Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/QQmqZCeU3QrY0MNjZmdyIZD_8BI.roa
File: QQmqZCeU3QrY0MNjZmdyIZD_8BI.roa (raw, json)
Hash identifier: Dei961FrbsQvTYr5LSWLVpYfoPblgQuE6ZLzg2Pw72s=
Subject key identifier: 41:09:AA:64:27:94:DD:0A:D8:D0:C3:63:66:67:72:21:90:FF:F0:12
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC795565F4FC503585A47C99A738B226D
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/QQmqZCeU3QrY0MNjZmdyIZD_8BI.roa
Signing time: Tue 02 Jan 2024 00:31:42 +0000
ROA not before: Tue 02 Jan 2024 00:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51239
IP address blocks: 46.102.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:56:5f:4f:c5:03:58:5a:47:c9:9a:73:8b:22:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4109aa642794dd0ad8d0c3636667722190fff012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:86:c0:76:1a:18:8c:50:60:79:0e:17:a6:
f2:0d:39:1a:a5:38:b5:9f:ad:16:70:b0:5f:00:0a:
7a:06:99:61:1b:a0:02:d6:d8:49:a1:d6:73:22:0d:
3c:06:55:26:50:03:cd:f6:5a:3a:65:10:7b:50:4e:
7c:d0:70:54:74:65:2c:c4:78:bf:1d:80:cd:87:da:
1b:c4:6e:f1:82:c2:f7:a1:fd:b7:65:31:57:7b:7a:
2d:34:db:37:a0:b5:bf:bb:28:0c:69:01:44:07:13:
5d:d2:5d:1f:ba:81:c4:38:64:f7:c5:75:a4:25:f2:
ec:44:a2:93:4b:05:45:a7:a5:18:7d:7a:72:66:0a:
24:c2:59:13:e8:7e:43:01:db:9a:bd:42:a2:6a:67:
95:eb:95:6c:b3:07:5d:f1:ed:18:82:98:d8:4e:c8:
65:6f:44:42:9a:5c:e3:5f:68:6e:fd:26:59:45:03:
4c:28:d1:49:c6:bc:bf:4f:00:20:9e:38:f2:60:af:
39:69:45:11:a7:a2:6b:5d:a0:1a:98:9f:e3:6a:c5:
92:f3:86:1c:53:95:b9:90:5d:bd:96:fa:32:cb:e5:
3c:af:8e:5f:34:df:7b:63:1b:55:ed:e0:9c:10:7a:
68:41:51:15:44:1e:13:a6:6b:a2:ac:04:ba:80:67:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:09:AA:64:27:94:DD:0A:D8:D0:C3:63:66:67:72:21:90:FF:F0:12
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/QQmqZCeU3QrY0MNjZmdyIZD_8BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.255.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:ed:0e:44:8a:e2:19:af:a1:6a:63:60:64:ec:80:42:57:e5:
08:2a:95:05:91:2e:a8:ef:8f:26:e3:14:d2:8b:8e:9c:48:e9:
8d:08:d8:2a:62:2f:53:5c:55:9c:1e:e3:35:62:3a:1f:0b:22:
28:e3:dc:90:1f:e8:91:62:00:c0:9f:5a:01:b9:43:62:af:d4:
60:7a:df:85:f6:06:d4:15:f4:10:77:87:a6:91:e8:5a:d3:32:
83:98:d4:c7:b1:b0:5e:53:23:8c:cd:dd:fb:48:b0:e4:8c:38:
93:d2:8a:97:e0:0f:46:1a:66:91:c3:30:c4:dd:35:a4:c4:28:
54:af:80:a4:15:45:c1:d4:5c:a7:8f:2d:7b:5e:bd:14:7d:b1:
a5:3a:3b:d0:ad:ae:96:74:98:f8:d0:94:5b:02:60:2a:ea:0e:
a5:b4:23:fa:1e:8d:ed:a0:48:63:dc:85:b3:96:c3:e4:f9:32:
9d:43:4e:94:4d:49:3a:a2:1e:e0:f5:aa:82:e5:8b:1d:db:72:
78:62:ea:bd:6e:0d:4d:9d:17:94:e5:54:4d:8b:b9:66:22:16:
24:f4:80:b0:4e:93:52:33:1e:2b:9b:df:11:a6:78:2f:c4:61:
55:83:c4:5b:7c:a2:08:ef:09:a8:f7:3c:62:a9:e1:a8:7e:87:
87:73:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:56:37 2024 by rpki-client on console-ams.rpki-client.org