Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/QwGn6uzoGStscTztkUon7jeLTkI.roa
File: QwGn6uzoGStscTztkUon7jeLTkI.roa (raw, json)
Hash identifier: h8Xcb+Xx9rePH/FrX6J9oxEQYg6giW6qz7DoKyz0mbA=
Subject key identifier: 43:01:A7:EA:EC:E8:19:2B:6C:71:3C:ED:91:4A:27:EE:37:8B:4E:42
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 018CC802F7FDD1404A9185AFA7EFFC54B831
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/QwGn6uzoGStscTztkUon7jeLTkI.roa
Signing time: Tue 02 Jan 2024 02:31:26 +0000
ROA not before: Tue 02 Jan 2024 02:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200851
IP address blocks: 45.11.160.0/22 maxlen: 22
84.38.255.0/24 maxlen: 24
45.66.244.0/22 maxlen: 24
185.93.244.0/22 maxlen: 24
2a04:23c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jul 2024 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f7:fd:d1:40:4a:91:85:af:a7:ef:fc:54:b8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Jan 2 02:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4301a7eaece8192b6c713ced914a27ee378b4e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:a0:af:25:9c:a9:e0:17:4f:09:7a:58:bc:
3e:7f:74:29:48:c0:c2:8e:ec:24:8f:5b:cc:04:92:
dd:ae:f3:99:a4:57:e8:58:69:5c:63:e7:f2:0f:9d:
d8:f1:5a:03:80:3f:33:50:de:07:0c:4b:10:7a:08:
14:55:5a:f6:3c:39:97:2a:a9:0f:99:ff:bb:ef:90:
4a:05:8a:62:0c:24:5c:41:85:09:3b:41:c0:92:cd:
1a:82:f6:29:32:17:68:7d:55:12:65:8d:fc:d2:27:
54:bb:a4:40:b2:18:6c:50:dc:1f:8a:b6:36:c3:a9:
fd:6e:be:5c:d5:72:62:57:23:55:5f:29:ad:f2:5e:
9e:5b:65:93:1e:6c:90:ee:d4:9f:ea:86:71:47:44:
a2:e5:2c:ab:96:47:62:69:cc:d1:82:8a:58:1c:9b:
9b:8f:78:f9:c6:a0:a7:21:e6:7e:9b:16:3d:0b:16:
f2:e4:a5:40:6c:d4:db:9a:b4:ac:68:d8:eb:1d:45:
a4:80:58:ba:96:c5:6d:a5:39:e6:33:fa:82:76:42:
62:ab:18:0b:d5:26:da:15:dc:2f:f2:ec:3b:50:45:
9a:a3:9a:5b:2f:7a:db:ac:d9:bb:15:f4:99:c2:98:
b2:f1:51:ba:26:8c:fe:50:ae:f1:dc:b1:6b:4c:3c:
ab:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:01:A7:EA:EC:E8:19:2B:6C:71:3C:ED:91:4A:27:EE:37:8B:4E:42
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/QwGn6uzoGStscTztkUon7jeLTkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.160.0/22
45.66.244.0/22
84.38.255.0/24
185.93.244.0/22
IPv6:
2a04:23c0::/29
Signature Algorithm: sha256WithRSAEncryption
5a:9e:f8:91:1e:61:9b:26:2f:c1:6a:ac:bc:2b:19:d7:dc:9b:
58:09:2a:5d:6f:ad:3e:70:c3:16:c4:81:2a:76:9a:f5:9a:42:
05:a1:ce:1c:4a:ca:f8:47:0c:61:fc:b9:1a:d5:82:ed:c0:33:
9b:27:32:9f:a2:4f:13:96:e8:4a:92:74:0b:3e:4a:d8:8b:ee:
35:07:fd:3a:76:d5:4b:df:34:89:d9:d5:d1:39:f3:bd:7b:84:
80:2e:0d:15:62:eb:e4:16:21:0e:cc:1e:9f:22:48:5e:bf:8b:
f6:e6:a2:3e:b9:bc:ae:65:ab:a7:6e:2b:37:4a:40:5e:a4:a8:
1f:a3:15:90:fb:23:1c:d1:d0:76:e4:d4:2e:0b:e6:76:4d:20:
dd:3c:c4:ee:af:b6:c4:6c:1f:ee:a2:60:20:5a:58:85:db:cf:
e9:f4:4e:91:20:07:10:df:5f:e8:77:b1:20:05:aa:65:9a:df:
a8:ee:d9:d3:5c:bf:e8:fa:1e:f1:65:48:d0:10:47:bc:f0:2c:
d6:e2:7f:f8:2d:18:b3:44:10:96:4b:7d:86:5b:63:49:77:8d:
3a:2d:3e:9e:16:25:77:18:37:31:6c:53:79:61:3e:a0:46:a3:
71:a8:db:de:e7:86:ca:a2:2b:f6:68:5e:44:47:25:f6:9b:c7:
25:e3:74:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 20:33:04 2024 by rpki-client on console-fra.rpki-client.org