Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Qg7JfLKGIYAtfP1jlvLvMraaRPw.roa
File: Qg7JfLKGIYAtfP1jlvLvMraaRPw.roa (raw, json)
Hash identifier: U09p3DSdMdgPc/18Nb1OpbczTCTawaQad4HpllEDB3M=
Subject key identifier: 42:0E:C9:7C:B2:86:21:80:2D:7C:FD:63:96:F2:EF:32:B6:9A:44:FC
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 018F229257E753B3AD3E5AD3B6AD3D7B6EDA
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Qg7JfLKGIYAtfP1jlvLvMraaRPw.roa
Signing time: Sun 28 Apr 2024 02:39:27 +0000
ROA not before: Sun 28 Apr 2024 02:39:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141759
IP address blocks: 185.202.100.0/24 maxlen: 24
194.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:22:92:57:e7:53:b3:ad:3e:5a:d3:b6:ad:3d:7b:6e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Apr 28 02:39:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=420ec97cb28621802d7cfd6396f2ef32b69a44fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:85:a8:b7:6d:a5:8d:eb:7f:4a:0b:24:22:
ee:ad:3a:d9:9c:d6:e0:0f:13:4a:89:c1:ee:9c:c1:
3b:34:91:f7:2f:46:df:33:d8:71:77:b1:41:67:ef:
84:04:c7:8f:42:9f:de:bf:39:76:96:23:7b:da:55:
06:bc:bd:b1:cb:e5:71:c3:5a:8c:cd:e6:fe:f1:da:
46:e9:b4:4e:99:2a:af:aa:32:e0:c2:cb:dd:75:5a:
d0:de:fe:02:80:2c:d8:5f:d1:3b:ad:5a:64:4f:d1:
a6:25:15:07:aa:5f:54:c1:22:4d:85:cd:6f:f9:5a:
6f:c4:f9:e1:0d:95:39:0c:6e:34:13:81:b6:cd:b8:
d8:e1:d9:c3:e8:8c:4b:c6:b0:3b:e4:04:5d:0c:b8:
2e:6c:9d:9c:62:a0:eb:3b:6c:49:da:99:3f:c6:82:
3d:17:d2:75:90:c3:00:1d:7d:4a:3a:b4:d1:be:6a:
7e:eb:81:f2:f7:0e:3b:0d:d5:ea:e8:4f:e8:7f:cd:
8f:5f:7c:bb:12:6f:0b:52:94:15:8a:01:7f:75:a8:
b9:14:92:69:66:91:ba:c2:34:31:25:da:b2:57:6c:
81:04:96:fb:b8:31:57:1e:2a:5b:b2:45:3b:b9:05:
95:29:0e:6a:64:4c:da:c1:e5:bc:f2:d0:1a:67:7c:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0E:C9:7C:B2:86:21:80:2D:7C:FD:63:96:F2:EF:32:B6:9A:44:FC
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Qg7JfLKGIYAtfP1jlvLvMraaRPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.100.0/24
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
17:1d:86:96:71:a3:aa:1d:ba:23:02:fa:3a:56:c5:62:e0:16:
94:69:08:2c:ab:ff:0e:58:ef:79:44:b9:d6:45:6c:0d:b4:7b:
c3:c1:97:c8:27:ba:24:a5:a2:f7:a3:57:0c:40:2e:bc:7d:70:
80:1f:2d:21:35:b9:30:da:dd:19:25:e4:5f:42:22:cb:90:08:
dc:82:d5:e7:18:5e:06:11:3c:ef:c4:cb:c9:f4:b5:d9:62:bb:
09:a6:5f:0d:84:85:36:3f:83:32:07:95:da:aa:63:8a:14:e2:
cf:a6:c5:59:df:e9:26:aa:14:1d:c5:ee:ca:93:c5:19:d7:a8:
67:7b:d3:e9:d5:9e:4c:99:32:7e:d0:d0:eb:6a:30:fb:9c:07:
d5:f3:14:1d:c6:7b:5e:1a:37:26:cd:60:24:94:5d:64:05:0c:
65:30:a7:c4:09:e1:57:05:7e:34:bf:0c:98:db:c8:03:bc:ed:
51:e5:b8:79:f8:6d:44:26:bb:8e:a7:c1:76:d8:bb:b6:16:af:
70:16:b3:a4:78:4a:14:c6:2b:da:db:1d:18:e8:71:94:fb:45:
96:ef:7a:ef:b5:16:63:d8:da:2e:41:bc:b7:fc:8c:bb:54:3e:
10:8c:dc:12:36:23:ad:9c:c9:35:ac:1a:70:ad:84:a0:50:f9:
bf:0f:66:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:04:52 2024 by rpki-client on console-ams.rpki-client.org