Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/QILwz7PCysFKM0haafF1QoFZCb4.roa
File: QILwz7PCysFKM0haafF1QoFZCb4.roa (raw, json)
Hash identifier: Qk1oPbRRu/Vb6AcRWacIaivj+lAETgaPx5zZDbkrTbw=
Subject key identifier: 40:82:F0:CF:B3:C2:CA:C1:4A:33:48:5A:69:F1:75:42:81:59:09:BE
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018CC79530785807831BC39EE184536DCF5A
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/QILwz7PCysFKM0haafF1QoFZCb4.roa
Signing time: Tue 02 Jan 2024 00:31:32 +0000
ROA not before: Tue 02 Jan 2024 00:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 109.166.36.0/22 maxlen: 24
151.248.68.0/23 maxlen: 24
91.232.182.0/24 maxlen: 24
91.232.184.0/24 maxlen: 24
176.118.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:30:78:58:07:83:1b:c3:9e:e1:84:53:6d:cf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4082f0cfb3c2cac14a33485a69f17542815909be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:91:85:e3:6d:33:33:d9:1e:19:22:ab:47:
9b:77:01:78:3d:39:6b:11:22:b7:ea:2b:48:94:58:
9a:bc:7d:5d:1d:0d:4f:d8:cf:26:6b:a2:b2:23:f3:
6d:c9:1f:e1:2e:69:37:3d:7c:1a:ad:75:23:68:d6:
41:5f:f3:82:79:aa:64:53:0d:8b:be:0b:be:0b:4e:
9d:da:0f:76:d5:66:1c:89:a7:bc:d5:b7:fd:8a:e6:
a6:da:57:c8:c9:e8:bb:2b:0e:64:ba:f8:61:b3:53:
e6:47:ef:ec:e4:e5:56:c7:d1:0c:e8:00:3c:30:8b:
c1:a3:47:4d:c5:18:ee:8e:be:7e:95:91:c5:b3:de:
03:23:f7:ff:b4:c5:8e:1f:a8:6d:3f:84:60:9b:fc:
50:36:3a:7e:12:ec:b4:fa:93:59:d4:76:cb:62:f6:
73:5c:67:bc:07:4b:3d:08:35:38:03:61:91:fc:e0:
65:c1:58:da:da:da:c8:1d:9d:38:c1:b4:81:da:18:
ae:08:24:f5:27:bd:a0:97:bb:b3:a5:be:64:c9:18:
17:de:62:ac:cc:ef:b9:05:30:d9:18:40:f8:59:21:
95:e6:0a:02:fa:70:7b:5f:04:60:69:54:1d:6c:b0:
06:e7:a8:76:22:d4:50:87:5c:66:3f:1d:6c:86:1d:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:82:F0:CF:B3:C2:CA:C1:4A:33:48:5A:69:F1:75:42:81:59:09:BE
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/QILwz7PCysFKM0haafF1QoFZCb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.182.0/24
91.232.184.0/24
109.166.36.0/22
151.248.68.0/23
176.118.80.0/21
Signature Algorithm: sha256WithRSAEncryption
32:0e:71:d6:66:5d:aa:90:00:57:4d:bc:f0:21:8b:ef:68:ae:
d0:a5:98:d6:79:13:56:bb:bb:a3:55:e9:41:c4:4f:4c:a1:51:
3f:9e:17:1a:68:99:e1:ed:fd:de:72:c8:5f:8a:06:d2:35:ba:
e4:d0:86:60:4f:e4:9e:e5:99:d2:50:6c:96:e7:cc:a7:6d:89:
5f:b3:39:00:e7:b7:04:56:27:dd:03:1d:ce:5a:fa:66:64:05:
9f:fd:7b:71:8f:c3:cf:66:58:d0:b4:10:5d:62:32:a0:71:6a:
4c:1c:8d:f9:76:04:72:e7:53:12:6a:15:e4:74:3d:40:31:36:
68:7e:d3:fd:d5:c4:1f:1d:d0:b7:eb:9b:78:4c:93:f6:69:e2:
88:e0:99:e3:5b:33:d1:53:bf:18:ad:f5:e0:4f:9b:af:b3:57:
2c:9f:fe:3f:30:21:27:48:7d:7c:c3:64:0c:5e:90:f3:4c:33:
a2:2a:ee:5d:b1:8e:e6:b0:94:0f:06:47:0a:f8:4e:60:31:75:
af:c7:95:23:f6:ca:ec:65:91:5b:1b:dd:27:f3:c9:15:80:c9:
c9:29:c4:09:78:19:8d:b0:0d:b2:d4:2f:aa:c0:a3:73:d7:59:
7d:10:20:38:7f:39:c4:1a:2e:90:96:93:94:53:4d:33:ed:65:
75:e2:de:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:01:25 2024 by rpki-client on console-ams.rpki-client.org