Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/QhbbceqjGd0mXJG3o06Z5ESXZ-I.roa
File: QhbbceqjGd0mXJG3o06Z5ESXZ-I.roa (raw, json)
Hash identifier: upL5x6Qdb37oCRhDKobWoBsvdS0emmy9fylsGgWbpbw=
Subject key identifier: 42:16:DB:71:EA:A3:19:DD:26:5C:91:B7:A3:4E:99:E4:44:97:67:E2
Certificate issuer: /CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Certificate serial: 018CC26D13375B5E59A63985ECE1BF68FBC8
Authority key identifier: 9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/QhbbceqjGd0mXJG3o06Z5ESXZ-I.roa
Signing time: Mon 01 Jan 2024 00:29:37 +0000
ROA not before: Mon 01 Jan 2024 00:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202495
IP address blocks: 193.148.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:13:37:5b:5e:59:a6:39:85:ec:e1:bf:68:fb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Validity
Not Before: Jan 1 00:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4216db71eaa319dd265c91b7a34e99e4449767e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:81:63:43:26:47:40:58:85:66:f1:76:d9:99:
ca:7d:f8:b2:56:95:60:3f:c6:cb:66:89:ba:ab:5e:
ac:c2:04:df:18:ef:f2:8d:ea:76:dd:96:6c:1f:3c:
dc:ae:9f:78:6d:34:29:b3:7f:78:d3:c1:e2:70:6d:
bc:c5:7a:b7:cd:4a:7b:cc:bb:85:30:2a:31:3b:48:
fb:16:be:38:a5:df:b1:2e:af:d4:e0:84:5f:95:5c:
67:a7:cb:7f:17:a0:33:77:b2:4a:f0:6c:d5:53:eb:
18:8f:4c:17:96:2e:ee:fc:65:9d:b9:1e:3d:36:f9:
4c:86:c2:72:1c:19:0b:de:70:0f:de:44:54:86:d5:
66:46:fc:de:68:68:59:e7:bd:02:b9:1a:9d:cd:de:
16:7b:91:2e:c2:6a:5b:c8:57:52:cb:81:05:b0:2f:
37:55:97:1a:cc:a4:03:7d:c9:d2:8d:90:94:a7:d0:
b2:5c:22:37:de:0b:54:ab:78:02:0e:17:e9:1e:c0:
c8:94:c1:50:8b:25:1e:37:a3:8f:57:18:48:c0:98:
2a:22:ac:f4:6c:e4:96:f6:3e:7b:57:bf:52:10:00:
d1:9a:f3:0f:39:1a:82:c2:41:6f:5e:dc:ff:1a:df:
c1:e9:a8:35:06:0f:44:dc:3c:0d:79:67:4c:92:da:
60:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:16:DB:71:EA:A3:19:DD:26:5C:91:B7:A3:4E:99:E4:44:97:67:E2
X509v3 Authority Key Identifier:
keyid:9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/QhbbceqjGd0mXJG3o06Z5ESXZ-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.8.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ee:10:7d:8c:44:db:33:db:7c:ea:f3:94:a5:93:1d:13:43:
72:7c:a8:26:af:8e:a4:b2:87:36:b6:db:98:63:56:7b:8f:dc:
53:2d:41:b1:ce:6f:b5:9c:2c:a8:33:02:7c:27:d0:59:cb:a5:
d5:7e:54:18:de:dc:c2:1f:ba:c3:fb:ba:d6:1b:5a:d1:f4:52:
6e:59:a0:88:03:91:27:9d:ec:b1:ff:4b:4a:a9:c4:c2:4f:59:
82:c3:e8:22:d8:85:e0:4f:8f:f9:2d:46:a8:e3:63:7f:2a:7e:
9e:a6:0b:a5:a2:55:1c:69:35:34:26:95:e2:78:8c:5a:d0:ae:
75:82:32:c2:3b:3d:d7:f0:2c:63:e0:da:6c:ad:b5:44:fe:ee:
a5:45:f8:81:63:de:9c:5a:b4:e6:ec:e5:67:20:63:50:9b:8b:
42:fd:b8:44:f5:5d:1e:08:0f:a3:12:4d:e4:cb:92:c5:60:3a:
e5:34:e5:ee:2c:b0:6a:35:61:3e:51:66:5d:76:fe:49:da:ab:
ef:94:b5:3f:68:36:3e:3f:be:bc:85:0b:e3:ec:9a:e7:dd:32:
b8:1d:60:14:db:eb:1e:e6:7a:50:59:d4:3b:f3:82:ed:7c:48:
35:3a:24:77:58:a8:95:1c:40:9a:48:d3:7e:0a:2f:9b:37:96:
5d:8a:68:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:28 2024 by rpki-client on console-ams.rpki-client.org