Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/RiQUqM36UQZBxPSwmp1dY6y8Qms.roa
File: RiQUqM36UQZBxPSwmp1dY6y8Qms.roa (raw, json)
Hash identifier: y81tIEeJLPZ8Sgi2jFSuaeVIi9lJ+xwqjl2BJWf+hOY=
Subject key identifier: 46:24:14:A8:CD:FA:51:06:41:C4:F4:B0:9A:9D:5D:63:AC:BC:42:6B
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018E387832D47BDE304DD689C778DA4EE4ED
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/RiQUqM36UQZBxPSwmp1dY6y8Qms.roa
Signing time: Wed 13 Mar 2024 15:39:45 +0000
ROA not before: Wed 13 Mar 2024 15:39:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 194.64.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:78:32:d4:7b:de:30:4d:d6:89:c7:78:da:4e:e4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Mar 13 15:39:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=462414a8cdfa510641c4f4b09a9d5d63acbc426b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:58:18:ad:59:72:ff:ed:1a:2a:a6:40:d2:
3a:9a:56:63:bc:d3:40:5b:16:d2:4a:20:53:68:d9:
9a:33:94:49:5a:15:cf:76:5e:c5:4f:ba:e0:77:67:
9e:a4:eb:fa:b1:ee:00:64:bc:ea:cd:e7:69:1d:5f:
20:3f:0b:29:f5:b4:f5:cd:5b:32:b7:8c:73:f0:13:
27:c7:31:28:46:c1:9d:fb:01:b5:d1:31:1f:b6:07:
eb:94:28:ce:59:3e:d2:64:c5:5d:53:0c:07:d1:30:
13:eb:88:fe:de:1f:e8:e2:4c:d5:4b:ae:8f:1e:aa:
e4:10:58:2c:d3:16:eb:1b:04:87:87:5e:3f:a0:84:
4a:68:53:4f:f3:b1:f3:59:3c:ed:01:52:27:a4:c2:
47:a4:4d:d7:5f:8e:39:49:6a:35:6b:ac:6f:a5:df:
73:7a:07:2c:6c:da:f9:ff:21:e0:d8:9f:1d:14:81:
aa:ba:da:01:6b:a3:1a:d7:03:45:85:6f:11:db:16:
33:f1:be:6d:70:0a:ec:34:1e:90:ed:30:03:fb:64:
7c:2d:9f:e9:d4:81:5d:23:dc:83:3a:0e:99:d6:bc:
33:40:c8:8c:bf:be:0a:bf:7e:fc:77:21:34:5e:05:
43:83:1a:5d:62:a2:aa:ef:10:a9:00:35:ff:89:fc:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:24:14:A8:CD:FA:51:06:41:C4:F4:B0:9A:9D:5D:63:AC:BC:42:6B
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/RiQUqM36UQZBxPSwmp1dY6y8Qms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.164.0/22
Signature Algorithm: sha256WithRSAEncryption
87:2f:8a:ff:ca:ac:b7:cc:64:17:bb:68:b0:92:3b:bb:77:29:
45:84:40:a9:d9:7a:fe:99:bb:0a:da:7a:53:b3:a7:56:0d:21:
7f:e7:72:53:03:71:1d:14:9f:ce:a4:a4:c1:fb:6f:ff:d2:55:
99:00:ce:3d:ca:c1:a1:50:d1:03:17:96:f2:e1:09:f2:13:bf:
de:d3:6e:78:ba:35:f8:fc:42:4b:65:09:f3:87:bf:21:e6:82:
36:05:b1:0c:d8:44:3c:ed:5a:66:18:83:4b:be:62:01:8d:d5:
26:64:cc:a8:a3:db:4e:07:dc:37:1d:9b:ee:c8:9f:ab:d7:71:
95:51:1a:ee:af:f9:7f:29:67:15:95:07:5e:c1:48:c7:7f:3d:
e9:43:17:fc:08:e1:69:06:ec:28:5d:f8:7a:6c:13:8b:24:2c:
81:27:62:59:4e:4c:90:59:63:03:3a:74:fa:ec:20:71:51:dc:
58:78:21:7f:e2:3f:8a:bb:ae:10:69:11:a2:e2:8b:cc:7f:4c:
04:bb:c6:d3:b4:f9:9d:b6:e1:92:e9:65:4c:c2:f3:0b:0a:b4:
4d:1c:6b:ac:d5:15:69:ca:56:30:05:ff:bc:06:fe:73:27:27:
6d:26:35:d5:08:43:4c:f6:2b:11:33:33:b5:4c:b1:c0:3d:96:
8a:f4:81:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:41 2024 by rpki-client on console-fra.rpki-client.org