Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/q6SjK8VXoorQ80RJEwnDQQpg5_Q.roa
File: q6SjK8VXoorQ80RJEwnDQQpg5_Q.roa (raw, json)
Hash identifier: jXqKZHM4GxmOSRRUh77C9fJD6HlKLmhJ0aY/BYhVtTs=
Subject key identifier: AB:A4:A3:2B:C5:57:A2:8A:D0:F3:44:49:13:09:C3:41:0A:60:E7:F4
Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial: 018CC56E2063A81A0D26D8C866D43E77AEB0
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/q6SjK8VXoorQ80RJEwnDQQpg5_Q.roa
Signing time: Mon 01 Jan 2024 14:29:37 +0000
ROA not before: Mon 01 Jan 2024 14:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 185.63.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:20:63:a8:1a:0d:26:d8:c8:66:d4:3e:77:ae:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Validity
Not Before: Jan 1 14:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aba4a32bc557a28ad0f344491309c3410a60e7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fc:0f:0a:70:c5:fa:1f:17:5b:37:68:80:8b:
35:67:a9:bf:d2:58:e5:9f:31:95:61:93:47:e8:4c:
1a:f1:5f:2f:b1:01:19:42:ee:5a:5c:ef:0d:81:03:
9c:0b:c2:6d:da:fb:ba:d1:e5:ae:f6:4b:69:d1:fa:
20:1d:fb:01:ce:46:8d:5d:00:c6:56:8d:ab:96:6e:
b8:71:fc:81:7e:77:d8:74:7f:32:47:93:5f:ea:db:
a0:6e:12:96:e0:47:1d:78:48:b9:08:9c:1a:96:d4:
ee:89:0e:33:80:2b:cb:88:54:61:56:45:4f:70:b1:
4a:e2:d2:66:6a:8b:83:9b:f2:d2:97:70:b4:3e:4a:
97:ea:2d:b1:17:ae:2f:90:48:41:a0:f4:0e:09:7e:
13:2d:8c:4b:8f:e3:2f:ab:e8:32:85:f6:eb:ca:da:
da:d6:8d:64:9b:91:74:55:c7:1c:af:84:29:1d:db:
f9:c9:e9:46:57:77:37:97:82:5c:1f:9d:a3:db:5c:
43:42:da:50:3e:01:fa:0e:99:3b:b4:ee:45:88:e2:
04:c6:52:56:3d:98:5d:b6:38:cd:a5:ee:cc:e1:e6:
ac:9c:25:0a:84:9a:3d:3c:cb:2a:76:c7:20:28:22:
44:bd:4d:48:2c:e7:70:f8:c4:2c:67:2d:00:8b:24:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A4:A3:2B:C5:57:A2:8A:D0:F3:44:49:13:09:C3:41:0A:60:E7:F4
X509v3 Authority Key Identifier:
keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/q6SjK8VXoorQ80RJEwnDQQpg5_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.73.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ca:95:be:52:6f:6e:ba:17:28:09:72:d6:c6:f0:3c:e6:43:
41:ce:83:5e:5b:3f:74:8b:f8:54:c7:36:b9:79:dc:57:0c:d4:
09:d8:cf:ca:59:0c:8f:31:71:10:25:56:f6:eb:34:5c:8b:bf:
44:e4:47:e6:60:62:c4:b3:26:3d:be:f6:98:85:39:d3:e2:a5:
58:ba:64:ee:4a:07:74:78:a8:f2:a3:35:ce:e4:01:77:8e:35:
72:de:00:8e:9a:2b:e6:11:dc:f7:b2:98:8b:63:17:c2:4b:35:
40:3d:dc:68:9d:a5:a9:bd:96:f6:0d:77:13:61:92:1a:d2:fd:
db:f0:c4:fb:8f:bf:46:21:bb:96:82:89:75:c8:83:c8:c8:e1:
b1:70:c4:9b:12:9e:b9:37:79:55:c8:b1:e4:e0:47:e5:21:5e:
19:36:ef:35:8f:73:59:62:34:01:bf:b1:cc:d1:e8:f5:6f:00:
b1:17:3c:21:80:6e:3b:2f:ea:18:e5:4f:f5:2d:0c:7b:f7:fd:
4e:c6:27:a8:0c:4b:4c:f6:7d:db:d8:3f:52:2a:d5:9d:b0:49:
62:45:c1:02:cc:0a:08:3f:57:c6:88:89:9e:32:c1:d7:bc:19:
55:a4:f8:f4:c0:79:34:9e:a0:28:ad:e7:10:fc:9e:82:0c:e1:
1b:c4:64:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:57:41 2024 by rpki-client on console-fra.rpki-client.org