Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qoEqCTm9UMW5_GFqKvbSmhxazkw.roa
File: qoEqCTm9UMW5_GFqKvbSmhxazkw.roa (raw, json)
Hash identifier: y0aHX+jCu52a/8bRb9CeMcUlGsM18j5t97MT8kd/pZg=
Subject key identifier: AA:81:2A:09:39:BD:50:C5:B9:FC:61:6A:2A:F6:D2:9A:1C:5A:CE:4C
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 018CC4924FFA53972158C151F581FACD70EC
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qoEqCTm9UMW5_GFqKvbSmhxazkw.roa
Signing time: Mon 01 Jan 2024 10:29:32 +0000
ROA not before: Mon 01 Jan 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31400
IP address blocks: 37.114.96.0/19 maxlen: 24
185.171.204.0/22 maxlen: 32
84.200.0.0/16 maxlen: 32
82.211.0.0/18 maxlen: 24
84.201.0.0/18 maxlen: 32
2001:1608::/32 maxlen: 48
2001:1638::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:4f:fa:53:97:21:58:c1:51:f5:81:fa:cd:70:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jan 1 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa812a0939bd50c5b9fc616a2af6d29a1c5ace4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:81:03:0b:13:f5:73:a3:8c:77:91:8f:1f:
30:f5:52:ee:22:cb:59:c5:27:38:88:f0:c1:45:16:
e1:37:1c:56:87:cc:42:de:f9:33:e4:1b:1d:ba:33:
2b:b7:c9:8c:dd:ed:0a:be:df:ee:0f:f2:00:c5:40:
c8:9e:53:b5:e7:65:b6:89:66:b0:55:84:e3:64:3b:
d3:fb:42:df:41:c6:65:43:4f:0e:29:e8:e5:6f:56:
ca:f0:a0:30:4b:3e:19:00:40:80:18:7d:47:f8:76:
28:0a:98:e7:e0:63:6e:aa:7b:ae:7c:fb:38:f1:e2:
35:74:5c:83:fe:74:76:f1:b6:6d:ec:01:1e:e2:08:
fe:a5:0c:32:ce:82:bb:45:c6:f1:36:eb:15:2e:ad:
c9:c6:fb:62:61:3c:1d:79:de:24:ca:a3:d6:77:21:
e3:51:29:10:22:40:a4:11:71:fa:33:bd:6a:bb:57:
a9:7e:07:e4:30:68:ec:1d:3c:99:42:e3:b9:e5:cc:
e5:96:e6:e1:39:83:da:9b:42:fd:a0:e5:35:ae:37:
aa:ac:2b:04:f1:a2:03:a2:e1:58:c0:50:ca:db:1f:
59:9d:d3:b3:92:32:ec:a8:ec:29:00:14:8a:83:e8:
07:da:95:3d:ea:79:73:6a:f0:c2:b8:a6:ea:3e:10:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:81:2A:09:39:BD:50:C5:B9:FC:61:6A:2A:F6:D2:9A:1C:5A:CE:4C
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qoEqCTm9UMW5_GFqKvbSmhxazkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.96.0/19
82.211.0.0/18
84.200.0.0-84.201.63.255
185.171.204.0/22
IPv6:
2001:1608::/32
2001:1638::/32
Signature Algorithm: sha256WithRSAEncryption
50:62:a2:e4:90:af:05:86:29:e6:71:d4:4f:9f:07:89:3c:01:
7b:61:60:51:7f:fe:89:c6:13:8e:ac:19:8c:54:6f:b3:f3:0f:
50:ad:37:12:b7:9a:bc:47:1f:ee:df:70:b0:49:6d:6d:62:2d:
6e:c4:0e:48:90:55:3b:89:14:19:21:0c:8c:80:21:b3:d4:bf:
b6:fb:59:b6:c0:15:35:f8:91:93:9b:5f:2c:c4:3c:47:16:02:
d8:55:e2:db:34:a4:b2:65:60:a8:15:a9:00:07:02:a8:17:86:
23:6a:4e:1e:49:ce:e0:2e:3e:89:56:5c:3b:d7:70:82:16:65:
f6:8b:c6:0a:e5:79:b4:bc:f0:fd:e4:21:12:51:b4:f2:a3:96:
25:3b:1b:11:dc:a0:d2:43:12:4f:57:22:82:3e:a7:ef:81:e5:
42:81:17:8d:4c:17:c3:82:46:c8:f4:49:9d:5c:5e:80:2e:11:
72:d8:71:ff:3d:0e:e8:ca:0b:dd:c3:77:29:ef:c8:d1:04:32:
82:f4:49:36:89:89:54:1f:d4:5f:86:6e:d2:0a:d8:b9:23:a3:
2c:65:1a:60:f5:f6:26:40:2c:4c:ed:6e:55:af:cf:e3:7d:d7:
a7:c3:22:ef:ba:dd:b4:46:83:6c:b7:19:8d:b2:e1:b8:50:56:
4d:5a:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 05:41:21 2024 by rpki-client on console-fra.rpki-client.org