Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/QxtKVMc-hVdwL5TdcKEJgyB4fwg.roa
File: QxtKVMc-hVdwL5TdcKEJgyB4fwg.roa (raw, json)
Hash identifier: pshX4UkedbGUfccXq0B7aU1lGGGoNnHe8yhI1L+DJ6w=
Subject key identifier: 43:1B:4A:54:C7:3E:85:57:70:2F:94:DD:70:A1:09:83:20:78:7F:08
Certificate issuer: /CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Certificate serial: 018DA6608D63EB68D6BF5A9036488CA5A4AA
Authority key identifier: D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/QxtKVMc-hVdwL5TdcKEJgyB4fwg.roa
Signing time: Wed 14 Feb 2024 06:49:21 +0000
ROA not before: Wed 14 Feb 2024 06:49:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57644
IP address blocks: 194.50.95.0/24 maxlen: 24
2a13:57c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:60:8d:63:eb:68:d6:bf:5a:90:36:48:8c:a5:a4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Validity
Not Before: Feb 14 06:49:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=431b4a54c73e8557702f94dd70a1098320787f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:3f:92:82:a1:51:ee:b2:9a:55:0f:c3:70:
4b:db:7e:07:cc:0c:90:b7:87:7c:18:c1:09:ae:b4:
f5:14:fc:96:cc:ed:03:e9:da:d4:08:38:46:df:3d:
36:66:4c:8e:61:8e:33:eb:9b:0a:57:c2:cb:d9:db:
04:54:db:58:b1:b3:f8:bb:d5:be:5c:55:58:0f:2a:
29:0e:7c:0a:be:9a:76:c0:60:49:55:52:1a:56:44:
6c:95:05:db:7f:20:e7:a5:df:a6:11:e1:c7:d6:ea:
f0:e8:7e:91:31:95:0b:f7:c8:69:38:d3:c5:1a:6f:
30:78:46:27:3c:12:e9:ce:86:1a:48:92:c7:29:4a:
5b:ff:be:ef:f8:c6:2e:5d:5d:0c:6e:13:37:af:b7:
e8:ba:91:45:eb:f0:29:df:be:44:80:dc:1b:ca:36:
ad:f8:0c:57:e9:a6:46:7a:b5:a9:f9:15:0b:bb:59:
ff:45:ed:74:75:b0:13:3c:eb:e1:95:3d:47:7b:eb:
8e:17:c8:05:a6:fb:d7:1a:e2:4c:e6:2b:7e:df:95:
b2:81:1c:eb:a9:48:49:c0:8c:4f:b0:5a:07:fb:8e:
d0:c1:ff:5c:f6:61:01:a1:aa:31:ba:db:d7:24:44:
86:bd:76:cb:62:1e:08:01:82:b7:21:bb:d6:4a:73:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1B:4A:54:C7:3E:85:57:70:2F:94:DD:70:A1:09:83:20:78:7F:08
X509v3 Authority Key Identifier:
keyid:D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/QxtKVMc-hVdwL5TdcKEJgyB4fwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.95.0/24
IPv6:
2a13:57c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:72:96:17:25:6c:38:f9:bd:06:58:f8:02:a8:f5:8f:6d:4c:
e8:86:f7:5a:57:ca:72:9d:e9:40:d2:8b:93:32:12:81:f4:46:
27:fc:87:c5:1c:74:ca:ac:25:d4:96:76:12:39:a4:e5:ee:32:
e6:0b:7e:66:4c:19:b7:ae:3a:d5:f9:9c:3c:f5:94:8c:7b:fe:
92:ce:06:0a:1a:ee:3c:79:f9:ea:75:b1:00:18:e3:33:7e:ea:
6e:3c:43:25:05:8b:43:35:38:eb:68:44:6f:13:d0:38:c3:56:
ad:01:c9:b4:0b:e9:5f:83:9e:a7:b4:31:02:d4:41:cf:de:e4:
25:c5:c5:34:04:2e:cb:bd:bd:19:67:2e:54:6d:fa:7b:ac:75:
75:1e:f9:0a:73:f2:3b:88:45:12:80:89:0f:ac:0f:08:fb:c7:
47:15:36:aa:5d:c1:90:07:05:1e:40:5e:3d:d5:d8:54:84:b1:
65:a1:33:4a:7b:42:a1:06:1c:61:a5:3a:8c:eb:f3:02:6c:59:
48:d2:45:e1:19:bf:8b:63:41:61:9f:bf:44:ea:1c:75:f9:36:
39:1c:17:cf:cf:9c:c0:b6:9b:93:67:b6:a6:df:50:d7:08:9e:
d0:e7:db:40:ed:59:f1:74:38:43:57:82:a2:a3:ce:39:d2:a7:
e6:8b:35:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:27 2024 by rpki-client on console-fra.rpki-client.org