Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/q7QpeBpxNT3NGWg3cFDRkF4tgJ0.roa
File: q7QpeBpxNT3NGWg3cFDRkF4tgJ0.roa (raw, json)
Hash identifier: kU2MPhvoV1oV9tqhGzoOeT7VClqBbqF4ePsdDXADaTI=
Subject key identifier: AB:B4:29:78:1A:71:35:3D:CD:19:68:37:70:50:D1:90:5E:2D:80:9D
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC80128B4630D0B3DDE6EE987AAE57501
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/q7QpeBpxNT3NGWg3cFDRkF4tgJ0.roa
Signing time: Tue 02 Jan 2024 02:29:28 +0000
ROA not before: Tue 02 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35484
IP address blocks: 85.254.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:28:b4:63:0d:0b:3d:de:6e:e9:87:aa:e5:75:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abb429781a71353dcd1968377050d1905e2d809d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5a:6f:e5:41:59:bf:29:fc:25:8f:40:fc:e9:
a0:3a:75:19:eb:c5:d7:d5:26:39:3f:9c:3b:96:46:
e3:8d:d8:9c:29:30:95:58:90:e6:10:b6:13:ff:95:
3c:c8:4a:62:b9:bf:5d:ba:f0:dd:0a:87:3a:92:3a:
89:15:b8:b4:17:70:17:c8:77:a7:33:19:79:00:d0:
59:9b:1d:63:be:c3:54:bc:09:54:b4:33:f6:ab:8e:
64:58:57:b7:12:bc:53:c2:3a:0f:3e:8c:f6:e1:56:
f9:48:9d:a5:3d:c1:d7:68:70:3d:d0:2b:86:53:e7:
1e:00:cf:3d:0a:26:e0:ab:16:68:68:fa:8d:df:3d:
e5:3b:d6:8c:e0:68:f4:1e:e5:b6:d5:11:53:fd:66:
96:ff:c4:e7:2e:d5:34:54:24:bc:6e:78:9f:18:c9:
ac:17:95:24:c3:b2:f1:14:d3:96:90:ab:f2:6b:55:
bf:01:05:c4:13:2d:af:67:69:d3:07:de:48:d5:a7:
f5:5f:7a:aa:e2:b2:9e:83:87:3e:8b:59:f6:e4:c1:
1f:c8:b5:82:4b:b6:b8:fc:eb:c9:10:17:f3:18:bf:
8e:c2:81:7a:96:af:bf:96:35:0a:22:e7:0e:e9:4b:
4b:a2:dc:14:14:f0:d4:32:e4:83:db:9f:d6:8e:3a:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B4:29:78:1A:71:35:3D:CD:19:68:37:70:50:D1:90:5E:2D:80:9D
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/q7QpeBpxNT3NGWg3cFDRkF4tgJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
49:5b:de:cc:68:34:29:a0:47:40:28:5b:d4:00:6d:41:b9:04:
22:1a:75:77:8f:a0:2f:79:ba:12:84:0b:9a:23:1b:12:99:b0:
79:96:08:7e:2a:b0:c2:27:f5:ec:ef:ff:01:ba:df:e6:c3:8f:
4a:c6:44:01:dd:80:db:6d:d7:cb:9e:e7:18:12:c8:f5:55:26:
1e:8d:52:21:ae:13:00:e8:61:b1:34:e6:9d:b0:58:b9:a2:15:
b8:ee:a3:7f:7f:45:41:6b:e0:84:56:aa:29:f1:b8:83:4b:01:
82:1e:93:4e:14:ab:a2:c4:b4:39:c3:e3:7c:7e:5b:0b:b2:c3:
f4:2f:e9:d7:59:0c:d1:82:b0:0c:3f:bd:de:0b:f4:92:f8:05:
bb:4c:49:59:ef:09:8d:94:be:9e:9d:63:e0:80:c5:5b:cb:1f:
86:85:98:d7:0c:02:86:dd:aa:43:c4:39:08:b9:a4:91:1c:02:
ba:de:1a:62:0a:a4:e3:90:45:ae:17:b8:1c:48:1e:60:bf:74:
a6:7b:7e:09:0a:5d:3a:33:e0:2d:69:b3:f3:82:86:fb:09:bf:
cd:58:69:c9:c5:9b:fe:a5:37:7e:7e:1f:e6:73:0f:7e:e0:4b:
21:b8:d0:84:eb:8c:70:31:85:1c:29:f0:16:c0:84:6a:74:b4:
76:85:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:30:38 2024 by rpki-client on console-ams.rpki-client.org