Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/qTh9474U7s0ButzbQrzU5Z3XKXo.roa
File: qTh9474U7s0ButzbQrzU5Z3XKXo.roa (raw, json)
Hash identifier: LqkRWTwGHVQKmBYhqIXFXsA10yDMa/2VUvwF0ke8+CY=
Subject key identifier: A9:38:7D:E3:BE:14:EE:CD:01:BA:DC:DB:42:BC:D4:E5:9D:D7:29:7A
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 018CC56DF1DDCBDCB00880C62104B1F69DD2
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/qTh9474U7s0ButzbQrzU5Z3XKXo.roa
Signing time: Mon 01 Jan 2024 14:29:26 +0000
ROA not before: Mon 01 Jan 2024 14:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15435
IP address blocks: 194.13.240.0/20 maxlen: 24
2001:67c:2b0c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f1:dd:cb:dc:b0:08:80:c6:21:04:b1:f6:9d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Jan 1 14:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9387de3be14eecd01badcdb42bcd4e59dd7297a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:a0:07:e3:62:9c:c9:d9:65:e5:78:10:33:
fa:dd:9e:7f:8e:e1:0c:2c:49:5e:d5:c7:c5:b2:6f:
6b:f2:06:bd:1e:db:5c:90:6e:84:cd:97:e3:38:4a:
1e:2d:07:ea:ec:b2:ce:33:26:af:99:fe:25:cc:ae:
9b:97:b4:75:71:2d:74:cd:91:a4:a9:53:d3:bf:29:
04:e0:e4:a5:e9:7d:89:75:30:14:ea:20:c1:c2:ea:
e4:89:af:25:b8:7d:a7:31:5f:06:ac:c1:9f:74:8e:
48:9c:84:89:b4:c6:e6:fd:fa:5b:7e:05:a5:f7:6c:
79:2c:1f:d3:4f:c6:80:0c:60:1f:77:d6:fe:0f:2f:
ac:ee:21:cb:93:96:16:ba:bf:cd:31:e9:27:9d:65:
06:d4:e6:48:50:32:8d:b4:95:a7:cb:4b:12:fe:fb:
fb:7a:0b:16:6b:af:56:00:7d:db:be:23:38:c3:03:
23:74:d9:ab:f1:5c:7b:bc:99:5d:11:66:90:5c:6d:
b7:a9:f0:bc:4c:87:c1:38:c5:5f:e9:2d:e0:b4:e3:
e6:fa:6b:25:48:9f:7e:a6:b6:2c:b5:93:4f:77:72:
4f:e2:a1:d8:9c:3d:9c:53:fe:d1:e7:e5:1d:63:2d:
9f:3e:e2:0e:a0:a0:c7:f6:7c:94:0d:12:27:a0:01:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:38:7D:E3:BE:14:EE:CD:01:BA:DC:DB:42:BC:D4:E5:9D:D7:29:7A
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/qTh9474U7s0ButzbQrzU5Z3XKXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.240.0/20
IPv6:
2001:67c:2b0c::/48
Signature Algorithm: sha256WithRSAEncryption
d2:4f:1c:6a:a2:b1:65:42:2a:59:5c:78:26:c4:f4:67:a2:b6:
b1:f6:b5:59:cd:6a:fb:20:f0:7d:33:ce:cf:4e:07:4a:56:bc:
d8:58:04:af:e2:4f:38:57:ba:4b:4d:05:72:3f:da:e4:9d:88:
2a:4e:15:e6:f4:06:30:81:77:f5:4b:90:5e:de:15:97:7c:13:
4f:60:6c:c4:78:2f:93:e4:b0:47:8c:c9:44:34:8a:13:ea:7d:
71:aa:33:cb:7a:b2:00:b8:52:e6:af:6e:e5:a5:f8:9e:0b:92:
45:7a:b4:ab:0e:5f:bf:1c:49:50:cc:89:e6:4f:f9:34:50:a5:
d8:af:b6:b5:06:ba:74:11:d0:6d:b2:78:1b:ce:f7:50:7d:7c:
ca:6a:84:d8:43:e2:aa:ba:d5:14:8d:75:a6:9e:cb:e9:b5:d3:
0f:fa:ae:31:cb:a1:3e:4a:84:29:cc:86:e3:ef:65:6a:46:9f:
51:a1:f4:8d:48:79:71:2a:a0:33:b7:cb:3d:84:98:86:7f:f4:
92:16:de:a8:c1:3f:96:60:67:c1:42:28:69:dd:90:4f:9b:33:
fd:4a:01:24:d3:ef:53:a4:a9:1f:cb:73:71:64:34:13:7b:ce:
1d:97:d3:d7:2b:15:44:76:bb:42:0b:3a:df:f6:0d:e5:1a:33:
af:d7:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:52:51 2024 by rpki-client on console-fra.rpki-client.org