Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/qMRJY-nf_g8o5Rpyutbn1EaW3cU.roa
File: qMRJY-nf_g8o5Rpyutbn1EaW3cU.roa (raw, json)
Hash identifier: Yp77neOhO441p3TnS0FpVX0xqCQeh5K631ba8ZCr5gw=
Subject key identifier: A8:C4:49:63:E9:DF:FE:0F:28:E5:1A:72:BA:D6:E7:D4:46:96:DD:C5
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 018CC9BBC69043F4BA7EF4089060432D3508
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/qMRJY-nf_g8o5Rpyutbn1EaW3cU.roa
Signing time: Tue 02 Jan 2024 10:32:55 +0000
ROA not before: Tue 02 Jan 2024 10:32:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199484
IP address blocks: 130.255.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:c6:90:43:f4:ba:7e:f4:08:90:60:43:2d:35:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Jan 2 10:32:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8c44963e9dffe0f28e51a72bad6e7d44696ddc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:92:8e:68:c4:83:2c:33:5d:14:11:47:e4:
8b:f2:3e:7c:4e:5e:f5:92:4e:cb:15:9f:b2:a2:96:
17:62:f9:12:ed:55:af:08:da:f0:43:ff:55:c7:a6:
01:30:90:47:6f:9d:67:ba:91:9f:4c:4b:18:b4:76:
70:8e:8e:af:f4:48:92:47:21:47:fa:03:0b:72:3d:
b0:a9:43:91:49:ce:28:90:49:d6:a5:7a:22:28:b4:
a5:76:5f:e6:e0:78:c6:05:f7:1e:76:e1:0d:80:e9:
32:6e:46:3b:a2:a8:a3:d0:49:c7:f4:9b:80:35:8b:
18:9b:87:2f:ec:a6:21:7c:81:ef:2e:94:90:e2:ae:
68:c7:ba:b0:6e:ea:8c:2b:25:53:78:55:91:22:ed:
b7:fc:4a:ea:6b:11:73:e4:ce:06:2a:29:5b:07:66:
d6:fb:e1:8c:2b:eb:d5:89:6e:8d:31:2c:19:f9:f8:
3a:2e:e0:3d:65:df:ae:96:c5:dc:f6:f1:67:5f:0f:
04:3a:5e:39:50:44:a7:20:8b:1f:78:8f:53:d8:b5:
b9:5e:2f:c6:65:f6:da:0d:ac:9c:c5:85:cc:38:28:
d2:45:b3:ba:bc:76:9d:c7:bc:32:54:54:c0:dc:c5:
f2:ca:e1:57:ca:6d:77:a1:e1:73:0f:f4:27:f2:8c:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C4:49:63:E9:DF:FE:0F:28:E5:1A:72:BA:D6:E7:D4:46:96:DD:C5
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/qMRJY-nf_g8o5Rpyutbn1EaW3cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.173.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:54:85:86:d1:2f:40:10:e6:ae:95:fa:93:5d:95:9e:34:90:
17:76:48:3f:ce:f8:e8:e9:e5:09:ae:ba:52:42:ce:fd:db:2d:
85:ff:62:fb:f9:f5:e3:9a:8f:ee:c0:19:48:5d:cd:0f:b1:2e:
3a:bd:4f:10:04:c3:78:3f:54:c7:c4:c3:74:71:04:67:64:40:
13:8c:23:5c:9c:45:df:49:cf:f0:61:de:f0:3f:41:e0:8f:94:
05:4e:5b:94:f3:7c:02:20:c1:f0:b9:83:a3:0e:0c:a0:69:0e:
06:8d:53:6e:38:40:52:0a:05:16:a7:a9:bd:88:cb:c0:97:9b:
c4:c4:06:ed:93:76:b7:94:9f:58:6c:24:c6:57:e1:a0:1d:3c:
75:50:53:6e:29:80:8e:57:47:16:82:d6:b7:f5:2c:c8:61:c0:
81:ef:a7:32:3c:9e:16:84:93:93:14:84:92:97:85:63:ff:1d:
06:e8:8e:31:b3:8a:72:dc:c6:42:81:a0:85:23:50:f4:10:9d:
68:e9:bd:1d:4e:c0:af:98:81:57:62:65:44:96:34:75:19:c7:
f2:58:cb:32:25:9d:b9:00:a2:50:0b:56:ba:4e:c4:08:9e:3b:
e4:1a:23:38:a4:b5:16:10:66:a3:7b:69:74:91:8c:43:2f:bf:
13:23:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:24:34 2024 by rpki-client on console-ams.rpki-client.org