Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/QyZMganY9YwuVnIdjRezsAg3HZw.roa
File: QyZMganY9YwuVnIdjRezsAg3HZw.roa (raw, json)
Hash identifier: fgi5eyudQ9iqLTVxWmhCpGVTqU8xadX4UNKpmdZWmwk=
Subject key identifier: 43:26:4C:81:A9:D8:F5:8C:2E:56:72:1D:8D:17:B3:B0:08:37:1D:9C
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E64B389FE707384D68FBF7CAE4302
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/QyZMganY9YwuVnIdjRezsAg3HZw.roa
Signing time: Tue 02 Jan 2024 08:33:27 +0000
ROA not before: Tue 02 Jan 2024 08:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207
IP address blocks: 149.126.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:64:b3:89:fe:70:73:84:d6:8f:bf:7c:ae:43:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43264c81a9d8f58c2e56721d8d17b3b008371d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:64:2e:6b:a7:e2:d3:a5:07:7d:35:f4:ce:
5f:ba:53:8e:09:42:63:54:a8:43:8d:5d:e9:84:60:
f0:ec:3c:c9:5b:51:2e:21:d1:bd:b8:14:e9:e9:87:
1c:84:25:8e:dc:8b:3e:c6:45:89:81:dc:de:cc:e0:
08:ee:4b:ea:33:9e:89:80:af:03:2c:f4:a6:7f:65:
c8:d3:51:a1:70:71:fa:5e:6a:46:f8:56:71:d5:00:
5a:e3:2d:d6:a7:b5:cb:c4:96:62:f5:e9:f2:0f:59:
b1:2e:ff:17:56:88:14:14:d6:b5:05:cd:94:42:05:
c6:5b:c9:81:2d:21:c4:ce:c6:9b:87:d9:d4:31:ba:
e4:42:73:66:96:69:1c:be:ed:1f:b1:8d:b3:13:3b:
fc:89:1f:42:2e:e3:4e:6b:c4:c4:f3:33:3d:6a:fc:
c2:63:22:5c:30:ae:da:2c:5a:fd:06:70:01:65:18:
9e:92:5a:d4:d6:f6:68:a0:3c:9e:c9:0c:c3:76:e4:
9f:93:e9:f2:27:c5:21:fb:9f:cf:1b:72:9d:12:d0:
d5:27:23:97:d0:4e:28:2f:33:11:72:9a:25:ff:53:
69:b1:47:bb:54:55:97:3c:58:8a:79:d6:1f:4d:53:
a7:be:5e:0b:dd:3c:1b:8b:57:23:ba:a0:96:5e:ae:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:26:4C:81:A9:D8:F5:8C:2E:56:72:1D:8D:17:B3:B0:08:37:1D:9C
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/QyZMganY9YwuVnIdjRezsAg3HZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.240.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a5:59:3a:b2:9b:c9:bd:51:80:36:7e:65:2e:f6:83:d9:1d:
e0:a3:a6:f2:8a:de:d9:41:0f:f0:ea:61:34:1c:70:4f:e1:a0:
9c:71:c7:a8:59:ab:bc:4d:8c:1d:e3:6b:ae:f4:a8:89:3e:c9:
9b:ee:90:d2:ca:0b:21:40:c2:0d:6d:f9:b0:dd:3d:e5:f8:ce:
57:90:86:5e:24:90:82:de:91:c2:01:45:bc:39:af:a1:09:bd:
59:a7:f4:69:64:6d:2f:09:31:ed:53:fb:cf:ab:f9:22:24:0a:
bc:e9:44:9c:37:16:df:63:0e:4b:5b:40:b5:c2:bb:71:83:42:
ac:e6:4a:c7:20:d5:84:c3:cc:71:ae:bb:90:4b:ae:e3:0f:27:
a2:d7:85:5f:8c:0f:cb:df:11:f5:54:0f:37:75:61:0b:d1:7c:
61:ed:f2:44:f4:d7:73:88:2a:f8:bb:19:db:6a:42:7a:9f:c0:
95:2e:ee:f9:7f:da:99:16:8e:6f:e3:0c:50:63:19:b2:79:49:
3f:31:fa:ea:d9:47:b9:bd:1f:fd:34:56:0f:9a:23:65:7b:eb:
01:67:4f:94:d9:97:1a:a6:35:c5:e8:d7:fa:d6:44:5b:7b:06:
26:39:2d:82:e5:06:7d:7c:29:41:72:e0:b8:6f:f6:86:07:e3:
29:38:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:50:57 2024 by rpki-client on console-ams.rpki-client.org