Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/SQTGeLChd2QQwrxSouxicN3qSV8.roa
File: SQTGeLChd2QQwrxSouxicN3qSV8.roa (raw, json)
Hash identifier: iUa+wZeBniO/21ixSO7Cb6C471/AjWsIrx/uU9uaMoY=
Subject key identifier: 49:04:C6:78:B0:A1:77:64:10:C2:BC:52:A2:EC:62:70:DD:EA:49:5F
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018CC5DCC4F18B00C9B5400484A87C4AC317
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/SQTGeLChd2QQwrxSouxicN3qSV8.roa
Signing time: Mon 01 Jan 2024 16:30:29 +0000
ROA not before: Mon 01 Jan 2024 16:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209655
IP address blocks: 212.22.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c4:f1:8b:00:c9:b5:40:04:84:a8:7c:4a:c3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 16:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4904c678b0a1776410c2bc52a2ec6270ddea495f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:69:25:14:d2:1f:36:c4:45:3c:91:b5:c9:fa:
79:3e:38:41:92:1a:10:09:e5:b6:58:63:c4:f7:38:
d2:67:4d:8d:95:05:f9:7c:44:58:92:cd:94:c3:a2:
3f:d2:0d:a0:98:3c:9c:0c:2e:b6:20:5a:84:c9:78:
92:ee:b9:b8:66:20:91:ad:d8:bc:f4:d2:f9:c0:7b:
c4:d7:b3:33:17:cf:b0:be:0c:07:4e:41:6a:25:92:
6e:e5:a8:68:4d:9d:e4:bb:41:6e:09:e8:78:b7:ae:
d1:77:89:36:fe:06:1e:57:b6:e0:87:f3:93:8c:be:
65:2f:2b:09:dd:88:cd:cf:19:06:49:90:3b:cd:07:
a5:12:4d:c8:38:9a:03:92:a0:d0:e3:cd:e5:f7:9f:
d3:8a:42:e5:20:0b:cc:31:d9:d8:c2:23:76:d7:58:
e9:e3:44:bb:24:3c:16:eb:01:c3:35:cb:41:2a:35:
40:5b:ab:a1:c6:10:bd:95:d9:12:aa:b8:76:73:3f:
9c:9d:d9:f1:7b:a0:c9:5d:6f:ce:a3:75:13:f8:50:
50:a1:34:ef:d5:00:ef:5a:a2:63:ef:34:c8:9e:db:
b7:a0:7b:ca:57:e4:a2:71:e2:3a:98:ab:5f:60:11:
e5:ac:eb:f6:9e:b1:50:e9:1b:1f:19:d5:9b:4e:4a:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:04:C6:78:B0:A1:77:64:10:C2:BC:52:A2:EC:62:70:DD:EA:49:5F
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/SQTGeLChd2QQwrxSouxicN3qSV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.72.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e6:04:7d:a0:71:a0:ad:9b:d1:d5:c0:d5:e2:e6:02:5d:8c:
08:89:2b:fa:b1:12:34:b0:55:75:a6:8b:02:02:1b:d4:90:32:
ea:f7:e9:38:15:b4:1a:6b:6d:26:3e:83:7d:d5:78:a0:42:c5:
c7:6f:b7:cc:33:fb:81:c0:a1:23:28:8e:ef:22:4a:4a:c8:d6:
27:a2:6d:d8:bb:a0:e3:27:d5:b7:f1:c9:94:8d:e3:57:24:8a:
1c:96:4d:3e:63:b5:f9:36:8a:e6:0d:cc:2c:92:66:9e:d7:39:
c2:92:8e:43:0a:2b:39:93:ac:e7:31:2c:e6:e0:6f:1e:9a:e4:
b2:68:c0:a4:d9:93:1c:14:09:b0:74:94:e0:f9:8f:11:cc:de:
74:61:84:7b:ec:6e:bd:e3:d9:cb:d4:fe:33:3e:60:8c:f2:6d:
7f:73:8e:3f:66:0f:26:48:4c:74:ef:8b:aa:45:ab:3a:2a:1e:
ac:cd:05:07:87:1c:8b:2d:55:75:bf:da:1c:da:3b:06:1c:02:
5e:94:c5:52:fa:6d:9f:1c:e8:41:4e:09:6c:48:a2:d8:86:15:
9a:8a:91:78:60:47:80:30:e5:79:25:9b:b5:d5:2f:03:4c:f8:
6e:e0:2d:53:98:98:24:73:f8:44:18:48:c8:58:80:da:8d:22:
ae:57:40:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:35:44 2024 by rpki-client on console-fra.rpki-client.org