Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/q2odES00ZaywK_lyL-iBl5gTFdE.roa
File: q2odES00ZaywK_lyL-iBl5gTFdE.roa (raw, json)
Hash identifier: KpmPlX19/0R2vKoSsb6NO3RUYZu0I5YabHEN8hdgPnQ=
Subject key identifier: AB:6A:1D:11:2D:34:65:AC:B0:2B:F9:72:2F:E8:81:97:98:13:15:D1
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 018CC3495B56DAD68BEAEC836F473F7FFAEA
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/q2odES00ZaywK_lyL-iBl5gTFdE.roa
Signing time: Mon 01 Jan 2024 04:30:13 +0000
ROA not before: Mon 01 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 192.33.88.0/24 maxlen: 24
2001:67c:2e40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5b:56:da:d6:8b:ea:ec:83:6f:47:3f:7f:fa:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab6a1d112d3465acb02bf9722fe88197981315d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:41:df:47:06:cb:54:87:e0:7d:cf:1b:e7:46:
6d:aa:83:14:2e:53:a2:65:c9:6f:bb:75:2c:89:93:
f8:cc:1a:99:6d:da:0f:45:a2:e3:08:d6:5b:c0:da:
b5:af:f9:5d:89:9d:5f:26:2a:b6:4e:8f:02:5d:d5:
12:06:19:67:0b:38:b4:4c:d1:39:70:ec:bc:bc:79:
4b:3d:39:ad:8e:f1:8a:7d:1a:d3:37:33:d5:38:e3:
b2:5b:51:a7:05:11:91:1c:15:97:a4:4b:34:27:29:
ff:9e:58:26:05:57:d4:6d:82:90:cf:d7:b5:ad:9f:
58:55:5e:97:30:94:62:9d:ad:fe:89:d3:4c:ba:8d:
e9:9c:0a:49:99:0a:34:e7:d7:ea:c8:ba:c5:e9:d0:
1e:7d:6a:86:3c:74:0f:1b:9a:4f:0d:94:dd:71:43:
b7:31:a1:4a:6f:01:2f:bc:71:13:16:35:89:62:cc:
65:2b:48:2b:90:b6:14:b0:43:3b:44:19:a4:ea:b6:
c6:d4:a6:90:cf:df:68:9c:e7:07:3b:22:e2:d5:dc:
6b:1c:b7:24:04:bc:d5:56:ce:fb:c7:68:34:b0:23:
a5:95:fc:df:45:62:a6:13:fd:36:49:9a:6a:6e:6c:
0a:26:3c:4a:3f:65:f3:c6:5f:d5:78:19:b5:dd:b7:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6A:1D:11:2D:34:65:AC:B0:2B:F9:72:2F:E8:81:97:98:13:15:D1
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/q2odES00ZaywK_lyL-iBl5gTFdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.33.88.0/24
IPv6:
2001:67c:2e40::/48
Signature Algorithm: sha256WithRSAEncryption
31:7b:84:a7:09:6e:1e:d7:ec:19:24:c2:ea:27:53:d5:bf:77:
c6:6d:86:7a:18:09:91:8d:70:d6:65:89:0b:fd:06:7f:a5:7e:
a7:f2:2e:d9:d6:07:1c:f0:04:5d:76:ef:e5:1f:34:a8:ec:ef:
57:4a:81:11:d8:fe:86:83:3c:e3:c4:48:9f:94:f7:30:00:b9:
6a:1c:89:ea:1c:3c:74:13:e4:3f:d0:7b:cd:d2:3b:75:13:08:
f7:6b:ee:8a:52:4a:fc:54:34:ba:e7:7e:70:f1:70:5c:d8:79:
ca:92:a8:08:82:13:24:b4:c1:e0:36:3e:b2:98:46:85:83:55:
2c:7c:4f:e6:92:f5:12:ca:e1:18:2c:ee:50:a2:4e:c7:b7:b8:
1a:a3:80:bd:13:d7:88:87:98:be:79:16:b6:b8:7b:c8:ee:14:
02:b1:59:dc:ea:67:55:25:d7:35:89:14:64:33:bf:85:48:21:
17:0e:8e:f8:01:da:10:2b:00:5b:39:30:48:39:cb:37:ff:85:
48:86:a8:4c:fc:82:5d:c8:06:2e:ab:19:50:d3:ef:35:3f:07:
cf:c4:6a:a9:54:2f:2e:53:f6:7e:a9:19:25:5f:42:5d:aa:6a:
ce:c4:0c:b2:21:f6:42:e3:3e:69:03:d7:40:d4:2f:ec:e1:55:
56:f0:cc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:25:40 2024 by rpki-client on console-ams.rpki-client.org