Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/pq8Dr3gOshYrKSakILJyfcjbVPU.roa
File: pq8Dr3gOshYrKSakILJyfcjbVPU.roa (raw, json)
Hash identifier: PxAinov5865x65Tzu+OsEh0SJUQi9KQfkW/3DN5vdHU=
Subject key identifier: A6:AF:03:AF:78:0E:B2:16:2B:29:26:A4:20:B2:72:7D:C8:DB:54:F5
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 018CC86F6E6AD4BCCEAAF8111BDF3A12F88F
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/pq8Dr3gOshYrKSakILJyfcjbVPU.roa
Signing time: Tue 02 Jan 2024 04:29:55 +0000
ROA not before: Tue 02 Jan 2024 04:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 57.190.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:6e:6a:d4:bc:ce:aa:f8:11:1b:df:3a:12:f8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Jan 2 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6af03af780eb2162b2926a420b2727dc8db54f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:67:55:44:6c:05:54:b5:e8:b0:7b:5e:08:
e2:0c:5e:2a:e5:b8:1d:aa:be:e0:da:c3:1e:03:66:
e8:ac:e3:4d:75:fb:64:32:0e:03:e4:27:d5:ac:8b:
5f:9d:1f:b5:ff:a1:fe:69:6c:4b:20:63:af:e1:65:
30:5a:ed:6e:a9:02:62:f9:3d:03:98:e1:a3:48:07:
73:89:97:ea:35:da:2a:d9:13:5c:82:e0:59:06:a7:
48:ce:a7:2c:c1:5b:d0:d4:d2:4d:ae:16:a8:14:e4:
42:ba:04:e8:91:a0:fb:58:98:2f:e7:c8:c9:8d:9f:
aa:80:fd:fa:f3:82:f1:7f:0d:17:a4:72:a9:0e:b6:
08:88:76:ad:75:75:aa:a7:ef:b1:59:0a:b9:df:93:
ce:43:79:8b:04:ca:c4:9c:1f:0f:4c:9b:36:25:fb:
b0:97:0d:4f:18:ee:6d:be:20:06:87:f5:10:f2:81:
2d:a3:02:69:28:4b:c7:fa:3f:d5:b7:bb:55:75:91:
b0:0b:d6:04:47:df:23:8b:75:4c:47:64:97:eb:af:
ea:a1:7f:34:60:20:49:e7:5f:82:25:1e:2c:08:b2:
f7:02:14:9f:cd:d5:0f:ef:18:d0:8d:45:cd:14:70:
74:fc:6a:19:f2:77:76:52:18:af:f0:e9:b8:bd:e1:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AF:03:AF:78:0E:B2:16:2B:29:26:A4:20:B2:72:7D:C8:DB:54:F5
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/pq8Dr3gOshYrKSakILJyfcjbVPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.190.60.0/24
Signature Algorithm: sha256WithRSAEncryption
04:13:44:6b:a7:8d:47:a8:84:58:45:84:29:75:61:44:08:c9:
b4:3f:ce:a6:a8:2b:e5:b8:d7:57:5b:61:80:30:0d:fd:dd:28:
fd:6c:3c:60:1c:0d:18:f9:05:9b:b6:c3:b9:94:46:6e:6d:e5:
a2:a4:38:ee:66:b3:9a:29:f7:06:46:4b:62:a6:c1:be:46:57:
94:a8:a3:78:6d:98:42:85:a9:0e:8b:b7:70:55:4b:94:ea:a0:
4a:5c:a3:02:2c:dc:c8:29:a6:4f:0c:d0:55:d7:c7:ef:b2:1d:
ae:be:26:08:77:e4:66:a7:01:f5:77:26:6c:72:a9:05:26:66:
a3:d1:83:a6:a5:5d:bd:e1:70:ff:b5:b7:1b:04:e9:a8:87:85:
eb:4a:de:a8:9c:52:e6:b1:0d:e3:7e:8b:47:0d:76:8b:e2:b6:
a2:74:81:80:32:20:fe:15:40:d2:b8:15:3d:8e:f5:4d:48:e9:
0d:66:0a:0d:25:c0:9a:c9:5d:31:ab:66:58:0c:eb:d2:68:d3:
1c:9f:e2:53:c6:ef:00:14:80:91:10:da:62:b6:01:c0:54:1e:
9e:83:b4:a3:7e:c0:1f:e4:36:34:da:29:a7:6e:df:c6:07:c2:
71:a4:bb:46:00:61:21:95:76:3f:18:10:8a:a9:97:be:80:91:
1f:f1:16:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:00:20 2024 by rpki-client on console-fra.rpki-client.org