Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/QMQMMKsCBsI4CRmbHp9HvS8F5gE.roa
File: QMQMMKsCBsI4CRmbHp9HvS8F5gE.roa (raw, json)
Hash identifier: rnQBQS8fD48Lqmc1SVpgTgRS2glgl2eJyXoDYbwO7aU=
Subject key identifier: 40:C4:0C:30:AB:02:06:C2:38:09:19:9B:1E:9F:47:BD:2F:05:E6:01
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 019287217DD4F2C8F4D98EAD4858DA276529
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/QMQMMKsCBsI4CRmbHp9HvS8F5gE.roa
Signing time: Sun 13 Oct 2024 18:26:11 +0000
ROA not before: Sun 13 Oct 2024 18:26:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204393
IP address blocks: 103.215.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:87:21:7d:d4:f2:c8:f4:d9:8e:ad:48:58:da:27:65:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Oct 13 18:26:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40c40c30ab0206c23809199b1e9f47bd2f05e601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:d8:09:9b:b0:3a:2a:bd:04:bc:c4:ef:c4:
9b:e0:80:ba:37:08:f9:91:f0:3a:ad:de:a9:ff:49:
b6:0d:49:96:ae:15:03:24:66:34:e9:c1:56:15:f0:
7c:34:0a:73:af:25:ca:91:4e:d4:06:8d:f7:da:d2:
3f:aa:7c:58:61:0e:83:c7:01:ba:2f:8f:a0:03:aa:
ef:d6:27:a4:62:cf:bd:28:9d:13:4e:62:a4:d6:bd:
45:74:a5:f6:7c:aa:a7:a7:09:f0:20:c6:65:78:db:
39:01:8a:f2:08:8e:b5:82:9d:15:c9:0f:c1:ca:2c:
9d:79:18:57:da:e2:67:1f:63:d4:ac:08:9a:5d:56:
57:28:39:3c:e0:e4:4c:38:29:66:31:88:ce:f2:de:
6e:2f:15:41:ed:39:b2:f2:d4:59:00:f4:67:33:75:
a9:02:e1:0b:bf:ed:04:d9:1e:1e:32:18:33:58:62:
c1:a8:6f:05:02:92:1f:38:c6:3c:80:a4:d3:58:66:
27:0c:1f:a9:29:65:25:35:71:02:91:95:7e:eb:fe:
b1:a1:36:39:68:9d:89:ec:d5:6d:f8:de:d4:df:f9:
b7:bb:86:03:2c:b1:c3:c0:18:46:a1:88:8c:fb:3d:
dc:f5:c6:48:e0:39:e2:75:72:82:8e:ab:ab:0c:27:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C4:0C:30:AB:02:06:C2:38:09:19:9B:1E:9F:47:BD:2F:05:E6:01
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/QMQMMKsCBsI4CRmbHp9HvS8F5gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.222.0/24
Signature Algorithm: sha256WithRSAEncryption
72:0b:b9:28:65:1b:ef:28:ee:11:ec:b9:5c:a7:d9:ae:d1:75:
3b:20:67:b0:3f:e6:b8:82:bf:2a:f0:d4:4a:8e:06:7c:23:37:
ad:19:28:d1:cf:47:9e:59:d0:db:10:aa:45:db:d8:b7:67:48:
9f:db:b1:58:8b:c6:c1:c5:db:b7:ac:c9:56:bc:ee:8c:26:fc:
e7:52:01:32:f6:a6:95:d1:94:04:4b:7e:eb:45:50:50:e3:30:
91:1a:6b:79:36:64:80:a2:6f:a8:e4:cc:1c:9b:d8:7d:60:08:
ab:7e:3a:5c:3c:31:6d:db:22:62:7a:31:d8:fc:19:8c:41:45:
ce:05:3d:f6:09:c4:b6:f6:22:30:52:0e:94:31:6e:c3:ea:d5:
a3:b8:cf:92:e2:6a:19:14:b7:0a:17:9e:1f:81:20:bc:83:08:
63:b8:0c:14:24:44:fe:c5:e6:97:5b:d0:94:3f:5f:a8:7e:73:
70:37:e0:63:68:c6:d6:b2:c7:bc:55:a6:4a:5d:2d:b9:f2:8b:
7a:ca:49:91:2a:3b:f7:61:38:c0:38:35:9c:1a:ba:e8:af:11:
c1:6f:64:b8:54:b3:81:bc:1f:97:61:32:98:21:97:ce:fe:1d:
ac:7e:e4:3e:df:b4:8e:e8:7c:37:1b:8c:8d:97:16:05:60:45:
a6:a0:27:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:13 2024 by rpki-client on console-fra.rpki-client.org