Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/qsfTu_ILJlVOXrdKnrOVgz_A8Aw.roa
File: qsfTu_ILJlVOXrdKnrOVgz_A8Aw.roa (raw, json)
Hash identifier: diKADwM8PPjwreT8DnFb8erO2u7/EJch8Dr342jcuOg=
Subject key identifier: AA:C7:D3:BB:F2:0B:26:55:4E:5E:B7:4A:9E:B3:95:83:3F:C0:F0:0C
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01932984D0770816AC4BA7FA2FF37A0F93DB
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/qsfTu_ILJlVOXrdKnrOVgz_A8Aw.roa
Signing time: Thu 14 Nov 2024 07:13:10 +0000
ROA not before: Thu 14 Nov 2024 07:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397630
IP address blocks: 213.145.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:29:84:d0:77:08:16:ac:4b:a7:fa:2f:f3:7a:0f:93:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Nov 14 07:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aac7d3bbf20b26554e5eb74a9eb395833fc0f00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:24:9f:fa:06:29:ed:3e:9a:12:68:26:c1:c0:
50:31:d5:92:99:09:e1:54:71:ca:51:1f:5b:04:e5:
f3:02:d3:2b:c8:9f:bc:a4:08:61:dc:f1:72:91:7d:
e6:2c:ba:83:0b:97:43:45:12:bc:9c:d7:5f:30:6c:
1a:02:6b:dd:5e:70:b8:48:d0:77:06:2f:32:77:dd:
c7:dd:51:77:6d:68:a1:a6:1c:99:d1:aa:35:8f:59:
c0:80:87:15:99:47:62:3d:bb:7b:35:ab:83:a7:cd:
47:00:53:17:5b:5c:a6:b8:db:4e:40:af:99:17:f1:
d0:c9:1c:c5:ad:d7:46:7e:94:ac:ca:dc:0d:5f:3e:
67:c5:7f:ff:be:0f:97:c9:98:5e:e7:e7:1f:40:51:
d6:17:7d:d1:47:7a:f2:67:91:10:d3:a8:3f:63:bb:
68:f3:5a:c5:31:17:f9:74:04:84:42:30:77:e6:21:
84:bd:7c:3a:8d:75:21:11:64:66:87:cc:28:5c:9d:
e4:48:40:ee:b1:aa:a1:7d:41:17:f9:ea:af:20:64:
ca:cf:b0:af:8e:5e:c6:d6:f2:6f:27:3f:81:d7:81:
0d:f8:75:b9:16:ec:4a:aa:23:63:fe:6f:81:53:94:
83:99:9e:ab:23:f4:a3:f1:f1:83:42:b1:9a:12:9d:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C7:D3:BB:F2:0B:26:55:4E:5E:B7:4A:9E:B3:95:83:3F:C0:F0:0C
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/qsfTu_ILJlVOXrdKnrOVgz_A8Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:70:a8:8b:ba:e4:ac:91:1b:ed:ea:ac:19:27:18:fb:55:b5:
20:13:89:ac:53:21:39:d5:2f:f0:93:2b:b3:a5:78:20:59:56:
df:27:7d:cd:fd:24:bf:85:03:c1:03:a3:8f:e3:79:35:c0:3b:
21:16:f7:6c:40:ec:f7:ed:09:17:79:42:20:08:62:94:9a:f2:
40:6f:3e:40:d9:86:97:d1:e5:62:ab:8a:05:27:23:d8:9a:ec:
04:c3:12:61:a8:b8:50:8e:a3:f6:c0:ea:da:a8:04:5e:61:8c:
0d:67:9e:83:e1:f1:c5:11:22:79:fb:ac:b5:7f:1d:08:28:d6:
fc:1f:83:13:e5:dc:ad:b9:c4:ee:f1:d2:b2:7b:26:19:24:fb:
44:97:cf:aa:ef:b3:00:39:12:68:00:ec:14:e1:04:ca:33:aa:
e6:77:6d:b8:4c:05:75:a3:aa:11:7b:32:29:35:52:60:4e:32:
76:c6:87:da:cc:f4:55:87:28:a8:3d:99:34:ad:86:e2:35:94:
ae:b6:3c:e2:30:eb:1f:e5:0f:f7:7b:88:91:f4:d1:2b:78:54:
06:3e:2d:d4:28:3c:c6:48:32:7f:80:57:47:11:d4:a0:fe:13:
d3:4f:79:a7:2e:d6:3d:0e:b8:ad:f4:ff:aa:d6:57:e2:ba:fc:
30:94:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:06:54 2024 by rpki-client on console-fra.rpki-client.org