Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/QyrTBsiDGTofGa2BjxVpVCOaltU.roa
File: QyrTBsiDGTofGa2BjxVpVCOaltU.roa (raw, json)
Hash identifier: VP36oxYLkHgCU7S/VgLWqWAWS/xLOaxWN31ycZP7nLY=
Subject key identifier: 43:2A:D3:06:C8:83:19:3A:1F:19:AD:81:8F:15:69:54:23:9A:96:D5
Certificate issuer: /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Certificate serial: 018F7D70F4789B5474A842C45642712D1C4F
Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/QyrTBsiDGTofGa2BjxVpVCOaltU.roa
Signing time: Wed 15 May 2024 18:08:25 +0000
ROA not before: Wed 15 May 2024 18:08:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201709
IP address blocks: 193.28.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7d:70:f4:78:9b:54:74:a8:42:c4:56:42:71:2d:1c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Validity
Not Before: May 15 18:08:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=432ad306c883193a1f19ad818f156954239a96d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:2f:3a:42:1a:ea:31:08:79:bd:77:84:aa:
f2:e4:56:0d:0c:81:a6:3d:dd:38:85:8e:72:c6:3e:
39:33:40:c6:c3:4e:53:7f:04:2e:6d:95:e0:25:73:
c7:95:3a:ef:13:fe:37:5d:49:78:5f:18:f7:22:6d:
5b:7f:c1:5f:70:26:41:ac:98:de:7f:89:6d:66:32:
2a:18:d9:ea:da:d8:19:c7:01:71:c1:66:c8:8f:5a:
2a:05:34:ec:5c:14:a6:47:5e:9d:08:b6:36:53:97:
81:7e:2e:3d:82:60:4d:9e:52:2f:b2:5b:8d:0f:52:
b4:c1:2f:75:e2:47:64:ec:03:f6:a0:35:19:7d:ff:
6f:00:0f:23:4c:02:33:9c:ce:65:b3:aa:a5:d0:74:
69:17:7b:07:fc:9f:f7:f0:eb:d7:cc:d9:37:7b:8e:
a8:54:d9:a2:b6:9e:51:9a:83:de:34:1e:97:99:23:
30:6d:db:d0:51:9a:08:0b:de:a6:ce:29:9d:13:54:
bd:48:a9:ef:a8:11:0e:ac:51:4a:c8:5c:78:fb:c8:
00:1e:0d:fa:46:ee:ec:26:93:a0:19:df:ea:3f:f8:
d6:3d:21:1f:ac:e7:f7:91:37:22:18:d5:4f:b5:d7:
43:14:22:9a:1d:f6:f4:94:c4:db:e8:30:54:a3:30:
e7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2A:D3:06:C8:83:19:3A:1F:19:AD:81:8F:15:69:54:23:9A:96:D5
X509v3 Authority Key Identifier:
keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/QyrTBsiDGTofGa2BjxVpVCOaltU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.55.0/24
Signature Algorithm: sha256WithRSAEncryption
68:31:2a:a7:f2:86:19:ca:94:eb:c3:76:99:f3:f2:b4:91:07:
7f:32:0a:e5:39:92:32:95:22:95:40:82:85:3e:be:d1:ae:62:
90:9f:a4:70:aa:94:16:eb:dc:ad:7c:d5:52:24:92:6d:e4:77:
8a:22:2f:c4:d6:f6:98:a7:be:92:36:a1:73:fd:9d:5c:65:2f:
4f:4d:4e:45:3f:c6:1d:51:56:24:1a:6b:10:36:29:28:cc:9d:
c3:1b:05:82:e8:ae:45:82:b5:70:46:9d:4f:a8:7a:d2:4e:aa:
2d:99:d3:23:6d:cf:ff:5d:23:95:88:40:90:b5:97:19:2c:ce:
5e:aa:07:89:3e:eb:08:de:15:f7:62:db:f9:1e:6c:ad:ac:f4:
06:90:bf:1b:1c:14:e0:f8:db:ca:29:64:0a:2e:f9:0e:20:ab:
99:ca:ac:80:80:5b:ba:da:d1:e6:ac:f7:19:8b:43:8e:28:9d:
64:6c:22:00:d6:b5:00:72:6a:11:1e:fa:c0:96:64:9c:bc:27:
e1:dc:89:1a:53:f8:57:d2:2c:7a:19:cb:92:15:6c:06:56:fe:
93:7c:7e:20:8d:59:73:50:7a:1a:5d:e1:2c:c1:c8:dd:3d:32:
1c:d8:49:01:e1:7b:ba:ad:67:44:25:0e:e9:81:b5:b6:91:ea:
4e:f4:40:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 18:16:49 2024 by rpki-client on console-fra.rpki-client.org