Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/QOWtO8ejR2svIqX6toi_JSKCc-U.roa
File: QOWtO8ejR2svIqX6toi_JSKCc-U.roa (raw, json)
Hash identifier: ncoH+3B5FBBt4hzBMKzPOFoJWfGsaZ/R38/jj3/uEF0=
Subject key identifier: 40:E5:AD:3B:C7:A3:47:6B:2F:22:A5:FA:B6:88:BF:25:22:82:73:E5
Certificate issuer: /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial: 018CC424702DF26AFA18465F0A10CD73521C
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/QOWtO8ejR2svIqX6toi_JSKCc-U.roa
Signing time: Mon 01 Jan 2024 08:29:31 +0000
ROA not before: Mon 01 Jan 2024 08:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209898
IP address blocks: 185.155.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:70:2d:f2:6a:fa:18:46:5f:0a:10:cd:73:52:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Validity
Not Before: Jan 1 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40e5ad3bc7a3476b2f22a5fab688bf25228273e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:7b:28:6b:d7:4b:27:7a:31:fd:9a:da:11:
5f:40:7b:7c:a5:f5:a4:ea:66:e4:eb:3a:56:2f:5c:
82:8c:13:3a:3d:2d:a7:10:51:b0:82:aa:e4:e1:34:
98:7a:b8:72:e5:65:d1:6a:89:31:ed:28:4c:d0:cb:
ee:45:8d:29:17:85:79:43:bb:4f:54:51:a6:d3:e6:
5b:77:28:9a:f7:23:8a:26:e9:73:74:cf:c0:35:69:
95:1a:db:c2:9d:f9:b7:4f:26:9f:44:11:b8:e3:be:
a4:f1:93:a2:53:ac:03:b7:c8:32:50:aa:df:9a:29:
3a:3a:82:e0:6b:e3:d2:97:77:dd:e7:5c:50:6c:d1:
96:c6:ed:15:44:01:cc:de:f8:01:96:d0:31:96:fd:
df:5b:1f:ce:13:d0:95:9f:09:5b:54:71:be:cf:c3:
9b:38:6f:b7:fe:ce:1d:44:c7:af:7d:99:18:10:80:
94:85:a4:41:83:ae:f0:2d:08:4d:41:66:8c:73:b1:
b3:84:9b:80:87:53:c0:6b:40:a1:5a:90:b5:71:2a:
61:0b:a9:f9:44:62:9d:25:6c:04:d7:13:9b:65:b0:
bf:ff:11:a8:34:2d:82:f5:0d:b8:ea:e4:9d:f0:52:
4b:d7:cf:c9:e5:ba:df:50:62:1a:7d:67:7c:ff:6b:
b7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E5:AD:3B:C7:A3:47:6B:2F:22:A5:FA:B6:88:BF:25:22:82:73:E5
X509v3 Authority Key Identifier:
keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/QOWtO8ejR2svIqX6toi_JSKCc-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:58:00:79:2f:12:f7:78:65:dd:4f:eb:37:c2:60:e0:15:e5:
f7:5b:56:83:ee:9c:bd:f0:ba:37:31:c3:36:ee:45:94:a0:a3:
1e:ee:35:e0:dd:1f:bb:66:95:f4:38:34:74:8d:4c:70:1d:32:
cb:e7:b3:36:79:f4:05:2e:52:ff:12:29:24:f6:40:0d:48:cd:
fe:63:bb:5c:88:8b:92:90:5a:ff:e5:6e:7f:0f:8c:70:88:6c:
ec:95:5e:f9:93:6b:43:09:4f:1b:8b:98:81:58:0d:b8:25:c6:
df:87:2b:fe:0c:54:26:b1:74:2d:74:00:f3:58:4f:7a:5b:5d:
98:1e:b5:a6:95:cd:6a:d6:0c:81:a2:74:6a:be:6d:e4:e1:b6:
c1:42:de:34:60:8e:6d:93:83:0a:63:91:d4:b7:06:88:f4:90:
61:0d:09:ef:0f:f9:d0:ec:e5:66:f9:5f:ba:0a:2e:4a:39:1b:
e9:ea:8b:e7:9d:0e:94:7e:2f:30:bf:c3:12:97:98:d5:f9:0d:
47:58:ab:ce:54:f6:50:d3:12:fe:6f:39:01:b7:5f:be:2d:c2:
c9:15:cb:46:19:a5:6c:15:e3:6f:6e:bb:72:fe:01:d3:e4:81:
d8:d4:72:5b:f5:98:71:01:24:3b:dc:72:91:2a:ce:82:18:a8:
f5:fe:c7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:28:14 2024 by rpki-client on console-ams.rpki-client.org