Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/QzCWfKkIlTsn7OABmpPfVZdjA08.roa
File: QzCWfKkIlTsn7OABmpPfVZdjA08.roa (raw, json)
Hash identifier: 1exvlOb88X97bceqP4vdNjyHuPQ8qEkX7JXwHu4JOCE=
Subject key identifier: 43:30:96:7C:A9:08:95:3B:27:EC:E0:01:9A:93:DF:55:97:63:03:4F
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 018CC7946CC9FD1788341E23C3405CC0A329
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/QzCWfKkIlTsn7OABmpPfVZdjA08.roa
Signing time: Tue 02 Jan 2024 00:30:42 +0000
ROA not before: Tue 02 Jan 2024 00:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 193.222.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:6c:c9:fd:17:88:34:1e:23:c3:40:5c:c0:a3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Jan 2 00:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4330967ca908953b27ece0019a93df559763034f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f9:1b:76:ce:94:f3:9b:1f:a4:25:ae:c5:93:
b3:6a:68:a7:0e:57:9e:7d:df:92:75:e9:16:a7:d5:
a6:43:84:3c:39:28:3c:8f:a9:0b:92:5b:de:c9:dd:
d7:35:b7:40:d3:2f:73:c1:42:12:50:91:36:88:95:
73:42:c4:e5:38:01:03:11:f4:b5:e0:eb:49:06:95:
41:5a:7c:02:83:0c:ca:2b:d6:8b:68:25:68:70:ff:
30:3b:c4:db:68:da:94:8b:de:28:73:3c:b8:4b:0f:
1a:2d:a9:ff:11:19:8a:28:10:ba:1b:c8:42:29:a5:
58:90:38:c5:03:88:2c:f9:75:26:9d:32:11:f9:d5:
7e:51:f5:39:ea:fb:d5:8c:53:57:4b:96:3e:41:4b:
0d:40:41:58:d1:24:c6:08:09:05:00:eb:7b:8e:db:
90:b1:87:18:98:4a:14:ac:a1:4f:f1:8f:52:ef:d4:
13:cf:17:02:ac:e2:8d:6e:e8:bb:bb:8a:c1:e0:79:
52:0a:1e:1f:05:00:48:e4:b5:47:fc:73:ff:41:82:
24:96:8d:14:59:c2:27:14:83:f9:d9:f6:35:3c:a2:
c9:2f:b5:df:2f:fe:f6:83:fc:34:4e:d9:f3:11:88:
b6:8c:3b:02:80:06:de:48:af:de:b9:6d:75:82:7e:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:30:96:7C:A9:08:95:3B:27:EC:E0:01:9A:93:DF:55:97:63:03:4F
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/QzCWfKkIlTsn7OABmpPfVZdjA08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:15:44:ee:63:39:7b:b5:05:5f:0b:4f:0f:c4:04:5e:60:58:
f3:c9:ac:c7:56:58:1a:52:f7:74:b7:57:48:93:68:90:68:75:
ca:9b:01:8a:68:70:49:ef:af:bb:29:77:dc:02:21:59:57:6b:
94:ce:bc:19:67:1c:a1:0e:c7:16:79:79:d8:45:a2:78:44:39:
07:64:a9:3b:73:a6:08:59:06:ba:df:f8:ce:42:16:c9:6e:9d:
1f:6f:5f:2a:1f:b2:db:a0:f0:03:d4:53:e3:97:07:c0:de:e3:
6b:7f:b3:0c:00:83:1d:92:85:95:ef:75:43:e0:73:0c:ca:83:
02:06:a9:a8:ea:91:d5:19:fa:6b:49:20:8b:80:07:af:d2:39:
9e:18:19:09:77:90:73:18:2d:eb:ad:49:ab:3f:e8:c9:49:ad:
0f:bf:d5:35:bd:1f:1c:23:e2:36:e6:40:4f:d0:28:20:79:94:
23:be:8a:b9:9c:3d:c1:66:6b:fb:78:b9:26:3b:3f:4d:cb:fc:
9b:ce:56:8e:20:09:ff:38:50:9c:0d:83:0b:9b:b4:93:4c:54:
6c:b8:99:6c:25:73:81:e9:33:4b:0c:fe:55:1d:45:29:96:7f:
be:83:9b:6a:82:50:8c:61:be:cf:73:88:0d:16:c6:84:4f:fb:
76:74:ba:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:38:30 2024 by rpki-client on console-fra.rpki-client.org