Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QZ-_fncZocTA7cDh_MTrebCTICA.roa
File: QZ-_fncZocTA7cDh_MTrebCTICA.roa (raw, json)
Hash identifier: AMTJ+d+/jxZs5T/5Q23yWLnIv166zvycMwT4L2B1EdY=
Subject key identifier: 41:9F:BF:7E:77:19:A1:C4:C0:ED:C0:E1:FC:C4:EB:79:B0:93:20:20
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018FD7DA6F732F21BD6EE38794A123E1DB06
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QZ-_fncZocTA7cDh_MTrebCTICA.roa
Signing time: Sun 02 Jun 2024 07:29:27 +0000
ROA not before: Sun 02 Jun 2024 07:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60068
IP address blocks: 178.253.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d7:da:6f:73:2f:21:bd:6e:e3:87:94:a1:23:e1:db:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 2 07:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=419fbf7e7719a1c4c0edc0e1fcc4eb79b0932020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:21:52:5d:09:93:d5:0e:ac:48:d3:c1:37:
7b:d4:bb:4f:ad:16:78:e2:dd:78:c9:07:d7:37:aa:
09:bf:53:b7:e2:a5:53:05:28:f3:b7:f2:c1:c4:8e:
10:0e:07:47:b6:c3:a7:05:ed:54:7d:e4:65:71:0c:
9a:37:6b:b0:e6:86:22:60:d3:66:44:fd:75:3c:86:
dd:87:c9:76:ad:7e:8d:7b:70:0d:6c:f4:d0:6f:28:
6b:20:9e:e2:98:87:ba:c0:71:4c:75:c9:1c:ca:f1:
fc:ed:d8:61:94:19:51:dd:94:47:44:30:4c:ab:c7:
e2:b0:c8:90:5f:16:0a:8d:ad:a9:11:d0:09:62:05:
2a:8c:0b:2c:e7:2f:ed:a0:11:3f:d1:24:cb:20:45:
ff:f8:ce:1a:2b:7b:e0:51:fc:b0:cb:b2:1b:5d:64:
1e:9b:c3:a8:c9:49:ea:23:f3:eb:4f:33:b1:ad:4e:
aa:8b:8e:10:b6:3b:10:68:4d:ee:cb:4d:82:bb:65:
15:d6:41:c3:99:36:64:0a:41:11:82:01:f9:da:9a:
d5:a7:fa:d7:16:a6:b7:6b:9c:f3:66:20:2e:6c:26:
32:dd:fb:03:d3:9b:20:cb:97:77:df:4b:ae:15:83:
e6:fc:16:5f:59:04:8c:34:e3:4b:48:7d:75:fa:f2:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9F:BF:7E:77:19:A1:C4:C0:ED:C0:E1:FC:C4:EB:79:B0:93:20:20
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QZ-_fncZocTA7cDh_MTrebCTICA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d7:43:63:43:dd:03:34:af:7f:2a:f0:df:fd:33:48:52:16:
9d:6d:38:a4:5a:cb:b5:fe:78:4c:92:47:17:a3:3d:84:8a:83:
ea:5d:9e:16:26:d0:77:00:47:07:4d:da:9f:e8:e1:f7:21:93:
02:73:ff:ce:a9:f5:62:3a:99:33:94:99:29:37:9b:99:93:04:
dd:6f:7d:52:94:75:66:e7:8c:8d:60:4f:1c:0d:0d:78:ac:58:
21:65:72:a7:fa:5c:30:11:e7:b7:d2:3e:ef:c7:6b:8f:8b:16:
48:20:c5:38:17:cd:08:ee:11:fb:94:6e:86:c8:e2:6f:46:79:
e5:0d:8c:a7:06:60:4c:61:95:b9:70:9f:4f:50:74:1e:a9:28:
43:e2:ec:76:20:4a:e9:2c:40:a8:90:9e:f9:6e:fa:57:f5:b9:
80:db:3f:f4:8d:16:96:78:ed:ec:aa:46:6b:44:5b:99:f4:6e:
d7:90:fb:15:66:5b:00:81:7d:9b:92:43:b0:19:e9:7f:8d:ae:
ac:fa:d8:cf:2a:d8:79:1e:53:f1:a8:a4:e7:d8:03:ef:4b:2a:
9f:2a:f8:4e:71:dd:2b:05:98:a4:ca:13:93:23:44:9f:f4:04:
6f:4c:4f:b6:5a:9b:59:2b:99:4d:ae:08:f1:9e:74:fd:45:2e:
cc:15:8a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:36:06 2024 by rpki-client on console-ams.rpki-client.org