Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/Q0sU3H_OO-BcZsv2yXhMvxmLZ-k.roa
File: Q0sU3H_OO-BcZsv2yXhMvxmLZ-k.roa (raw, json)
Hash identifier: 4iu+2W/1CdRCs01jHgL0ZJwYQoEl+gwAhnXt6Yfc9PY=
Subject key identifier: 43:4B:14:DC:7F:CE:3B:E0:5C:66:CB:F6:C9:78:4C:BF:19:8B:67:E9
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 0192ADF57231FC2FA7ED2D35C1B5372A7A13
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/Q0sU3H_OO-BcZsv2yXhMvxmLZ-k.roa
Signing time: Mon 21 Oct 2024 07:23:16 +0000
ROA not before: Mon 21 Oct 2024 07:23:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 273241
IP address blocks: 158.172.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ad:f5:72:31:fc:2f:a7:ed:2d:35:c1:b5:37:2a:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Oct 21 07:23:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=434b14dc7fce3be05c66cbf6c9784cbf198b67e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:7b:f2:ab:04:96:37:8f:99:8f:5c:72:fb:
96:c9:c6:4b:32:ac:90:db:c9:3c:5b:2e:2a:69:1b:
ae:53:0c:d4:b1:47:4a:b5:e4:b6:49:e8:55:5a:11:
bb:fa:b3:6a:48:d2:26:02:e8:98:4e:6d:4b:32:02:
9f:9c:eb:20:d5:d0:14:83:91:d5:8c:8f:ca:ef:92:
e8:27:90:34:00:16:6c:35:0e:c3:98:50:1e:05:82:
9d:17:47:a6:07:74:51:76:21:8e:1e:e7:49:e3:4b:
6e:8f:10:a2:21:b9:f7:86:55:05:71:7f:6c:b0:f5:
bc:e9:ce:a8:a9:19:88:bc:d9:cb:68:78:43:4c:58:
95:42:5e:e7:9b:47:48:33:b0:e6:23:51:69:9a:25:
81:b7:dd:ca:62:bf:35:02:9c:32:9a:5e:78:64:bd:
b1:dd:7d:a7:78:b2:f6:f6:a2:e1:99:49:86:3c:b9:
fe:71:80:69:a3:f5:28:08:61:7c:84:a0:43:c6:5c:
08:1a:ec:f3:2a:68:d8:ab:a3:32:41:cd:28:68:ae:
d6:18:a8:94:30:71:08:3e:49:6c:df:a7:4a:2b:48:
3a:b4:d5:de:a8:41:51:66:ad:78:8c:4f:6c:c7:7a:
34:10:5c:66:d9:a0:bc:e5:c7:7b:fc:8f:78:e9:eb:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4B:14:DC:7F:CE:3B:E0:5C:66:CB:F6:C9:78:4C:BF:19:8B:67:E9
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/Q0sU3H_OO-BcZsv2yXhMvxmLZ-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.223.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:0d:89:37:31:df:24:db:5b:4f:82:f2:b6:94:78:d1:a3:af:
60:57:3b:66:bd:1f:f1:f1:66:1e:14:f1:4a:8c:e4:82:43:54:
aa:16:76:e7:3b:70:94:b0:6f:18:f1:45:be:4c:28:0c:4f:79:
1f:2b:de:ac:dd:f7:2c:cc:b8:6b:e8:61:3b:3e:d4:54:0b:ba:
d1:42:0c:c4:a1:71:54:d8:2e:21:09:ee:4d:89:3d:42:6f:2e:
57:91:ed:d2:0e:2f:4d:09:9e:ac:69:74:76:fd:31:a3:9b:a4:
26:14:b0:39:62:81:f5:e6:47:46:11:37:56:0f:bc:aa:ab:56:
37:3b:a4:80:92:c1:51:54:50:e5:85:46:45:58:da:03:b7:20:
3b:47:dd:fe:21:f0:f8:66:6a:e6:52:57:ae:90:95:59:de:be:
a6:a7:f3:7c:89:e2:3c:e2:a0:3c:d6:8b:5c:dc:69:9a:37:b9:
5b:cb:bb:fa:d1:5a:19:be:12:35:1b:ea:c7:29:08:37:e9:e0:
5f:86:c4:98:e9:b7:9e:dc:39:dd:78:68:68:1b:18:3c:82:54:
a7:d1:ae:7d:90:a7:d3:8a:ff:9b:97:6e:70:93:b7:ff:86:d8:
60:40:ae:d7:3b:17:e3:92:cf:bb:a7:5d:62:1f:c8:95:8a:26:
46:ec:e1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:06:21 2024 by rpki-client on console-ams.rpki-client.org