Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/CqTq8SBXQ_LqCnoambrGq9dPGmM.roa
File: CqTq8SBXQ_LqCnoambrGq9dPGmM.roa (raw, json)
Hash identifier: pEpvDKVw1PX0vWNO0Eq9eZ0StJvfxCsTDO4TAtA/KH4=
Subject key identifier: 0A:A4:EA:F1:20:57:43:F2:EA:0A:7A:1A:99:BA:C6:AB:D7:4F:1A:63
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 018CC6499796B36F1C38FC1A436A6DC82AFF
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/CqTq8SBXQ_LqCnoambrGq9dPGmM.roa
Signing time: Mon 01 Jan 2024 18:29:20 +0000
ROA not before: Mon 01 Jan 2024 18:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2119
IP address blocks: 193.161.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:97:96:b3:6f:1c:38:fc:1a:43:6a:6d:c8:2a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Jan 1 18:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0aa4eaf1205743f2ea0a7a1a99bac6abd74f1a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:d2:c5:90:0c:5c:63:a4:65:56:c7:16:15:
f0:bb:74:ff:e1:34:fc:3b:fd:cd:29:23:c1:0d:96:
3d:92:c9:4a:c2:45:fb:b6:d4:cc:12:ed:8d:68:28:
c3:61:7f:68:44:50:9c:54:74:48:d7:99:a8:27:0a:
75:24:a7:d8:e7:5d:27:c1:3a:a4:7a:84:97:a0:18:
35:82:0a:5d:71:4e:c0:72:8e:db:be:6b:f1:dc:07:
c5:f3:74:55:9e:47:cf:b7:09:27:1f:e0:f6:96:0c:
b4:58:33:af:e1:52:08:b7:6d:1e:fc:6b:0d:0f:6d:
60:90:f1:48:fa:2d:6f:b2:87:8b:07:f6:96:be:c2:
09:61:fa:14:34:7c:cc:17:5e:6f:aa:51:90:fa:a0:
c8:59:e0:f3:b2:1c:3e:90:98:91:3b:aa:82:2b:ae:
7b:ff:87:a5:63:46:6e:02:16:04:a1:22:c4:ca:81:
3d:c2:ad:3f:b7:2e:d5:4f:0f:9d:d8:d0:13:85:b5:
f9:af:ff:6e:cc:bd:28:ad:8e:bb:df:e4:d3:a1:40:
6a:79:0b:2d:64:75:f4:49:36:0a:3b:51:2d:45:93:
b6:93:1d:6c:29:64:13:9b:8b:eb:c8:ae:fd:d9:23:
ee:ff:8d:bb:0f:31:a9:b9:ec:ea:3d:d8:4a:e6:c4:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A4:EA:F1:20:57:43:F2:EA:0A:7A:1A:99:BA:C6:AB:D7:4F:1A:63
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/CqTq8SBXQ_LqCnoambrGq9dPGmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.208.0/22
Signature Algorithm: sha256WithRSAEncryption
99:be:0f:e0:e3:b6:9f:9b:cc:14:80:ba:cf:7d:50:0c:41:06:
32:51:15:12:74:58:5a:77:cc:7d:1e:55:46:ad:5e:db:f4:85:
fc:e8:c8:97:b0:61:9f:3a:c1:da:13:ae:4a:cd:cc:e7:1e:ba:
75:c5:39:05:9b:b6:e8:ed:d7:d7:03:e9:3e:a1:ee:d9:e2:dd:
79:32:70:18:b2:81:4c:3a:cb:b2:a9:5c:29:83:7d:2a:d8:4d:
41:67:8a:d5:b9:fa:21:1e:5c:43:82:b3:b8:a4:5b:06:2f:4f:
9a:1f:d4:1f:3a:88:6e:66:cb:cb:60:7f:e3:18:78:ee:20:5c:
17:c9:33:57:d1:d8:ba:d8:56:1d:0d:87:f7:2a:14:1c:05:94:
34:18:ae:7b:37:36:60:30:ef:79:b6:38:50:ee:16:28:d9:a3:
68:17:0b:07:a6:4d:c6:22:74:c2:1b:80:16:0c:86:e4:d3:e8:
54:c1:2d:df:8d:cf:3c:2e:23:65:e2:c3:5e:fd:33:f8:9a:05:
55:be:77:c0:bb:f6:f3:22:57:de:05:7b:04:2b:c3:ce:a9:77:
92:c8:46:da:95:88:d9:54:15:22:98:9c:d0:c5:60:0e:2c:c5:
d7:8c:c0:21:7e:0f:e6:39:4e:8c:5f:53:cb:ba:e6:1c:20:65:
42:5e:3f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:02:15 2024 by rpki-client on console-fra.rpki-client.org