Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/qg2DS0ivKcatS9qovYBQR41DDS4.roa
File: qg2DS0ivKcatS9qovYBQR41DDS4.roa (raw, json)
Hash identifier: gwlGGvsOIevt8gaD9gsMEmb3U/J5Kp7Rpg6205avJf4=
Subject key identifier: AA:0D:83:4B:48:AF:29:C6:AD:4B:DA:A8:BD:80:50:47:8D:43:0D:2E
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018CC9BA9CA9B63761E0A54BA70CD05E8E2D
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/qg2DS0ivKcatS9qovYBQR41DDS4.roa
Signing time: Tue 02 Jan 2024 10:31:39 +0000
ROA not before: Tue 02 Jan 2024 10:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56876
IP address blocks: 83.147.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:9c:a9:b6:37:61:e0:a5:4b:a7:0c:d0:5e:8e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 10:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa0d834b48af29c6ad4bdaa8bd8050478d430d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:cd:f4:ae:8e:25:32:38:f7:82:2b:c1:74:
98:55:72:89:da:71:43:43:7b:29:1a:1e:a1:91:74:
3a:24:69:77:eb:1e:ad:3f:39:f9:fe:15:c2:7b:6d:
50:4f:39:fb:bd:1a:e0:6e:99:89:b8:f9:5f:3d:36:
6e:35:11:27:48:7f:58:16:e0:d4:fe:91:f8:29:b2:
22:bf:49:2e:ba:e8:90:be:13:6b:9a:59:00:b5:11:
bb:1d:78:e5:a1:c4:57:96:b2:a7:f0:cf:16:68:8f:
64:ec:fb:aa:9a:9d:01:e0:a2:a8:a8:18:46:83:ec:
8a:ad:0e:23:f6:81:d5:ab:6e:bf:13:a5:20:4c:56:
27:2c:c1:ca:73:5f:ce:55:7c:f6:33:d9:16:bd:bc:
49:6d:8e:dc:bf:60:b1:2e:ef:7f:7c:19:42:a1:7e:
99:71:1f:09:e6:6f:b8:69:f0:f3:ed:ca:b1:43:87:
e2:34:75:d9:5b:9a:ec:9c:9b:f0:84:5d:fe:da:df:
d8:5a:3e:00:cb:d9:4b:68:6e:e2:9b:dd:f0:30:6a:
31:07:10:ca:81:2c:68:e3:a4:37:cf:a3:dc:f8:06:
db:7b:5c:2a:c2:ac:a1:48:79:ad:6e:41:ac:4c:95:
ae:59:1e:9d:26:75:89:f6:6f:37:86:98:9f:49:3a:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0D:83:4B:48:AF:29:C6:AD:4B:DA:A8:BD:80:50:47:8D:43:0D:2E
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/qg2DS0ivKcatS9qovYBQR41DDS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.212.0/22
Signature Algorithm: sha256WithRSAEncryption
06:61:61:5d:88:6b:5b:eb:c5:bd:b7:d6:be:7f:24:f0:6a:c3:
68:66:cf:69:2e:9f:ed:39:42:11:cd:32:e1:c8:7c:ad:86:cd:
7b:81:c6:71:b6:3b:bf:69:0a:a6:1e:13:1b:aa:31:b4:6f:33:
1d:fc:a7:91:58:90:05:5a:fc:3e:da:47:dc:87:bd:5a:b5:3b:
fa:89:d8:0c:b1:7b:e0:fb:e6:e8:9d:e4:a7:65:36:5a:a0:7c:
27:96:a3:2d:e3:08:5c:3d:ea:e2:93:b0:74:f5:a0:dd:28:34:
63:d0:75:6c:5b:2b:5c:d7:00:c5:da:dd:d7:79:0d:f5:4b:2f:
ff:0e:ed:df:82:75:20:67:f4:f9:3e:be:02:14:ee:9d:38:ef:
79:02:0a:2a:16:00:e2:e1:1e:4b:88:38:16:e8:a2:e4:26:2d:
8c:62:d6:87:66:29:4e:21:77:ef:cc:19:66:13:6c:02:00:c0:
6a:5a:3e:2b:56:3e:33:71:35:d9:8e:df:c9:12:09:c2:d2:03:
a7:8a:6b:db:25:3f:7a:9e:96:c6:8f:34:55:53:ea:40:d9:ab:
5a:0e:5f:88:d7:1b:bc:25:24:30:23:df:c6:c9:5a:66:00:a0:
6c:e1:a8:e8:5c:f2:85:c5:dd:7d:8f:a5:43:65:2f:0d:d9:09:
56:d2:63:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 11:37:53 2024 by rpki-client on console-ams.rpki-client.org