Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/kqH7_T3FlbokrgM7Q27ZoiBb9vM.roa
File: kqH7_T3FlbokrgM7Q27ZoiBb9vM.roa (raw, json)
Hash identifier: AODXKWnpLajj0MI62l8TEgZhCXFZRhjwcysBOvXi2AY=
Subject key identifier: 92:A1:FB:FD:3D:C5:95:BA:24:AE:03:3B:43:6E:D9:A2:20:5B:F6:F3
Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Certificate serial: 018CC4252E053F62F19EC73CB36919BD3CFE
Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/kqH7_T3FlbokrgM7Q27ZoiBb9vM.roa
Signing time: Mon 01 Jan 2024 08:30:20 +0000
ROA not before: Mon 01 Jan 2024 08:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47891
IP address blocks: 85.14.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 22:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:2e:05:3f:62:f1:9e:c7:3c:b3:69:19:bd:3c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Validity
Not Before: Jan 1 08:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92a1fbfd3dc595ba24ae033b436ed9a2205bf6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:af:d1:9e:b2:9e:a0:71:5f:cc:03:74:9d:
ab:f0:be:38:ff:5f:5c:1b:6a:07:6b:73:cb:a6:58:
3a:ce:85:a2:60:02:30:3c:b7:d2:2b:13:7f:29:83:
d3:af:1e:65:2f:f6:f0:8c:ef:e0:8c:8b:45:70:87:
e7:7e:6c:77:f2:d4:6c:d6:f9:2f:c1:0e:a2:c4:9f:
d0:44:04:6a:dd:fd:6c:84:84:c0:c0:bb:2e:b7:85:
fb:b1:27:7f:86:89:c0:49:e4:ee:77:be:85:43:7a:
be:62:60:54:6b:73:93:bf:e4:bf:38:0b:58:1a:da:
8d:18:c5:89:b5:c2:7a:6f:bc:85:c9:bb:dc:21:e5:
fd:da:66:0e:be:4b:59:ee:47:55:c9:40:c3:47:a8:
d1:26:3f:71:ad:47:6e:37:65:48:94:0a:0c:3f:4b:
18:cb:67:67:f0:8a:fe:79:ea:b6:88:19:30:4a:a6:
73:14:b8:47:9a:b0:0d:b0:37:b7:e1:75:05:05:c5:
9f:68:85:b7:ca:88:31:80:be:83:fc:0c:f1:89:73:
dd:36:f7:8c:66:74:34:24:2d:57:af:01:af:f5:41:
c5:f7:ef:34:95:e5:e0:a4:c8:b8:1e:98:e8:bc:72:
8f:53:3c:18:44:27:a6:49:c9:ae:33:b6:5c:b2:cc:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A1:FB:FD:3D:C5:95:BA:24:AE:03:3B:43:6E:D9:A2:20:5B:F6:F3
X509v3 Authority Key Identifier:
keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/kqH7_T3FlbokrgM7Q27ZoiBb9vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.142.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:fb:b0:62:65:07:65:63:1a:d9:86:e5:4a:27:73:39:ec:fb:
90:06:11:dc:44:ee:e1:e8:44:36:84:6c:0a:85:9a:be:cb:00:
23:40:03:bd:8f:5d:42:b9:6b:16:af:b1:54:83:4c:e2:fb:56:
02:99:08:18:5d:aa:7c:e7:f2:08:7b:22:11:97:e9:d2:e7:20:
c7:cf:e2:6e:88:72:43:05:72:26:d2:31:ac:b8:6b:ae:12:c0:
19:71:79:17:f4:f0:e2:cc:35:a0:37:9a:cb:54:df:d4:5e:a4:
cf:c0:a2:f6:ca:a2:11:7f:62:17:a9:fb:67:bc:3d:de:37:ac:
62:60:5d:e7:9f:ea:73:97:b9:b0:30:7e:67:4e:6e:c5:c5:39:
0c:1e:83:23:fe:da:de:25:47:a2:ec:4a:fd:86:7a:fd:ae:a3:
33:c9:a4:81:17:a5:29:3b:e0:15:28:97:58:8d:3e:de:8d:c8:
4a:e3:b1:5d:c6:a9:f6:52:bc:64:1a:bc:8d:b2:af:f1:b3:3a:
9e:ba:b5:65:62:0a:e2:e3:ed:6b:9a:12:1b:b0:9f:75:9f:9c:
40:95:5f:d4:71:2a:f1:67:f7:87:19:04:37:6b:f8:7c:a4:79:
7d:6e:e5:7e:1a:90:5f:aa:eb:1c:45:a2:fc:06:c0:ef:8b:a8:
cf:0d:a0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:18:19 2024 by rpki-client on console-fra.rpki-client.org