Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/qx0GWk_7LcW38t63hFVM1fpQo08.roa
File: qx0GWk_7LcW38t63hFVM1fpQo08.roa (raw, json)
Hash identifier: qg/+IV1oO60Jg9nd4ZXZr0MQnQkWi6mkRs2DLHnV6iQ=
Subject key identifier: AB:1D:06:5A:4F:FB:2D:C5:B7:F2:DE:B7:84:55:4C:D5:FA:50:A3:4F
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0192487CC2ED5F334DEEDC8368F157DC5786
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/qx0GWk_7LcW38t63hFVM1fpQo08.roa
Signing time: Tue 01 Oct 2024 14:29:48 +0000
ROA not before: Tue 01 Oct 2024 14:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12874
IP address blocks: 185.162.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:48:7c:c2:ed:5f:33:4d:ee:dc:83:68:f1:57:dc:57:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Oct 1 14:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab1d065a4ffb2dc5b7f2deb784554cd5fa50a34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:0e:2b:2b:2f:07:6c:58:90:58:ab:c1:ed:
7f:49:28:e9:a5:60:af:05:4f:df:6f:e4:77:f4:e3:
6d:46:a1:4f:87:9b:31:65:64:6c:25:ed:a4:6d:b7:
dd:61:75:43:7d:44:e0:77:c0:67:0b:94:c1:0d:cd:
19:7e:70:0c:74:c4:1a:e6:25:8b:65:dd:93:40:e8:
6a:15:14:e7:75:0b:0b:7e:dd:97:d9:80:01:5f:03:
69:14:80:51:38:de:bc:27:c5:6c:7e:c9:a0:38:dc:
1f:50:83:cc:91:31:c4:08:51:1a:14:70:e5:2e:af:
b8:4f:29:02:ae:af:94:5e:b3:6e:c2:c5:e6:44:cc:
d5:cf:ea:92:2f:08:77:c3:b5:f7:ff:b9:a0:de:2b:
c5:08:8b:44:2d:e3:5b:db:fc:cb:53:04:98:29:e8:
46:34:7b:82:73:f8:8c:44:ab:e2:63:94:3a:77:c6:
90:7b:17:2a:90:99:d2:b7:3e:ce:b8:66:85:7e:e3:
86:d0:b2:2e:dc:50:e3:61:39:83:de:6b:4e:97:27:
90:b5:b4:4c:f7:6c:27:bd:68:e1:7d:3f:3d:9f:2d:
ad:0a:c7:ca:7b:7f:6f:1b:ff:6c:df:7c:6e:84:81:
b1:7a:0d:7f:44:17:67:6d:c0:51:18:2b:f8:05:c1:
e5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1D:06:5A:4F:FB:2D:C5:B7:F2:DE:B7:84:55:4C:D5:FA:50:A3:4F
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/qx0GWk_7LcW38t63hFVM1fpQo08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.179.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b6:10:ea:dd:8a:e7:c8:5c:f0:b4:24:fb:b1:3b:ab:57:64:
b8:52:8d:b7:fd:09:9b:2b:e5:e1:e2:f5:b8:cc:32:5f:10:12:
17:c5:bc:f8:ad:37:5e:ac:cb:07:4d:20:59:65:bd:9a:6c:90:
1f:56:10:d0:2d:d6:86:0b:4e:9d:07:1e:98:99:e4:7c:99:8c:
f2:91:aa:34:57:79:54:4a:35:9b:eb:5b:2d:d5:29:57:da:e5:
c9:40:be:9e:e8:93:9d:b7:4c:92:3b:e9:f7:8a:8b:36:54:70:
73:b5:6c:2c:d7:d9:f9:44:9d:a6:aa:f5:ee:1f:1d:2c:bc:3d:
3f:90:14:b2:08:b7:85:62:b8:7f:ae:af:cf:57:20:e9:96:66:
55:ce:e7:fc:95:49:0a:46:20:8e:8c:8d:56:59:ee:ab:ce:c6:
2c:d4:a1:56:6f:5a:9c:f7:2f:8a:a1:29:f8:2e:38:5d:45:06:
1d:f8:07:70:70:36:4a:de:45:47:e6:17:ce:c9:c4:6e:be:0f:
46:9f:36:a9:44:99:f6:a1:ee:38:0e:88:6e:42:be:f6:36:98:
65:27:f6:92:50:75:ab:86:fe:82:5a:7a:8f:30:be:ad:69:16:
a4:0c:92:d5:65:83:33:d0:18:37:01:65:67:12:16:b7:39:8c:
1e:b9:ec:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:04:25 2024 by rpki-client on console-ams.rpki-client.org