Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/QJaEA2oGA8ZeZw0zvQhUdLxjxJI.roa
File: QJaEA2oGA8ZeZw0zvQhUdLxjxJI.roa (raw, json)
Hash identifier: L/5BCD+JXEEA+6adFtfOvbeIlW4sPuu3SVZId95Qpt8=
Subject key identifier: 40:96:84:03:6A:06:03:C6:5E:67:0D:33:BD:08:54:74:BC:63:C4:92
Certificate issuer: /CN=8044244bf5c2e84685dbd212f3216a82ffae0f09
Certificate serial: 0190259BEEDB343F9B4D3CCF3EA3B4E046D2
Authority key identifier: 80:44:24:4B:F5:C2:E8:46:85:DB:D2:12:F3:21:6A:82:FF:AE:0F:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEQkS_XC6EaF29IS8yFqgv-uDwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/QJaEA2oGA8ZeZw0zvQhUdLxjxJI.roa
Signing time: Mon 17 Jun 2024 09:51:34 +0000
ROA not before: Mon 17 Jun 2024 09:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49173
IP address blocks: 194.146.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/gEQkS_XC6EaF29IS8yFqgv-uDwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/gEQkS_XC6EaF29IS8yFqgv-uDwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEQkS_XC6EaF29IS8yFqgv-uDwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:25:9b:ee:db:34:3f:9b:4d:3c:cf:3e:a3:b4:e0:46:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8044244bf5c2e84685dbd212f3216a82ffae0f09
Validity
Not Before: Jun 17 09:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=409684036a0603c65e670d33bd085474bc63c492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f1:09:22:29:e0:8a:88:d0:ae:c4:76:7f:00:
8c:d9:df:8d:00:c1:99:f3:47:53:9d:ba:83:71:e7:
7b:ee:74:18:59:31:60:9b:95:d9:41:3d:1a:26:84:
4e:d7:9b:88:61:c5:4f:75:62:ba:59:68:f7:bf:64:
cb:9c:8a:83:7b:c2:88:ca:45:20:ca:8f:0b:64:de:
12:90:b1:d3:c0:5c:5a:71:53:ea:4a:cc:63:a9:71:
b8:56:bb:1b:22:e3:24:d1:93:40:9f:d3:26:47:77:
65:90:8f:df:28:a8:1d:4c:a4:f5:10:02:89:46:01:
dd:d0:b3:f0:eb:50:07:d1:80:d5:4c:9b:60:66:34:
63:e0:1b:49:bd:b7:1a:96:a8:6e:fe:7c:66:99:5e:
b8:b2:4c:fc:b8:fa:d4:50:20:1d:de:f3:8b:45:21:
98:9f:85:53:1d:4b:ad:d3:c0:0c:55:98:9e:9c:61:
ea:d3:85:d5:ce:be:b4:6e:b3:8e:5f:42:88:4e:93:
5e:7a:84:5d:19:6c:62:9d:e8:2f:0c:fb:8c:ea:ea:
4c:44:6d:92:d3:1d:30:cf:e4:14:66:e1:f6:70:bd:
5e:ca:41:e7:69:1c:56:5a:f2:8a:83:55:c6:3e:d4:
74:12:19:67:78:c7:c6:3b:a3:64:3c:25:af:54:cb:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:96:84:03:6A:06:03:C6:5E:67:0D:33:BD:08:54:74:BC:63:C4:92
X509v3 Authority Key Identifier:
keyid:80:44:24:4B:F5:C2:E8:46:85:DB:D2:12:F3:21:6A:82:FF:AE:0F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEQkS_XC6EaF29IS8yFqgv-uDwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/QJaEA2oGA8ZeZw0zvQhUdLxjxJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dbe32f-86dc-40c8-a893-1d84e9092e52/1/gEQkS_XC6EaF29IS8yFqgv-uDwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.28.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:9e:ba:71:2c:d7:05:dc:ca:e4:39:78:37:ec:8f:cc:36:13:
99:df:c8:b1:73:09:7c:5c:0d:4c:74:91:36:ee:ce:b9:af:80:
c0:f9:53:b6:70:91:15:33:e6:4f:8e:c8:15:6b:c8:68:fc:aa:
0b:61:de:4e:63:e0:cf:77:b2:68:94:45:26:f7:98:c9:c5:08:
70:13:7a:56:6a:cd:e0:ee:05:46:e2:6f:c6:15:b8:3d:eb:7e:
4f:89:30:ac:14:a8:cd:b1:24:ea:96:76:bf:dd:27:c4:fb:08:
34:e0:f9:cb:f3:31:1d:f4:e0:5c:57:b8:c4:98:58:0b:8b:6d:
37:b6:3f:98:45:77:1d:a1:98:97:6e:4b:6f:4a:5b:77:fe:5d:
4f:49:9b:43:48:12:5c:2f:62:f0:5c:9e:e8:93:e6:6d:c4:02:
b8:f3:3e:94:ff:4a:01:56:a1:36:90:04:8a:1e:87:cd:25:a2:
dc:35:8e:df:c1:4c:cb:58:86:a9:b2:8e:59:a4:8a:da:f2:7a:
04:ff:e7:fe:b3:ef:f8:0d:c1:f9:8e:aa:65:4d:e7:87:32:7a:
63:bf:20:ab:8f:f4:7e:a9:35:ef:86:77:37:72:e7:b1:c5:e3:
49:19:07:f4:fa:ed:00:01:57:27:86:87:9f:82:d6:52:ed:77:
83:81:da:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 08:20:29 2024 by rpki-client on console-fra.rpki-client.org