Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/QsvG-ZT_Jk80D8tftr-3_xY89m0.roa
File: QsvG-ZT_Jk80D8tftr-3_xY89m0.roa (raw, json)
Hash identifier: KA/mjJgdDYUtAEheMEHTNQwSBqxfrbOeCDtaBQpE0VM=
Subject key identifier: 42:CB:C6:F9:94:FF:26:4F:34:0F:CB:5F:B6:BF:B7:FF:16:3C:F6:6D
Certificate issuer: /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial: 0191C797D75B2447A3342984538596FE3652
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/QsvG-ZT_Jk80D8tftr-3_xY89m0.roa
Signing time: Fri 06 Sep 2024 13:48:22 +0000
ROA not before: Fri 06 Sep 2024 13:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209795
IP address blocks: 194.93.12.0/23 maxlen: 23
194.93.14.0/23 maxlen: 23
2a09:2080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c7:97:d7:5b:24:47:a3:34:29:84:53:85:96:fe:36:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Validity
Not Before: Sep 6 13:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42cbc6f994ff264f340fcb5fb6bfb7ff163cf66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:af:32:80:f0:7a:b1:26:71:10:b3:c3:31:96:
24:49:9d:3b:95:a0:63:4e:46:3a:93:63:e1:30:76:
ed:f7:de:bb:aa:a3:51:65:a3:14:30:c9:d1:47:5b:
25:ed:d7:18:0d:f3:59:32:d9:e0:8e:28:07:68:be:
89:09:84:c5:f9:4e:ec:18:6f:32:e2:95:55:ee:bd:
03:92:14:9e:b6:17:89:31:f8:60:64:27:9b:d0:ec:
63:e7:fc:49:6d:c9:97:ff:d4:fb:79:3f:68:15:f5:
ad:66:f5:65:13:bd:ee:4b:10:0a:77:27:1c:bc:3a:
30:49:c7:9d:e9:96:85:c9:d9:a6:b2:f6:46:6a:1b:
aa:d0:df:85:5c:b4:07:b5:64:10:08:e8:d1:9e:83:
df:f8:30:59:de:48:e3:e6:e4:35:e8:53:25:51:20:
88:03:7a:5d:76:6a:f4:20:e8:10:df:3e:34:f2:be:
0f:f9:08:7c:ab:38:6f:45:c9:9d:90:bb:03:ea:d0:
87:fe:e2:8d:12:74:f4:dc:b4:f7:73:a3:6e:8d:b1:
d3:45:c2:1e:48:bb:97:47:8e:1c:da:8b:df:64:e7:
a0:36:54:f2:31:1f:c9:2c:64:cb:6b:40:b4:80:a4:
e8:5e:86:5d:b5:33:e0:9a:95:bc:19:2a:a3:7c:e5:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CB:C6:F9:94:FF:26:4F:34:0F:CB:5F:B6:BF:B7:FF:16:3C:F6:6D
X509v3 Authority Key Identifier:
keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/QsvG-ZT_Jk80D8tftr-3_xY89m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.12.0/22
IPv6:
2a09:2080::/29
Signature Algorithm: sha256WithRSAEncryption
b9:bb:d4:ae:08:2a:63:ab:3e:a2:d5:30:18:8c:d1:e2:6a:99:
40:93:1f:aa:5d:f6:97:60:f6:02:69:0e:9d:a0:4d:47:a0:c7:
b2:68:2a:31:ac:0c:8b:7a:5e:79:b6:67:87:cc:71:b2:9c:e7:
61:a1:e4:37:5f:f5:cf:35:30:d5:d4:8b:7c:03:fa:24:f7:7e:
83:be:31:3b:23:af:61:98:2d:30:fe:34:af:89:2b:fd:d4:77:
d9:00:cf:67:5c:0f:d7:9e:e7:05:a3:1b:ef:6d:62:e2:af:94:
85:a8:ad:d7:7e:a2:1c:40:6d:fa:4a:83:ac:37:aa:20:2e:ee:
48:60:1e:a6:46:ab:b2:1f:21:f1:36:4b:33:f0:02:a7:68:b9:
e8:73:ac:4b:b8:e5:41:70:32:c7:fd:5b:83:2e:92:9b:70:99:
24:51:d7:e1:3a:19:c0:f5:d4:1f:5a:58:f7:b3:46:95:07:8f:
35:66:6b:6c:d8:be:27:99:8e:6c:e3:72:0d:4a:70:c0:38:d0:
aa:65:84:0d:f4:ca:32:3f:f3:c2:9d:0f:61:73:6b:87:b0:20:
38:21:0f:4d:65:1e:80:64:2e:be:89:2e:82:ea:cf:c3:3f:f0:
b0:0c:77:be:f7:62:3f:26:11:f6:e6:ab:5e:2a:91:ef:f0:b8:
93:11:8e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:37:39 2024 by rpki-client on console-ams.rpki-client.org