Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QEGJn1nX67Yh703hRFj_HlcMKdo.roa
File: QEGJn1nX67Yh703hRFj_HlcMKdo.roa (raw, json)
Hash identifier: oFyBXCQiIqRQM6MsPy1h7xUWKwgg1ceCpKG/bN+pv3M=
Subject key identifier: 40:41:89:9F:59:D7:EB:B6:21:EF:4D:E1:44:58:FF:1E:57:0C:29:DA
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802EDC2814E215D44811D7B69129049
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QEGJn1nX67Yh703hRFj_HlcMKdo.roa
Signing time: Tue 02 Jan 2024 02:31:24 +0000
ROA not before: Tue 02 Jan 2024 02:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44136
IP address blocks: 193.180.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:ed:c2:81:4e:21:5d:44:81:1d:7b:69:12:90:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4041899f59d7ebb621ef4de14458ff1e570c29da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:90:01:98:8b:98:8a:04:72:3c:a2:1b:07:68:
b0:d9:c8:b3:f8:61:71:3a:e3:fb:92:dc:e9:08:39:
17:82:0f:ba:2c:15:72:8c:0a:ab:aa:75:34:b0:bf:
51:77:f7:e6:43:33:35:e5:6b:54:46:31:92:d4:46:
a0:ef:23:c8:c9:58:df:b3:16:d3:54:d0:58:1b:05:
6c:af:ab:c7:d0:ba:b8:68:d1:d4:a1:02:35:64:e8:
fc:f4:d0:99:76:46:a3:58:a4:e2:7d:f6:b5:7b:20:
60:3f:20:3d:cc:d7:4b:0e:77:85:c0:ac:39:6b:8a:
00:cd:97:ac:eb:62:fe:26:0b:30:b3:a8:e9:ff:26:
37:4d:8c:0e:ec:03:80:b0:d8:fe:54:20:8b:c1:6b:
01:1a:1c:0d:80:60:65:ef:60:c1:4d:5c:64:90:0a:
42:76:e3:c6:5c:5a:93:25:ac:da:1e:22:64:e2:aa:
4f:6d:8e:0a:e2:5b:9d:16:59:9f:8d:1d:55:f9:d4:
8a:6d:e5:3a:10:76:e9:36:1b:6f:d7:71:ee:29:15:
05:76:63:bf:00:0f:ef:1d:82:5e:d5:73:64:64:5c:
ac:d8:77:e8:5b:36:f2:c7:07:5a:8f:9b:1b:09:e6:
cf:07:11:8d:31:37:aa:eb:16:9e:ec:55:07:12:9c:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:41:89:9F:59:D7:EB:B6:21:EF:4D:E1:44:58:FF:1E:57:0C:29:DA
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QEGJn1nX67Yh703hRFj_HlcMKdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.18.0/23
Signature Algorithm: sha256WithRSAEncryption
08:98:70:fd:b4:78:71:36:ea:8d:a7:0c:c4:0e:a8:32:d0:f6:
c9:c3:d4:93:90:3f:6b:42:51:61:ff:65:db:99:86:c3:e9:52:
21:b4:17:80:9d:57:89:03:14:83:eb:9d:46:ff:bd:c4:6c:76:
6c:31:ed:29:97:34:83:ba:af:a2:92:0b:73:43:44:47:a4:98:
11:e5:fb:b2:5c:e7:a6:61:c0:84:58:41:31:bd:8b:31:07:8e:
94:f5:3b:64:5d:f7:ca:21:e6:fa:d9:f2:90:50:e6:a1:32:0a:
ab:dd:eb:50:cd:25:c0:48:90:04:be:39:d5:e3:65:7a:c7:e0:
06:ec:f7:22:e5:62:5e:c6:05:20:89:d6:d9:13:f0:43:6c:6e:
c4:b1:51:44:3c:88:be:f1:a5:01:f0:70:a9:9e:c6:8a:d0:4a:
1e:09:04:3a:c4:b5:67:20:91:6c:03:62:b6:e2:14:b9:eb:2f:
9c:be:4f:eb:d0:1c:75:b3:fb:5d:e5:96:7f:9f:5d:82:c0:37:
b0:9d:a9:0d:f0:2a:32:69:21:78:93:cb:12:ca:f6:f0:ac:a1:
c3:cb:5c:68:96:6b:0a:ed:a3:5d:c4:40:55:34:10:2b:fe:a1:
1b:47:86:12:c1:c7:92:e4:35:e7:dd:29:78:9f:37:cb:8f:17:
86:12:4b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 10:39:48 2024 by rpki-client on console-ams.rpki-client.org