Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/Qsn_bYMf-LJZWXbKfjGzliqj-tY.roa
File: Qsn_bYMf-LJZWXbKfjGzliqj-tY.roa (raw, json)
Hash identifier: UbXnmqrabZMXC9E5uDtBoFRFNFXF5Ifurr9jZPZcDmU=
Subject key identifier: 42:C9:FF:6D:83:1F:F8:B2:59:59:76:CA:7E:31:B3:96:2A:A3:FA:D6
Certificate issuer: /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial: 018CC4253B27CA46D44A69086D56DE181D6C
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/Qsn_bYMf-LJZWXbKfjGzliqj-tY.roa
Signing time: Mon 01 Jan 2024 08:30:23 +0000
ROA not before: Mon 01 Jan 2024 08:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 93.190.221.0/24 maxlen: 24
93.190.223.0/24 maxlen: 24
93.190.220.0/24 maxlen: 24
93.190.222.0/24 maxlen: 24
93.190.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3b:27:ca:46:d4:4a:69:08:6d:56:de:18:1d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Validity
Not Before: Jan 1 08:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42c9ff6d831ff8b2595976ca7e31b3962aa3fad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:92:54:f9:4c:20:50:f3:af:55:af:7f:3f:
87:fc:ce:6f:c9:f9:91:5b:db:5b:3e:ca:95:7c:81:
0c:d1:62:1c:8d:0b:7b:ba:a9:06:3a:57:ca:1d:69:
25:98:37:04:77:3a:75:fd:d3:a5:45:d7:71:02:d8:
3a:84:0a:b0:62:f8:a6:0b:43:90:85:9c:79:93:ce:
b2:bd:ed:45:c7:a1:1a:a0:d1:19:da:9b:1f:18:a5:
93:07:51:8e:e9:9b:65:fc:af:64:b4:0e:8f:ff:1f:
70:26:18:a9:35:d7:65:ce:2d:9e:1e:68:cc:d2:9a:
11:40:02:30:79:bf:b5:0f:33:36:17:ab:80:b1:0b:
80:44:62:f5:62:34:69:ea:12:a9:5a:fa:35:c6:2d:
4e:ab:62:b8:e2:dd:5a:4a:12:fb:8f:00:2f:2b:da:
31:2b:65:1b:f5:ec:ea:91:74:47:a5:64:bd:34:d2:
f4:09:06:cc:ee:7c:c9:52:64:84:d7:c7:34:ed:77:
61:14:4d:09:27:e8:f3:75:f1:b5:bf:a5:8e:3b:76:
3c:e4:4d:61:6d:6d:9a:44:be:7f:1d:01:0c:c9:e7:
94:9e:6a:d7:fe:ae:6c:00:2c:c3:08:89:d9:b4:84:
ca:25:62:e2:13:9c:9a:f3:e5:56:c4:ce:3f:1a:63:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C9:FF:6D:83:1F:F8:B2:59:59:76:CA:7E:31:B3:96:2A:A3:FA:D6
X509v3 Authority Key Identifier:
keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/Qsn_bYMf-LJZWXbKfjGzliqj-tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.220.0/22
Signature Algorithm: sha256WithRSAEncryption
e3:58:31:37:6f:9b:d9:8f:4b:7a:25:e0:f6:5b:71:f2:9e:04:
b6:18:02:07:8e:11:c0:54:45:4c:cb:5d:07:c0:39:ac:9a:72:
71:8f:48:e5:4e:47:15:52:cf:2a:f9:ce:90:57:b8:27:60:2a:
b7:f0:3a:72:6c:69:51:0e:5f:57:0a:7a:84:59:ae:23:97:58:
f5:9e:e0:c2:76:bb:da:2e:d7:51:a4:07:e1:7d:95:24:74:90:
36:59:2b:17:bb:c7:5f:5d:f0:c7:34:1b:f9:55:c9:15:95:54:
b2:29:32:0b:03:bc:31:0a:7a:3d:bb:59:8f:f5:bc:8b:bb:f5:
3a:f3:a8:a5:b5:3b:e7:19:78:27:eb:7e:b6:a4:e0:ce:5f:36:
88:c4:16:99:0e:4f:94:5c:77:9c:94:b7:8d:e6:4d:b3:aa:79:
b3:b4:2e:d5:e1:4d:df:b2:a3:45:87:ed:da:02:0e:5c:48:f7:
9a:36:b4:c6:fb:0a:b9:80:db:4e:7f:7d:04:7c:7f:97:c5:1a:
4f:c2:8f:8c:4c:46:5e:ee:24:7b:de:fa:c5:cf:55:be:47:38:
ee:ed:5e:0b:7c:e3:84:53:2b:fa:6e:8f:aa:ce:8b:a3:3e:51:
8f:41:b2:3c:45:8b:3a:f0:3f:1b:29:75:b7:91:b4:1b:cb:b4:
c8:24:40:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:06:39 2024 by rpki-client on console-ams.rpki-client.org