Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/qz_6U50wH7_Z0F5Zf2l8nkHDuFU.roa
File: qz_6U50wH7_Z0F5Zf2l8nkHDuFU.roa (raw, json)
Hash identifier: zfEsA+ais9dOannXgLunrJtYiOiA085i8DTbkDQ7SIo=
Subject key identifier: AB:3F:FA:53:9D:30:1F:BF:D9:D0:5E:59:7F:69:7C:9E:41:C3:B8:55
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 01933F0A74400A4C2D5AC5DB67718F7C4CD6
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/qz_6U50wH7_Z0F5Zf2l8nkHDuFU.roa
Signing time: Mon 18 Nov 2024 11:31:09 +0000
ROA not before: Mon 18 Nov 2024 11:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 89.150.49.0/24 maxlen: 24
185.33.26.0/24 maxlen: 24
185.162.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:0a:74:40:0a:4c:2d:5a:c5:db:67:71:8f:7c:4c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Nov 18 11:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab3ffa539d301fbfd9d05e597f697c9e41c3b855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:c0:2b:60:c1:6a:90:1c:03:f6:26:f1:87:
8c:b6:cc:99:b4:40:1d:f8:6f:ee:1d:fe:e6:30:9a:
2e:e6:0b:5d:74:40:81:19:39:a0:d3:28:cb:47:44:
c0:13:89:5b:b9:d8:26:46:5e:3e:71:ef:2d:0b:83:
f1:c7:55:f9:0d:9a:ff:f9:ae:9c:61:8c:65:45:fa:
13:a3:c1:f5:dc:d7:19:32:61:db:93:1d:8c:aa:69:
a9:7c:c7:d2:06:b5:af:c6:db:be:e7:28:db:55:06:
22:b7:da:f2:e7:78:9d:69:df:5d:2a:dc:10:5a:1b:
0a:d4:06:0f:ad:53:40:b6:d2:60:cc:da:31:ed:d4:
d3:d6:c5:a0:b7:71:75:46:88:67:55:fe:f7:72:1c:
8b:fd:39:b0:4f:14:f8:71:d9:d7:da:c9:a2:23:57:
49:56:35:db:95:61:00:f9:d4:f7:f4:38:4b:47:f8:
3a:e4:38:9e:bc:0d:a4:03:66:bf:c1:36:42:55:13:
ff:92:f7:9f:ba:9f:ae:43:02:ff:9f:4d:99:14:97:
9a:3f:b9:13:80:07:57:84:3d:54:11:b8:e4:41:62:
f8:df:7f:65:9f:2b:74:b0:c4:c0:44:34:68:26:61:
d2:97:52:4b:24:05:23:87:6b:05:3d:0a:78:dd:09:
dd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3F:FA:53:9D:30:1F:BF:D9:D0:5E:59:7F:69:7C:9E:41:C3:B8:55
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/qz_6U50wH7_Z0F5Zf2l8nkHDuFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.49.0/24
185.33.26.0/24
185.162.176.0/24
Signature Algorithm: sha256WithRSAEncryption
33:26:0b:90:97:cb:d7:46:40:2c:8f:77:56:9f:5c:93:0d:6c:
15:45:2b:18:57:db:ed:f1:29:f9:11:19:06:ea:4c:92:1a:4d:
91:0e:df:3d:6d:d6:eb:02:98:a8:37:a8:43:bf:f4:08:39:a7:
9c:2d:f5:6f:de:d5:c2:4f:bf:5c:d6:60:50:19:42:44:36:9e:
55:ff:13:74:f2:8c:53:fe:2f:cd:78:fa:f4:fa:e8:01:90:e3:
a9:4f:5b:2c:86:03:e6:81:a4:d5:52:94:4d:42:8f:f0:79:4c:
32:c8:69:ff:10:68:3c:56:4b:28:a2:95:0f:3c:5c:c6:b6:8d:
69:30:57:c0:65:e5:f2:94:be:0c:fe:9d:fb:bc:aa:c7:63:73:
48:8d:45:b7:67:a5:03:08:d1:45:a1:56:de:f6:4f:ac:52:2e:
8f:3f:51:86:31:79:86:26:7c:74:d6:2b:b9:2b:b4:0d:30:e4:
b4:7c:4c:03:26:35:f5:c5:a6:fd:77:9c:98:9d:33:d6:7d:70:
ae:2e:d9:7e:d4:61:44:7f:d3:47:08:85:81:f6:38:52:f1:87:
31:74:68:fc:ad:39:78:6c:b5:e7:66:e9:68:af:a0:5e:1d:5e:
63:f8:2f:95:e1:bf:5f:2d:bc:0c:dc:0b:8f:ab:6a:67:ec:c5:
e5:69:79:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:04:25 2024 by rpki-client on console-ams.rpki-client.org