Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/xf6JWU8eqnqtYpzbrLNcRhFiGvM.roa
File: xf6JWU8eqnqtYpzbrLNcRhFiGvM.roa (raw, json)
Hash identifier: hODM5usVGdt1vyldHZe743cw7a+saENi5rbzPOasYmw=
Subject key identifier: C5:FE:89:59:4F:1E:AA:7A:AD:62:9C:DB:AC:B3:5C:46:11:62:1A:F3
Certificate issuer: /CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Certificate serial: 018CC94C09DB7570C4CBC00D4D0424A794E0
Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/xf6JWU8eqnqtYpzbrLNcRhFiGvM.roa
Signing time: Tue 02 Jan 2024 08:30:52 +0000
ROA not before: Tue 02 Jan 2024 08:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57574
IP address blocks: 164.215.56.0/23 maxlen: 23
164.215.58.0/23 maxlen: 23
164.215.61.0/24 maxlen: 24
164.215.60.0/24 maxlen: 24
164.215.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:09:db:75:70:c4:cb:c0:0d:4d:04:24:a7:94:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Validity
Not Before: Jan 2 08:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5fe89594f1eaa7aad629cdbacb35c4611621af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:b1:82:97:16:2f:3b:72:dd:52:d3:d4:ae:
a1:ec:06:c5:20:ea:0a:d3:49:b0:07:ce:c7:a8:ef:
8d:c5:44:69:42:01:44:24:db:7a:0d:8a:79:20:61:
0b:90:c7:c2:25:a4:24:50:55:1d:5e:95:0e:2e:af:
97:7e:d4:29:26:75:5a:cd:b9:96:a6:ab:05:e1:f9:
65:12:f3:86:0b:99:cd:d3:ec:f7:5a:6f:96:0c:d6:
55:01:3e:cd:2b:68:da:3e:94:ac:e3:c6:f4:8a:71:
61:49:c2:45:c4:0f:34:d8:0c:25:c4:03:6a:19:a6:
04:af:e0:76:39:e8:87:81:71:60:e1:e1:c5:e9:a1:
ef:f3:40:2c:13:e1:32:20:79:a7:ef:1c:77:26:eb:
11:d3:43:9f:b4:e5:f8:85:e6:b4:0e:7b:fc:fa:a5:
4d:33:8f:ef:6c:2a:8f:e2:5a:3b:61:d2:95:76:06:
17:ee:7c:df:08:1d:69:61:60:36:65:11:1e:88:cd:
64:1b:d7:8a:ea:6d:b9:b8:8d:55:bb:48:c7:56:95:
3f:29:c0:58:ba:38:d8:bd:f2:04:f0:14:a6:b2:52:
62:40:5d:b5:78:1e:36:01:05:7c:4b:a0:bb:78:49:
63:10:e1:88:50:f2:cb:4b:7a:68:66:74:0b:9a:18:
eb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FE:89:59:4F:1E:AA:7A:AD:62:9C:DB:AC:B3:5C:46:11:62:1A:F3
X509v3 Authority Key Identifier:
keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/xf6JWU8eqnqtYpzbrLNcRhFiGvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.56.0-164.215.61.255
Signature Algorithm: sha256WithRSAEncryption
aa:e7:7a:e0:64:06:76:d3:63:db:53:08:af:59:cd:fb:55:71:
5a:96:49:66:34:f0:24:5a:2b:45:17:d2:b4:e0:cd:be:6d:cf:
e7:cc:15:b8:fc:cc:b2:3a:4a:42:dd:90:63:1d:ed:e1:6b:47:
cb:18:9e:c7:98:6a:72:74:40:f6:12:41:01:d6:ee:f6:3a:5c:
4f:e8:a3:cb:bc:bd:16:d5:55:3d:c8:4e:7b:40:28:6a:ba:e0:
b2:c8:52:48:28:ec:ba:8f:67:ce:e9:40:f7:77:bd:5b:96:14:
75:0b:96:7c:26:6a:85:f1:d6:5e:e8:89:a8:a8:35:b7:e5:c3:
91:cd:9a:a5:ad:64:0f:93:c7:09:4a:0f:2f:5b:59:c9:06:bc:
64:09:0d:80:52:87:61:5a:76:f3:1f:92:9b:45:a6:f1:cd:dc:
72:ee:b0:a4:1b:86:62:28:b4:98:39:59:10:4e:ff:d6:69:ca:
d4:5f:48:b8:e7:7d:95:03:02:53:0c:19:04:ab:48:5b:66:89:
dc:88:c2:c2:a7:f2:3c:eb:3b:ac:eb:c8:e1:08:f5:02:7e:71:
52:e4:89:18:3e:25:4d:74:86:8b:44:41:0c:13:83:c8:68:4f:
56:7e:a7:72:c1:12:8f:35:d1:9e:49:b0:8a:1b:af:eb:fe:0f:
85:1e:42:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:43:40 2024 by rpki-client on console-fra.rpki-client.org