Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/QvI1qCRobgDxGIk4zpOX5zOukPI.roa
File: QvI1qCRobgDxGIk4zpOX5zOukPI.roa (raw, json)
Hash identifier: B4oUb1W7ASIEEtnsR7wM/2SIKGlMom3S39s+Jw43ZwI=
Subject key identifier: 42:F2:35:A8:24:68:6E:00:F1:18:89:38:CE:93:97:E7:33:AE:90:F2
Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial: 018F9A42DDF287218E8295DF7B6DF19DF96F
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/QvI1qCRobgDxGIk4zpOX5zOukPI.roa
Signing time: Tue 21 May 2024 08:27:04 +0000
ROA not before: Tue 21 May 2024 08:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216050
IP address blocks: 45.150.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9a:42:dd:f2:87:21:8e:82:95:df:7b:6d:f1:9d:f9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Validity
Not Before: May 21 08:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42f235a824686e00f1188938ce9397e733ae90f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:58:0f:11:38:6d:c1:12:56:b3:6d:d0:ac:
bf:60:b6:ee:d1:c8:de:69:98:a0:67:5a:79:4d:12:
83:c2:41:f2:a6:74:ba:37:ce:fd:3a:cd:25:2f:5e:
f2:2b:aa:96:f1:f7:0a:e1:8d:c8:df:00:c2:00:6c:
28:4e:09:f2:1d:44:6c:5a:61:79:e5:4a:04:29:ab:
4e:59:bd:66:ba:57:91:9b:ff:4b:3c:ad:cd:aa:35:
e7:19:99:9f:ae:52:24:5a:c3:c0:7a:0c:20:4a:2f:
20:ea:f0:2c:50:a1:65:89:55:6e:e4:fb:d8:52:c4:
04:69:d5:1e:26:6c:ab:f6:87:af:56:da:9d:d2:78:
5d:83:47:60:00:be:d1:ea:b1:c9:8b:fc:7c:1c:50:
aa:73:b0:7b:9a:7c:29:ec:e1:d0:6a:fb:e9:86:b1:
1b:f0:e9:1a:88:1d:21:b5:4c:d3:2e:a4:cb:36:33:
bc:d9:ce:7e:cd:a2:e0:8a:a8:85:68:0a:58:d3:cd:
a6:b2:4b:5e:fa:7b:b8:95:a8:51:f5:2e:c3:05:3f:
fa:92:9a:72:4d:c4:4b:05:06:73:ad:67:34:29:04:
9c:7b:70:1f:45:4c:e7:7b:55:1f:4d:e0:48:b7:8f:
74:61:c3:68:3e:ea:dc:77:6d:e6:1d:47:cb:cd:83:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F2:35:A8:24:68:6E:00:F1:18:89:38:CE:93:97:E7:33:AE:90:F2
X509v3 Authority Key Identifier:
keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/QvI1qCRobgDxGIk4zpOX5zOukPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.16.0/22
Signature Algorithm: sha256WithRSAEncryption
18:9d:c4:58:96:f6:6e:b4:a5:17:06:63:6f:ab:2f:13:20:91:
3b:91:b7:d9:5d:50:ee:14:c3:3d:9c:e4:d5:3d:1c:cf:c5:79:
2a:2b:b4:c3:ae:a1:ec:20:66:13:9a:12:54:29:49:66:7f:9a:
16:88:24:26:61:16:91:0a:a0:25:02:79:cb:3d:e6:8a:8e:b3:
29:7b:37:bf:3c:f7:37:98:45:64:db:cd:fe:fc:0b:17:b3:10:
88:d5:57:3f:a3:28:03:b5:13:a2:06:31:66:d3:e2:83:80:e4:
6f:a5:54:20:f8:7e:0c:90:60:49:c9:be:0a:7e:e6:e6:ac:6c:
bb:67:88:5f:f6:50:cc:fb:8e:0c:cb:d3:64:8b:d3:11:9a:36:
6a:b2:ca:4d:20:bd:75:09:bd:64:dc:15:61:32:cf:49:52:9b:
89:4b:32:9a:03:e0:72:c4:46:e9:8d:fa:9c:ed:cf:7e:81:94:
d8:b2:f1:0b:da:1b:67:b1:12:84:3f:34:fd:9d:4b:66:9f:ff:
65:4f:e8:87:da:ff:81:b2:09:78:5e:3b:a9:a2:0f:56:31:88:
01:fd:28:a8:41:0d:4c:7b:fd:2a:2c:db:c2:2c:4c:40:8b:2f:
9a:1f:d8:9e:35:bc:59:6b:72:46:5d:d4:94:6d:dc:82:fc:87:
46:0b:62:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:27:17 2024 by rpki-client on console-fra.rpki-client.org