Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Qep62G2NnQp6tBNxtpBjhWTPyNM.roa
File: Qep62G2NnQp6tBNxtpBjhWTPyNM.roa (raw, json)
Hash identifier: hJRIJvu0aj3cWi/omwBB6SKG0waJZVHDTgupVveEzj0=
Subject key identifier: 41:EA:7A:D8:6D:8D:9D:0A:7A:B4:13:71:B6:90:63:85:64:CF:C8:D3
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D687EBCDC84B2638321DC81054558
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Qep62G2NnQp6tBNxtpBjhWTPyNM.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205808
IP address blocks: 95.43.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:68:7e:bc:dc:84:b2:63:83:21:dc:81:05:45:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41ea7ad86d8d9d0a7ab41371b690638564cfc8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:14:53:03:e5:77:79:ee:ee:7a:92:ed:84:
cb:80:04:56:af:67:36:25:87:c5:85:c9:1f:88:77:
81:0d:76:33:d9:78:a9:b7:14:57:86:85:aa:7c:22:
f6:95:c5:55:3a:40:28:77:08:14:7d:58:9d:b1:5c:
5e:7c:4a:9b:e6:d2:50:6a:4c:a7:4a:3c:db:d2:78:
3b:b6:7f:e6:16:30:ee:d0:dc:9b:da:bc:90:ee:c7:
aa:38:e0:da:5c:be:cb:ed:91:e9:62:5a:25:15:be:
c4:21:53:29:80:2a:80:d4:bd:42:34:c2:98:f0:fe:
9a:10:f4:4f:6a:4a:17:a6:fe:58:70:2c:7b:c6:02:
c8:94:7c:b7:c5:0f:a8:30:49:b5:73:24:d4:38:5a:
fb:92:71:20:f8:70:55:41:00:e8:bf:1e:1c:0c:5b:
8d:fb:9b:ab:83:e5:81:42:29:e7:76:ca:48:a2:6a:
4f:20:74:90:2d:a4:fb:79:da:da:ce:a7:eb:81:ab:
c4:84:77:1c:df:a7:85:8b:62:c0:40:08:07:b4:81:
55:5b:18:67:52:6b:87:d7:2b:ea:01:67:1e:ee:e3:
57:a7:10:0a:4e:f1:3c:24:e9:4a:c9:c0:31:30:eb:
08:4c:da:e8:35:7c:45:b7:da:b7:35:db:2c:ac:83:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EA:7A:D8:6D:8D:9D:0A:7A:B4:13:71:B6:90:63:85:64:CF:C8:D3
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Qep62G2NnQp6tBNxtpBjhWTPyNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.43.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b9:e0:57:36:29:1c:89:39:81:90:be:65:24:c4:b6:55:b6:
5a:5b:3a:06:b5:f5:59:2a:5b:86:42:ae:e3:55:cb:08:8e:7c:
db:57:5b:54:3e:f1:5f:29:be:20:ce:92:be:08:b9:6a:5c:d1:
73:e3:44:01:fb:fd:53:ec:da:03:92:b1:2a:8e:f3:f3:93:8d:
8d:5e:cf:b4:6d:49:59:d0:5b:63:62:a2:3b:c1:7a:83:9c:2c:
81:69:c4:dc:a4:03:6c:d6:fa:89:72:61:31:72:1b:77:d8:da:
72:d3:e6:c5:f6:b8:3e:be:b0:ae:67:a2:8e:f8:55:22:fd:d9:
09:5c:0e:c4:6a:f2:d8:9e:fc:d3:71:af:9f:d8:e0:df:56:44:
b0:26:8c:7f:ec:15:bf:95:8c:ed:88:17:c3:d2:dd:ca:7e:09:
6b:90:ac:f0:bb:25:a4:74:fa:01:0f:fc:cc:3c:cf:09:a9:de:
21:25:14:f7:d0:87:2c:33:ae:ca:38:32:ce:70:80:21:e2:ad:
29:fb:2e:77:30:23:88:2d:2b:f0:03:b5:21:51:49:84:33:94:
ff:84:2f:c2:18:c9:ca:6a:44:21:e8:e5:56:cd:16:f3:20:27:
e5:17:67:0c:8d:2a:a0:ca:73:f1:18:ea:af:07:27:b7:80:51:
78:ed:36:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:13:57 2024 by rpki-client on console-fra.rpki-client.org