Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/qtfZJp_X7QVhnDHZiGVHGv2Zi2Q.roa
File: qtfZJp_X7QVhnDHZiGVHGv2Zi2Q.roa (raw, json)
Hash identifier: 9YiYmaQ1xhe+IARDEF6AC79pRrzF0xjLlp7EPcn5VVA=
Subject key identifier: AA:D7:D9:26:9F:D7:ED:05:61:9C:31:D9:88:65:47:1A:FD:99:8B:64
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AED1C09D7441D8E2536E40964B518
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/qtfZJp_X7QVhnDHZiGVHGv2Zi2Q.roa
Signing time: Mon 01 Jan 2024 18:30:48 +0000
ROA not before: Mon 01 Jan 2024 18:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50886
IP address blocks: 85.122.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ed:1c:09:d7:44:1d:8e:25:36:e4:09:64:b5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aad7d9269fd7ed05619c31d98865471afd998b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dc:ca:d8:74:20:33:93:4f:cd:21:96:33:eb:
9b:4a:e4:03:4f:4b:59:de:97:88:1d:39:f2:eb:d2:
e2:e7:10:d6:ca:0a:85:b8:7a:7f:a7:c8:74:12:15:
96:54:70:8c:a4:22:ab:90:9d:07:e0:6c:2a:6c:41:
70:fa:64:d0:4c:66:da:e6:15:40:ab:5b:38:31:fa:
57:a3:63:40:37:82:06:1a:08:6f:16:17:0e:e3:80:
67:d2:9d:88:db:d6:51:2d:4a:bb:e4:1a:ec:87:b1:
e3:ea:77:c3:e8:a8:26:96:0f:75:3e:be:10:9d:6c:
8a:6a:e0:43:11:df:8d:f3:9d:33:13:7a:86:12:96:
dd:69:c5:1c:d8:67:b6:e3:57:c4:ea:02:5c:ba:a6:
1c:6d:7a:f4:e2:08:a2:cf:7d:54:85:16:ac:d4:d9:
4d:8f:37:1d:2f:0f:54:33:3d:1d:8e:2c:6e:6e:1d:
92:c4:94:b7:b9:0f:88:2d:9c:a5:ee:4b:58:28:35:
f0:a5:cb:a8:ea:2b:f3:69:f6:a4:f6:59:02:24:d3:
8f:48:14:9c:7e:f9:b4:ed:a1:cc:05:89:70:1d:2c:
4f:21:55:a0:95:8b:e7:44:9b:ac:8c:e2:39:99:cf:
3c:57:64:2a:86:36:ce:57:3d:c7:f2:1d:09:52:69:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D7:D9:26:9F:D7:ED:05:61:9C:31:D9:88:65:47:1A:FD:99:8B:64
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/qtfZJp_X7QVhnDHZiGVHGv2Zi2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.144.0/21
Signature Algorithm: sha256WithRSAEncryption
39:b2:51:2f:47:fa:49:f4:39:9b:07:ba:a5:1b:e8:8e:a0:85:
ee:8f:2b:af:fa:12:d7:84:49:83:7a:91:cc:3a:1c:6c:18:41:
52:8d:38:bb:c0:5a:ab:32:a7:ff:c4:d4:a8:d8:7d:1e:57:69:
44:81:32:4d:81:69:ba:ce:96:0a:62:48:08:ef:45:0b:8b:02:
04:63:c9:38:20:ac:ce:c4:ec:cf:11:55:81:28:06:a0:93:58:
40:f5:f6:e5:80:36:98:6c:7e:44:e2:da:40:5d:2b:60:58:01:
c3:15:d1:0d:65:5a:a4:fc:79:b1:b8:62:78:2b:a5:5a:bf:d6:
a4:9d:54:3d:bd:b2:14:ff:6e:b7:7a:19:ab:db:01:21:0c:07:
9f:5c:08:25:a7:d4:9f:89:37:36:04:f1:8f:d7:91:61:a4:09:
5f:42:9d:e3:2c:38:64:92:84:ae:b8:7e:4f:c8:b3:97:6c:ba:
22:7b:77:09:c7:89:d4:5f:58:4d:b8:77:76:0d:ae:b0:aa:4a:
f6:f7:0a:3d:0f:5e:a5:60:5a:7e:f0:1a:fe:0a:5b:65:75:3a:
c6:a5:53:73:e3:b5:9c:98:f9:6c:5d:03:8c:3d:92:28:63:80:
db:d7:58:74:8b:af:39:06:fa:03:a8:b5:7c:7c:1c:8e:85:2c:
ba:8e:d4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 16:08:46 2024 by rpki-client on console-fra.rpki-client.org