Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/QCm7EVj11gasZhs4X-rXZkLm98k.roa
File: QCm7EVj11gasZhs4X-rXZkLm98k.roa (raw, json)
Hash identifier: D3MMW8jCxUpqkVP89nyXIQ8Ll8EICdJCYUVafIX3C5Y=
Subject key identifier: 40:29:BB:11:58:F5:D6:06:AC:66:1B:38:5F:EA:D7:66:42:E6:F7:C9
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 018CC4939DD934F906DEA940161DE2F6F553
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/QCm7EVj11gasZhs4X-rXZkLm98k.roa
Signing time: Mon 01 Jan 2024 10:30:57 +0000
ROA not before: Mon 01 Jan 2024 10:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 62.85.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9d:d9:34:f9:06:de:a9:40:16:1d:e2:f6:f5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Jan 1 10:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4029bb1158f5d606ac661b385fead76642e6f7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:cb:b7:d5:78:8e:3e:83:b9:2b:35:a4:5d:
82:aa:aa:da:59:b7:9b:12:90:ce:1e:b9:d8:83:6b:
f4:39:ba:12:be:d9:43:be:b5:3d:ff:e0:bf:40:c4:
54:d2:c6:87:56:8c:d5:97:37:f5:e4:68:c8:2f:fd:
2f:d6:d6:6e:83:7a:11:fd:ce:62:44:7a:c2:b8:73:
5a:5e:ac:a6:dc:7e:85:58:8b:43:75:14:6d:c9:09:
58:0c:86:8c:ae:d9:aa:bd:17:ad:3b:26:2d:f9:f5:
4e:87:33:40:b3:3c:0f:49:eb:a8:e2:4c:46:d6:6f:
f5:d7:49:22:62:91:97:7a:69:9f:b8:d8:3d:13:51:
36:da:b4:3c:ea:ed:25:d1:44:68:41:c4:0b:5c:bb:
38:d9:50:f4:dc:97:34:82:9d:c1:e9:4d:6c:3e:e8:
c1:c0:bf:60:70:68:e5:85:f0:36:b0:4f:ff:c8:ed:
bd:0e:de:25:e8:18:6c:8e:a0:31:9d:2b:19:3d:8e:
68:b0:be:0b:9c:3d:bc:f0:8a:a2:65:e9:52:f0:ad:
2b:06:43:3a:9a:51:4e:9d:94:ed:b2:89:4d:9f:fc:
1d:54:52:f4:5c:95:88:3d:b6:c3:52:11:2b:39:6b:
8b:d5:de:bf:68:6c:b4:1c:e1:18:df:db:64:a2:38:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:29:BB:11:58:F5:D6:06:AC:66:1B:38:5F:EA:D7:66:42:E6:F7:C9
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/QCm7EVj11gasZhs4X-rXZkLm98k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.85.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a2:05:66:e7:44:72:5a:cd:a2:3d:49:2c:0b:73:e5:fe:27:61:
97:b3:77:37:52:60:73:00:c6:4f:96:38:b2:28:3c:b9:6e:78:
68:24:4c:a2:14:4c:a4:d5:34:39:1d:1b:57:da:93:7b:dc:52:
e8:8c:8d:8e:21:13:47:52:3c:02:39:92:2e:d3:0c:db:a6:5a:
da:e0:3a:b1:19:d1:94:08:3f:b1:43:8b:b8:c1:cf:69:ff:8f:
63:cb:35:82:e7:64:3c:a2:61:10:c9:04:05:4d:7b:e0:d0:84:
2e:9b:9d:16:01:05:9a:d9:81:63:c5:e1:25:a2:6c:d1:75:d5:
b1:6f:c6:ba:63:94:07:b9:6a:b6:50:f0:b1:29:fc:f9:d4:98:
4e:c9:48:37:bf:a3:f7:ee:e2:ca:54:7c:5a:61:19:d0:00:1c:
f3:57:d3:a8:2c:92:25:49:4c:95:a9:e2:c3:56:85:e5:1b:4c:
bb:14:dc:a7:46:f6:e1:1c:72:4d:5f:89:17:73:ca:20:50:11:
16:e1:27:37:c9:56:b1:30:b9:31:e8:33:01:d4:35:6a:16:c5:
3a:03:bd:c7:77:34:c0:80:6d:cd:23:06:7f:ee:bd:f5:d8:7c:
fc:27:11:d9:59:4e:7d:40:89:05:c0:c5:a8:65:96:58:49:fa:
f0:c5:80:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:33:44 2024 by rpki-client on console-ams.rpki-client.org