Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/qrJX4846KHaDSpCvyV4rPr-B6OE.roa
File: qrJX4846KHaDSpCvyV4rPr-B6OE.roa (raw, json)
Hash identifier: n8Q/akBahSqZJnpl+vCUMQYg9R9+WcnuOkmCj6Fh2f0=
Subject key identifier: AA:B2:57:E3:CE:3A:28:76:83:4A:90:AF:C9:5E:2B:3E:BF:81:E8:E1
Certificate issuer: /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial: 018CC56E598A2B8C22D87F00A7EFB251052D
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/qrJX4846KHaDSpCvyV4rPr-B6OE.roa
Signing time: Mon 01 Jan 2024 14:29:52 +0000
ROA not before: Mon 01 Jan 2024 14:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61094
IP address blocks: 194.56.75.0/24 maxlen: 24
194.56.72.0/23 maxlen: 24
194.56.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:59:8a:2b:8c:22:d8:7f:00:a7:ef:b2:51:05:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
Validity
Not Before: Jan 1 14:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aab257e3ce3a2876834a90afc95e2b3ebf81e8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a4:03:f2:ae:be:e8:9e:5c:cb:81:11:cd:ad:
66:26:ca:95:6b:2b:10:90:ff:97:51:8e:39:b4:69:
a8:c3:ef:33:6f:11:ee:83:9c:b2:85:70:b9:c6:c1:
ae:ee:1f:a4:8b:2f:34:91:6b:17:ab:b2:a0:f3:b5:
c3:27:57:66:a8:5e:dc:d2:21:77:78:e0:02:1b:c0:
e4:d2:43:07:2d:2e:40:ce:64:4b:61:26:3c:db:9c:
f5:07:12:5a:89:36:ca:55:53:74:80:4f:e5:28:02:
d1:46:00:a9:33:c5:c4:45:7d:7e:e7:dc:86:09:29:
c1:b7:f7:d8:b0:27:bd:85:2d:a0:81:8f:91:11:c0:
e2:d4:38:54:9d:72:ce:0c:e4:d6:e6:52:0e:e0:8d:
a7:13:be:d5:d1:83:42:fb:f2:d8:a0:7e:a0:6e:d5:
fc:11:4b:d9:08:a9:f2:40:eb:7d:dc:8e:53:ca:27:
37:08:9a:fd:38:8f:7b:1b:a9:dd:3f:75:28:9b:c9:
f5:86:00:b2:b7:84:9f:09:29:31:63:f1:75:fa:b6:
34:2e:2b:cb:d6:04:d5:1f:cd:1d:53:d1:1b:44:f9:
c8:34:29:25:3f:40:fd:4d:17:80:72:03:3e:cd:84:
f5:91:61:72:79:32:e6:a9:6f:45:7b:31:e6:e8:80:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B2:57:E3:CE:3A:28:76:83:4A:90:AF:C9:5E:2B:3E:BF:81:E8:E1
X509v3 Authority Key Identifier:
keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/qrJX4846KHaDSpCvyV4rPr-B6OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:55:00:97:fe:d0:39:2b:17:33:53:9d:35:1c:4c:de:6b:fc:
71:cc:ba:f3:e0:d2:3d:a8:3f:fd:03:a2:59:19:f6:f3:0b:4a:
c2:35:e9:f5:cf:eb:b2:fa:8b:d3:ea:0f:17:ae:49:88:97:ca:
8a:e2:40:57:79:5e:9c:f3:6a:92:63:7a:e6:24:4d:b1:4e:9c:
96:9c:2e:ee:d8:c1:8c:ad:5b:a6:5e:68:c6:8b:18:31:03:4b:
40:ab:89:77:f7:49:08:9f:45:42:aa:1d:66:f1:4a:1d:3b:04:
20:63:ed:aa:85:2b:af:c0:92:f4:18:76:d3:19:bd:62:e2:81:
c2:7f:dc:cd:49:3b:2c:90:55:eb:34:f5:ed:22:7b:af:17:1a:
77:ed:eb:e9:44:f2:86:c9:02:02:84:25:76:de:c0:eb:db:ee:
76:f7:10:9f:50:d9:86:9f:31:f8:3d:45:f2:09:33:c0:a7:d9:
1a:85:fb:db:ad:f6:67:72:08:fe:80:ca:4e:37:1a:58:4d:1c:
9e:4b:c7:bd:63:93:2b:38:ba:f9:e4:75:91:88:40:96:d3:79:
37:6c:72:46:61:c0:54:11:fd:2b:df:d4:04:f1:8f:93:a1:68:
7c:f3:c1:d7:60:e5:50:d9:cf:6e:af:34:bc:9f:48:a2:14:c9:
d4:6b:4d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:05:29 2024 by rpki-client on console-fra.rpki-client.org