Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/Qqd_GpAqiLfCvm9g-nL5SgAj8Vc.roa
File: Qqd_GpAqiLfCvm9g-nL5SgAj8Vc.roa (raw, json)
Hash identifier: Ay4vLwzLi93k9UUQwE4KmwDDeyL/kp4vf4nqxPxdDmg=
Subject key identifier: 42:A7:7F:1A:90:2A:88:B7:C2:BE:6F:60:FA:72:F9:4A:00:23:F1:57
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 018CC9BC143193F985C58E6AC242CD547AF9
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/Qqd_GpAqiLfCvm9g-nL5SgAj8Vc.roa
Signing time: Tue 02 Jan 2024 10:33:15 +0000
ROA not before: Tue 02 Jan 2024 10:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51185
IP address blocks: 193.29.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:14:31:93:f9:85:c5:8e:6a:c2:42:cd:54:7a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Jan 2 10:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42a77f1a902a88b7c2be6f60fa72f94a0023f157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:1f:ed:4a:c5:81:b0:94:dd:ae:cf:51:df:
f2:4c:e1:f8:c8:d1:14:b9:d0:d8:26:4f:ea:df:6b:
9c:7e:3b:ec:b9:ed:01:e3:57:91:1f:a8:d0:a3:3d:
05:54:98:6b:b6:33:b9:b4:4c:de:c2:66:7d:f7:26:
aa:f7:a7:ef:3d:89:f9:99:06:30:d1:18:64:c1:18:
0e:b3:4b:bd:69:94:ff:11:f6:15:7f:d6:a5:3b:52:
ce:03:6d:af:4e:94:1a:02:b0:2e:0c:3b:76:3b:57:
d6:cf:df:0a:a6:6c:f7:35:70:d4:e9:f4:8a:64:0a:
52:15:5a:9c:47:7f:00:54:86:c0:4f:3e:a2:c3:db:
74:4f:e3:9e:97:f9:33:77:b8:b3:db:2a:ed:7d:25:
69:9f:c3:51:27:ff:d3:a7:53:92:d6:31:c6:f5:a6:
74:03:21:c4:3c:57:b3:3a:14:d9:eb:b7:06:2e:a0:
c2:f6:9a:7d:a5:bb:3d:5e:18:5f:6a:c5:6a:45:45:
1e:6f:56:f3:c8:68:64:c0:ae:00:a2:de:6d:9b:76:
e0:5b:aa:2a:64:e4:54:88:fc:6c:3e:90:f6:41:6e:
54:52:33:73:15:89:98:d0:b3:8f:ec:31:56:57:21:
6f:84:eb:b1:9b:49:4a:8f:da:bc:6a:91:c1:f3:f7:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A7:7F:1A:90:2A:88:B7:C2:BE:6F:60:FA:72:F9:4A:00:23:F1:57
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/Qqd_GpAqiLfCvm9g-nL5SgAj8Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.21.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4a:d4:7a:66:67:63:28:cf:7f:a4:29:78:19:cb:71:35:ce:
8b:32:24:f7:1a:b6:2e:5a:d5:f1:b2:66:fa:2c:75:10:40:36:
a0:1e:28:34:23:6a:fa:bf:d0:a8:65:4f:76:03:12:a3:13:c2:
b0:8e:ec:46:09:2c:28:ba:bf:21:fe:34:24:15:31:02:0f:1d:
a8:19:84:23:35:6a:84:51:6e:6f:55:94:eb:46:68:0c:e6:83:
f3:cf:5c:21:52:67:7d:1b:c6:d6:16:cc:81:c1:78:a5:49:b6:
92:4a:ff:6b:b0:e9:7c:00:7b:38:95:5d:9d:3b:6d:67:b6:bd:
96:3c:38:c8:67:c7:44:28:d7:f4:4a:f8:70:fd:a0:5b:60:a4:
f7:6c:0f:91:29:a8:54:4d:82:fd:1f:cb:ac:da:b1:06:61:7e:
a2:8c:52:27:8e:90:4d:61:4d:08:30:58:ba:c3:73:75:8c:d2:
f3:3b:58:3c:d1:33:16:17:8a:ba:8a:cd:96:79:62:a8:46:cc:
38:34:24:30:7a:d7:73:80:10:cb:bc:97:8b:ef:96:e9:b3:06:
33:24:cf:e0:c2:b7:20:20:f8:72:ec:da:80:ac:5a:19:f0:1f:
87:1c:c2:f7:57:8a:8e:28:c8:c5:a2:ec:57:c3:59:35:7c:22:
ce:4b:e1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:54:12 2024 by rpki-client on console-fra.rpki-client.org