Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/qclYjs_OPDa0soOTfsgsg_rud1k.roa
File: qclYjs_OPDa0soOTfsgsg_rud1k.roa (raw, json)
Hash identifier: QDGxVWR8+aLLPvEnSxArlHjoc8/Uja8MGaLQfqM7yU0=
Subject key identifier: A9:C9:58:8E:CF:CE:3C:36:B4:B2:83:93:7E:C8:2C:83:FA:EE:77:59
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 018CCA2A7F0A5E249CC0E9ECE83D68E2C98E
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/qclYjs_OPDa0soOTfsgsg_rud1k.roa
Signing time: Tue 02 Jan 2024 12:33:51 +0000
ROA not before: Tue 02 Jan 2024 12:33:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13631
IP address blocks: 194.59.56.0/23 maxlen: 24
2a13:bb80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:7f:0a:5e:24:9c:c0:e9:ec:e8:3d:68:e2:c9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Jan 2 12:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9c9588ecfce3c36b4b283937ec82c83faee7759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:46:3a:a5:32:fa:b6:0c:d4:e4:8d:06:2f:
9e:c1:75:1c:f5:1a:06:41:a0:72:d4:7c:12:13:64:
c6:17:43:e9:db:42:31:5a:31:94:36:79:01:b8:0c:
4b:44:17:e0:a1:bb:ce:22:7d:14:c0:c3:62:a6:a1:
90:0b:9a:3e:dd:6f:b7:5d:48:10:2a:69:11:f8:26:
58:41:11:b5:4a:e2:85:51:42:05:af:66:94:c1:aa:
5b:67:26:91:64:47:5c:6f:d6:3f:0f:2c:28:81:e0:
29:48:5c:ef:8a:bd:4f:d8:f5:79:b2:88:cd:e5:84:
27:2a:84:99:2f:f3:f8:f7:18:43:91:01:87:58:78:
ea:e4:7d:de:0b:0b:85:b0:42:5c:b7:17:45:0b:f2:
d5:93:bf:e3:e9:10:7f:7d:0d:b1:f8:4e:62:e5:6c:
2e:92:2c:2c:22:7a:21:33:92:58:a8:d4:e2:e6:e3:
0b:ee:cc:5d:bd:d2:db:cb:60:b5:0d:92:29:d5:06:
1d:fe:2b:91:4f:ec:0d:e4:37:c9:33:fa:4f:b3:c3:
e7:53:5e:11:6b:30:1e:3a:6e:f4:a1:27:2a:ff:42:
d5:52:da:db:8f:7e:18:ba:78:25:76:7d:86:52:cd:
54:84:36:2d:4b:e2:62:4f:ce:93:f7:00:cb:0a:2b:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C9:58:8E:CF:CE:3C:36:B4:B2:83:93:7E:C8:2C:83:FA:EE:77:59
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/qclYjs_OPDa0soOTfsgsg_rud1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.56.0/23
IPv6:
2a13:bb80::/29
Signature Algorithm: sha256WithRSAEncryption
b2:85:6c:f1:31:6b:56:2f:42:fe:df:0b:75:85:9a:aa:f1:b0:
13:8c:28:ed:d7:00:e4:c9:66:72:73:31:21:03:63:a4:ac:81:
16:a4:1b:c9:eb:5a:d5:5a:b5:18:9a:23:06:af:27:d1:ed:2c:
81:4b:6f:ba:63:e6:df:61:99:44:09:a5:b0:c3:d3:1c:9e:0e:
39:45:41:0a:50:74:6d:b6:f4:f8:3b:97:5e:cc:a7:d7:7b:4d:
45:9c:77:f7:1a:2a:ca:5e:fa:90:e9:a4:50:48:a0:c3:45:18:
b7:1f:39:80:5b:14:b9:63:ea:9a:a7:85:d2:36:5d:ea:e3:e9:
dd:8f:84:15:ab:2d:6a:6a:7d:dd:f9:4c:a0:ce:0e:17:02:a6:
c4:a9:9d:e6:1a:a2:05:55:53:b7:14:40:1a:33:88:32:7a:98:
ea:4a:ee:16:1a:5a:57:06:e7:fc:ea:5e:0c:c6:ab:bc:c8:1d:
1d:9e:9a:0b:88:40:60:43:ce:62:6f:23:6d:a8:e5:5c:c0:8f:
aa:72:e5:1f:17:eb:66:1b:6a:69:f4:66:f6:b1:dd:43:45:19:
91:87:6b:5d:a1:72:b0:c1:af:99:b0:75:9d:52:ba:80:05:05:
4e:3f:90:91:4f:58:53:bb:0e:9d:5c:73:32:9a:7e:a7:f5:98:
ef:e9:32:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:07:17 2024 by rpki-client on console-fra.rpki-client.org