de:
f9:a7:13:ea:31:02:36:75:f2:91:b5:f1:c1:2d:95:2b:5e:8f:
73:d5:64:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:51:32 2024 by rpki-client on console-ams.rpki-client.org