Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QkmsQeZyxc5cowhHg06KztQh4Qg.roa
File: QkmsQeZyxc5cowhHg06KztQh4Qg.roa (raw, json)
Hash identifier: biFDlFLDtaqKlqrxkSCEQwCWMds/dsNQEbGzcVhvkiE=
Subject key identifier: 42:49:AC:41:E6:72:C5:CE:5C:A3:08:47:83:4E:8A:CE:D4:21:E1:08
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192E285A251B57434761C2EF8BC8B7355C1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QkmsQeZyxc5cowhHg06KztQh4Qg.roa
Signing time: Thu 31 Oct 2024 12:21:01 +0000
ROA not before: Thu 31 Oct 2024 12:21:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214299
IP address blocks: 5.83.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:85:a2:51:b5:74:34:76:1c:2e:f8:bc:8b:73:55:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 31 12:21:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4249ac41e672c5ce5ca30847834e8aced421e108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:86:69:4b:cb:e3:41:72:0d:fb:83:e9:53:7e:
b1:86:4d:eb:9a:bf:ef:30:ff:bc:83:58:cb:3f:e7:
10:5f:70:27:c7:d2:c5:05:8e:86:f4:c8:21:4b:a0:
52:ea:38:8a:fa:5a:3a:4e:1d:d0:6a:2e:f3:5b:db:
72:88:e3:78:73:76:75:aa:76:8c:fb:81:4a:ca:6c:
7e:b7:9e:6a:ee:76:ec:bf:cc:af:3c:ea:31:9a:4d:
e0:f1:2c:c7:0a:67:d7:a1:d2:e3:31:10:49:86:f2:
0b:4d:51:ca:05:be:53:3f:64:fe:0d:aa:0a:ce:e1:
30:14:86:f2:e4:55:c2:09:27:d5:15:e7:a4:ad:32:
80:b3:73:32:99:5a:f8:84:df:60:18:6a:34:77:18:
c4:e1:0a:a1:e5:20:f5:f8:28:06:f9:bb:47:9e:e2:
43:10:c9:86:37:c5:b1:03:24:78:f5:33:72:86:71:
38:30:e9:15:20:2e:06:53:29:a2:34:ed:07:93:77:
b3:84:58:2e:f2:1b:5d:cf:0c:55:ca:bd:85:91:5a:
38:83:38:f7:30:9d:44:84:fd:37:12:13:01:14:c8:
93:83:85:a5:6f:2b:ab:b7:9a:f4:f0:21:8a:2e:22:
d9:bd:aa:d2:18:f2:d1:82:37:4c:f1:ad:cf:76:7d:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:49:AC:41:E6:72:C5:CE:5C:A3:08:47:83:4E:8A:CE:D4:21:E1:08
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QkmsQeZyxc5cowhHg06KztQh4Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f2:69:32:90:a1:7a:35:99:ef:42:4a:ae:1e:6b:37:0d:46:
07:27:d0:9b:06:19:f6:5a:a2:83:a8:af:f1:f5:21:9a:15:4e:
b8:4e:47:af:30:95:ea:b9:ff:40:1c:27:ed:10:fe:5d:62:f9:
59:e4:d2:6c:59:68:eb:47:7c:c2:98:12:54:3e:1d:a4:4b:6e:
58:27:42:6b:22:e4:34:eb:a9:d1:7c:6e:f0:b9:e6:eb:9e:7e:
70:d4:88:1b:ac:c6:b6:57:92:3e:d2:fb:a7:a7:0e:1c:75:9c:
f6:d7:2e:11:3a:5f:c8:92:49:56:84:d6:5b:8e:56:ad:2f:26:
0a:85:95:0c:26:11:4a:47:71:b9:26:6a:15:74:a8:68:d6:88:
ea:fd:a4:95:98:f7:90:1d:1f:87:b5:8f:8f:62:fc:83:a2:d5:
23:01:49:66:03:6f:d8:b4:42:c1:90:d5:68:bb:1c:4c:b8:28:
10:61:6e:f8:20:b0:e6:d1:43:55:ce:2d:64:d7:d6:47:26:b6:
4f:3f:f9:fb:4f:0c:bc:fd:9e:bd:a5:58:81:47:17:af:db:9b:
76:02:2d:2f:7e:03:2a:a9:fc:bc:7d:b3:11:c2:92:f7:74:8d:
ab:49:d7:61:da:00:c6:b6:9a:9f:f1:f7:6c:2d:8d:ed:73:62:
f7:6b:8c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:16 2024 by rpki-client on console-fra.rpki-client.org