Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/cqupClEpErRUAwttVK9k7UEGNe0.roa
File: cqupClEpErRUAwttVK9k7UEGNe0.roa (raw, json)
Hash identifier: HWGJVx/YI02lhWp3vssrW1BnkO/lmb3xVFLnQ6pwzzI=
Subject key identifier: 72:AB:A9:0A:51:29:12:B4:54:03:0B:6D:54:AF:64:ED:41:06:35:ED
Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial: 018CC64B0EC572454BDC016E02DE79E9D1A4
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/cqupClEpErRUAwttVK9k7UEGNe0.roa
Signing time: Mon 01 Jan 2024 18:30:56 +0000
ROA not before: Mon 01 Jan 2024 18:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200374
IP address blocks: 195.5.98.0/23 maxlen: 23
194.53.64.0/22 maxlen: 22
2a0c:f7c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:0e:c5:72:45:4b:dc:01:6e:02:de:79:e9:d1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Validity
Not Before: Jan 1 18:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72aba90a512912b454030b6d54af64ed410635ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:c9:5b:73:6a:28:fa:72:78:37:91:7e:97:
e8:48:25:5f:d7:2c:3e:b5:12:a6:18:02:dc:35:3d:
5a:12:d0:69:94:93:a4:fe:64:dc:60:43:e4:2e:4e:
35:7d:70:3b:3c:fe:e8:c8:c8:4b:01:3c:6f:48:f3:
5c:f4:1b:93:1d:d5:14:ad:80:72:61:8d:6c:f3:28:
f6:4d:80:9a:c0:bd:a4:19:7a:dd:68:a7:3d:85:ba:
97:39:d9:12:78:87:38:ab:e3:9c:72:4e:6a:07:74:
cd:7d:81:df:84:24:78:e8:f3:e4:a6:b2:bf:a0:6b:
5b:32:b1:cd:25:c3:a4:9e:28:cf:76:c5:6f:77:70:
39:8d:cc:0b:d2:79:54:13:7b:7d:51:89:8e:de:83:
fe:c9:f8:7d:2b:74:93:2f:d8:ce:01:28:d2:17:69:
f9:b7:9a:83:4d:a7:3c:9a:29:5a:b0:c6:9f:c9:2d:
32:5c:23:14:94:23:1c:07:22:8f:2a:8f:72:7a:2c:
c9:8a:dc:06:44:e0:07:c1:ef:d6:95:13:87:2c:83:
d5:85:3a:53:95:29:d0:7d:7a:08:57:c0:89:eb:e3:
ae:c6:75:d0:f4:f2:a5:30:43:39:b3:19:4a:0d:f3:
6b:f6:03:82:d9:9f:42:fe:0d:64:64:da:66:0c:27:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AB:A9:0A:51:29:12:B4:54:03:0B:6D:54:AF:64:ED:41:06:35:ED
X509v3 Authority Key Identifier:
keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/cqupClEpErRUAwttVK9k7UEGNe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.64.0/22
195.5.98.0/23
IPv6:
2a0c:f7c0::/29
Signature Algorithm: sha256WithRSAEncryption
a3:6e:a4:6f:f3:d4:08:c4:c8:06:72:a1:ee:a4:e0:ec:14:3e:
7d:ae:28:e1:eb:7a:61:e1:9c:1f:4b:14:05:89:b3:f1:e6:55:
1e:e3:cb:4f:fd:3b:ae:ef:ba:a3:0d:87:21:31:ce:2a:91:7a:
f9:c3:88:c9:43:95:d9:44:80:8c:dc:10:c1:68:1b:11:29:05:
e3:a1:04:6c:63:fc:1a:2f:9b:72:e4:7a:7b:b6:e1:58:cb:12:
94:43:0f:77:ed:50:d9:cf:16:cf:a2:b4:e0:d0:4e:9f:71:e8:
c5:6e:84:f1:0f:d8:17:b0:45:43:92:42:de:e0:a8:ab:2f:43:
f1:aa:5e:b7:ed:d2:68:b4:a0:5f:22:ef:3c:0f:e0:58:91:14:
8c:4e:0a:50:0e:33:26:4f:bb:59:02:5b:03:76:67:f1:74:70:
f3:3f:99:d7:a8:ab:e1:f5:60:a0:0c:76:82:cf:68:d0:bf:7d:
22:dd:c3:5c:4e:88:5c:e1:7c:29:1a:44:5f:cc:26:54:1e:df:
48:60:62:42:0a:05:da:ee:94:5a:b4:ec:72:bc:9f:4d:5a:bd:
e4:11:5a:2e:78:5d:05:18:1c:fb:f1:89:54:44:84:90:1d:cb:
d0:3a:81:21:ea:0e:d5:4e:3a:0d:4c:ff:97:52:6a:75:7b:ee:
6c:e2:ea:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:37:16 2024 by rpki-client on console-ams.rpki-client.org