Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/qZ9iKrmegg0DMpNtgBxagSmDGDI.roa
File: qZ9iKrmegg0DMpNtgBxagSmDGDI.roa (raw, json)
Hash identifier: B9g82iFP+9au+Z8up9hDfgMUhvS8LDjcGyVGGN9uNbE=
Subject key identifier: A9:9F:62:2A:B9:9E:82:0D:03:32:93:6D:80:1C:5A:81:29:83:18:32
Certificate issuer: /CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1
Certificate serial: 018CC8704DDFC89BD83A05F5CEB1AB8B130B
Authority key identifier: C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/qZ9iKrmegg0DMpNtgBxagSmDGDI.roa
Signing time: Tue 02 Jan 2024 04:30:52 +0000
ROA not before: Tue 02 Jan 2024 04:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41599
IP address blocks: 195.3.252.0/22 maxlen: 24
2001:67c:380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:4d:df:c8:9b:d8:3a:05:f5:ce:b1:ab:8b:13:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1
Validity
Not Before: Jan 2 04:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a99f622ab99e820d0332936d801c5a8129831832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e8:44:f1:c3:d8:c3:22:4d:b3:5a:3e:7d:68:
5a:81:c1:7b:d1:ff:92:42:be:cb:93:ba:9f:c7:98:
06:41:fa:e9:ef:40:bc:7d:7f:c3:6c:4e:85:ed:23:
f0:cb:3b:cb:57:48:8e:0e:83:5d:3b:58:61:f2:29:
16:1b:df:c3:0d:b1:67:2c:9b:e5:3a:8f:e2:79:a0:
1f:ec:d7:61:56:09:17:73:05:da:cb:d4:47:88:98:
30:c7:a0:db:da:5e:00:0f:2b:ad:ec:32:d9:b2:16:
0d:13:a3:3a:32:8a:0e:4f:c4:ce:fb:b8:d8:46:7c:
c5:c9:90:5f:d1:30:c9:28:a1:f2:3d:42:78:71:d2:
f2:52:b7:9e:e6:6f:f7:2e:45:b1:02:6b:b6:b9:04:
ff:f2:53:51:7d:38:51:37:15:24:25:9b:8d:00:26:
5e:ac:d8:69:92:2d:34:da:9b:43:4a:9a:50:f0:10:
e6:2d:b0:c1:7d:5c:e7:8d:f3:05:b1:c5:1c:9a:14:
74:95:f0:4a:60:e5:f8:35:3f:11:6a:cb:16:36:63:
97:fa:68:8d:30:59:80:91:f0:17:4f:43:7d:96:f7:
d9:ed:ed:29:5f:c4:23:f1:fe:bf:19:62:66:23:21:
9c:44:d1:b5:89:c5:73:cd:ea:0d:43:68:cc:b5:0c:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:62:2A:B9:9E:82:0D:03:32:93:6D:80:1C:5A:81:29:83:18:32
X509v3 Authority Key Identifier:
keyid:C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/qZ9iKrmegg0DMpNtgBxagSmDGDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.3.252.0/22
IPv6:
2001:67c:380::/48
Signature Algorithm: sha256WithRSAEncryption
0f:9a:50:6d:47:b4:46:03:80:66:2b:89:f4:c5:ba:06:39:a3:
6c:2c:39:f7:ef:de:3b:39:c7:90:53:d4:0b:fd:33:79:2e:d5:
25:14:48:47:2a:aa:8b:c5:33:72:df:06:78:45:28:0e:57:a8:
ac:2a:2e:a3:1c:12:20:ee:cd:73:83:4f:1e:ed:f1:84:0d:82:
65:2a:3d:29:eb:b3:b2:98:08:7c:2a:12:ce:ec:39:b8:e4:94:
05:ea:99:0a:6d:f8:fc:87:cb:a0:6c:8a:94:87:4c:cd:4a:1e:
d3:e2:8d:a7:9f:c0:7e:9a:aa:59:22:bd:57:a3:4b:03:71:da:
a4:0e:2c:67:02:59:eb:0e:4b:a3:71:7a:b5:71:e0:9c:d1:a2:
5c:b3:75:63:ae:0b:b5:8d:19:f4:71:54:49:01:54:73:70:43:
d6:e9:7c:c4:2a:61:07:80:6c:4b:7c:62:ef:e6:2d:19:ab:8a:
5c:56:5f:21:f5:e5:9b:7d:bb:2c:ed:c6:56:29:56:3a:2a:8b:
ab:14:4a:b3:69:90:fe:01:80:1c:cb:a3:e1:39:16:6e:2f:2b:
7a:e8:7d:5c:f6:3c:e9:bb:d7:ab:b5:69:b7:d7:c8:58:7d:26:
cc:4f:b7:4f:64:55:84:16:de:a4:94:86:85:ac:93:46:b9:59:
da:a3:c2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:17:03 2024 by rpki-client on console-fra.rpki-client.org