Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/QffxSGuMBYwQmiKgj6g99LmcRIU.roa
File: QffxSGuMBYwQmiKgj6g99LmcRIU.roa (raw, json)
Hash identifier: z6Z6A7V0ApHNBvPfjcAHZQHxoZQKlqeD4PWHMCdZrEM=
Subject key identifier: 41:F7:F1:48:6B:8C:05:8C:10:9A:22:A0:8F:A8:3D:F4:B9:9C:44:85
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018CC86F28049ED582616F39226E15454727
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/QffxSGuMBYwQmiKgj6g99LmcRIU.roa
Signing time: Tue 02 Jan 2024 04:29:37 +0000
ROA not before: Tue 02 Jan 2024 04:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 93.152.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:28:04:9e:d5:82:61:6f:39:22:6e:15:45:47:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 2 04:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41f7f1486b8c058c109a22a08fa83df4b99c4485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:cd:fc:2e:bf:bb:58:db:88:df:9e:3f:56:
ad:ea:db:ce:e9:f5:c3:26:74:3c:8d:83:f4:0d:e4:
19:b2:8d:e7:80:7a:93:95:17:94:83:28:31:75:28:
d8:aa:7a:55:a9:10:19:21:83:47:9e:8b:cd:5b:c9:
7d:7e:7f:1f:ad:51:59:3c:8c:c6:ca:a4:54:33:48:
ed:bd:4d:d0:a4:86:0b:47:14:f7:80:8e:e1:fa:ec:
d0:c4:bd:4c:9b:f8:c6:67:17:b9:79:9a:14:79:8d:
df:7e:47:20:be:d6:64:1a:4c:8a:9f:b7:d1:3b:57:
f6:ce:28:17:ed:00:bc:59:ef:41:8e:5e:56:bb:c0:
51:a2:5b:34:d8:65:76:a0:fb:d2:7c:d5:d6:e5:b8:
5e:1e:c2:a1:37:85:08:0c:54:7f:14:29:3c:d0:d2:
09:ad:f7:ee:e2:8e:f4:8a:64:d3:69:9a:6a:c3:d2:
02:f0:5f:cc:2a:40:03:ad:81:11:3d:c8:53:b4:30:
e0:7b:e6:fb:eb:8d:6b:2d:31:7a:8f:1f:5a:92:64:
7f:b4:ed:90:cc:1b:7c:13:b7:c0:fd:46:4e:39:bf:
39:82:2c:36:2a:c9:f8:35:5b:95:0e:9c:05:f2:21:
d5:73:b4:60:d1:85:09:dc:0c:26:dd:60:bf:42:ef:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F7:F1:48:6B:8C:05:8C:10:9A:22:A0:8F:A8:3D:F4:B9:9C:44:85
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/QffxSGuMBYwQmiKgj6g99LmcRIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.225.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5e:40:81:5a:ce:16:e7:ad:73:a5:07:4c:08:88:b8:c7:ba:
05:3f:37:63:f9:0b:e1:0d:fa:c3:87:78:7e:f2:f4:a8:25:17:
56:b6:d3:d3:89:25:4b:77:f2:f9:82:85:40:5c:cf:de:d0:0c:
ed:7b:17:81:86:c5:be:d4:4f:ca:fc:52:fb:bf:7c:f8:67:ad:
14:62:33:0b:a2:61:95:68:31:90:98:35:f7:ba:6a:67:5c:11:
51:9b:ff:1a:95:b7:65:fb:56:aa:d9:03:72:0e:2e:2c:17:ef:
40:0f:cf:90:d2:7e:04:5a:56:52:c5:cd:53:73:8b:86:79:70:
5e:3e:c3:bd:e9:f2:85:e4:e4:2b:51:fc:55:69:95:c7:5b:8e:
7e:c0:cc:d6:ba:34:b2:55:59:10:0b:dc:f9:d7:6e:cb:1f:e6:
70:67:95:c4:81:7b:aa:48:4f:a1:f0:a1:cc:44:52:c8:e8:2d:
29:e7:c4:9d:8f:f6:15:61:3c:5d:35:27:d0:2c:d8:2b:31:dc:
df:71:4a:9e:01:26:79:4c:78:1d:d0:bb:18:ea:8a:51:d5:ba:
92:1b:00:58:21:82:46:cf:b4:12:64:ef:45:e6:56:42:20:49:
cd:0f:95:41:1c:d9:f4:08:34:0e:33:b2:9a:fe:7d:c3:a1:7d:
47:8e:7d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 21:31:14 2024 by rpki-client on console-ams.rpki-client.org