Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jQKWmciNnU_qYsbfLzmx-suKSPI.roa
File: jQKWmciNnU_qYsbfLzmx-suKSPI.roa (raw, json)
Hash identifier: PldxfbgUxkkUM8cC/kfD5BNHnneWFdPKYOsJaN/UUdI=
Subject key identifier: 8D:02:96:99:C8:8D:9D:4F:EA:62:C6:DF:2F:39:B1:FA:CB:8A:48:F2
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018CC34893D5C46BDC454EAA7D04EA7458BF
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jQKWmciNnU_qYsbfLzmx-suKSPI.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202585
IP address blocks: 185.244.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:93:d5:c4:6b:dc:45:4e:aa:7d:04:ea:74:58:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d029699c88d9d4fea62c6df2f39b1facb8a48f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:e1:fd:43:78:6b:41:75:ac:1b:fb:9d:03:
53:da:32:56:88:70:03:88:3b:ba:ca:6d:ba:6e:62:
9e:05:dc:39:86:94:78:17:e9:b8:c7:63:c7:ea:cb:
6e:b8:e8:97:65:36:8e:84:c8:a6:7b:79:40:0b:88:
3b:ec:65:88:98:53:cd:76:bb:d8:af:c3:6e:a7:5a:
fb:55:bb:13:09:f7:7d:fc:b0:fe:34:da:24:12:79:
a9:97:68:c3:33:f5:5b:c2:24:fd:bf:83:72:f2:cc:
60:12:f8:30:27:c3:76:79:d7:e2:3b:a8:31:a9:d7:
d1:4f:09:59:a4:ef:f0:9e:9b:23:be:d9:e4:9b:16:
d8:aa:6d:41:f1:7e:6c:2e:b2:56:61:84:20:5e:fa:
e0:1b:ba:85:e7:ed:e0:9c:36:26:7c:37:1f:ec:68:
ed:e6:cf:8e:25:38:41:9d:e7:94:dd:17:40:04:fd:
03:42:5f:98:03:b2:d1:4c:a6:fe:a1:f0:22:be:6f:
96:29:ba:d6:71:f1:05:5b:04:1d:8f:91:1c:12:d6:
e5:d3:57:84:b6:41:66:10:4e:c0:44:32:af:63:01:
b7:5f:df:3b:b7:f2:61:2a:e0:e7:f3:28:82:5e:35:
3d:3d:51:0c:70:f3:c5:cb:ae:36:39:76:b9:59:29:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:96:99:C8:8D:9D:4F:EA:62:C6:DF:2F:39:B1:FA:CB:8A:48:F2
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jQKWmciNnU_qYsbfLzmx-suKSPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.24.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d7:ea:b6:90:af:05:5c:05:85:b5:b3:20:88:ad:c3:34:db:
72:a1:0b:12:40:85:43:e9:f2:b3:14:1b:d7:7e:83:d3:30:e5:
38:d8:6c:ce:2d:ab:60:10:d3:59:3e:1e:e9:85:b8:9d:b9:2d:
70:f8:8e:13:a5:4a:e6:5b:2f:3f:e0:46:36:53:d3:91:c3:07:
62:04:f0:3b:a6:68:08:30:84:1e:1b:a7:73:25:ab:28:9a:b2:
99:c4:06:71:4d:d9:a1:db:95:fb:12:32:09:da:27:c1:f0:14:
df:fa:c1:95:85:29:24:5f:21:c6:c4:69:c1:97:6b:ee:5d:52:
cd:f0:60:f5:b9:93:41:3d:23:9b:4c:58:cd:37:ef:20:3f:f0:
e3:96:2c:74:e1:8b:dc:05:06:e7:ae:03:45:bc:88:b3:87:5a:
4b:b9:4d:65:29:b8:5d:d4:64:cf:aa:d7:1d:e6:d3:cf:9e:b5:
ef:08:6f:a4:c9:23:03:e9:26:dd:35:04:60:29:e7:48:fc:de:
1c:b9:6b:bd:be:20:29:0a:c7:8b:53:8a:89:9f:80:18:4e:26:
a3:56:8e:e4:36:85:ef:cb:7b:f0:33:c6:e4:6d:44:36:a5:72:
49:48:bd:20:b4:b9:6d:8d:a9:12:76:dc:6f:6a:8c:1f:a0:f6:
5f:c7:05:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:27:02 2024 by rpki-client on console-fra.rpki-client.org