Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/QzbrILvaxMP2MrD-x9be9dRNRfM.roa
File: QzbrILvaxMP2MrD-x9be9dRNRfM.roa (raw, json)
Hash identifier: pidAIfw2ZwUQICLUSA+0lKMh9ByfLbHXjWZIdR1XjJw=
Subject key identifier: 43:36:EB:20:BB:DA:C4:C3:F6:32:B0:FE:C7:D6:DE:F5:D4:4D:45:F3
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 018CC2DAFC8F3D3F45387F4B990FEC032D1F
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/QzbrILvaxMP2MrD-x9be9dRNRfM.roa
Signing time: Mon 01 Jan 2024 02:29:40 +0000
ROA not before: Mon 01 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203614
IP address blocks: 185.128.60.0/22 maxlen: 22
185.128.61.0/24 maxlen: 24
185.128.60.0/24 maxlen: 24
185.128.63.0/24 maxlen: 24
185.128.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fc:8f:3d:3f:45:38:7f:4b:99:0f:ec:03:2d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4336eb20bbdac4c3f632b0fec7d6def5d44d45f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:17:b8:a4:58:31:9b:c5:42:a2:9a:46:40:71:
bd:02:ad:9e:b7:bd:e0:8a:fc:62:56:f0:ad:ff:01:
32:11:ef:7b:ac:59:fd:6e:26:f9:b9:17:1a:6e:18:
d5:0f:01:a7:44:91:fd:c4:03:c7:e0:a3:89:0f:25:
12:50:d0:12:79:37:0e:da:cb:6a:5d:fe:77:35:3f:
cd:07:c3:94:77:1b:42:5d:3f:c9:57:e0:b7:fa:0b:
83:cb:cd:12:c2:ad:da:7c:41:a5:68:5f:9f:7a:15:
4d:03:65:82:ca:40:81:ea:30:7b:c6:e6:58:4f:75:
6f:50:cc:08:4d:3c:dc:20:2d:4a:59:3c:99:36:80:
f2:66:77:3b:cd:7c:5a:ea:0a:9f:d2:98:83:d8:b4:
c5:18:0d:4e:86:e9:35:bc:95:30:6e:cc:a9:37:de:
89:e8:24:b0:c9:b9:15:97:fd:5e:6e:30:30:40:71:
2e:3e:07:12:5e:95:56:50:93:59:03:df:bc:86:39:
1c:09:e3:41:16:78:32:b3:b2:06:07:e8:99:ea:2f:
6c:d1:46:d5:c7:9c:c1:e7:62:54:80:59:c0:c2:0d:
fb:f9:80:5b:b4:62:99:7e:79:90:b7:e3:bf:e4:f8:
bf:53:d2:9c:d8:9f:b9:3d:a9:04:bd:d9:55:19:d6:
44:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:36:EB:20:BB:DA:C4:C3:F6:32:B0:FE:C7:D6:DE:F5:D4:4D:45:F3
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/QzbrILvaxMP2MrD-x9be9dRNRfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.60.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:2d:0f:ed:54:c7:58:25:9c:2a:70:4c:d9:73:2c:dd:39:03:
ce:87:0d:eb:a2:10:c8:1c:6f:10:ae:4a:2d:fc:f0:1b:c9:0b:
26:9c:a4:ce:d8:d1:38:68:1f:8b:db:0d:a7:87:86:c9:8a:da:
94:96:17:1b:99:4d:0d:2b:bc:0f:02:66:b6:23:7e:d7:28:06:
e7:ee:11:75:32:88:4d:d1:f0:ac:a3:01:95:39:36:34:2c:95:
96:39:bb:1d:32:26:b8:29:e4:81:ac:ca:85:38:11:3c:05:81:
69:3e:16:1f:c7:77:78:0f:30:c4:71:b6:80:ec:4c:54:fd:ae:
05:85:53:6e:b1:9a:fe:b0:da:14:e2:dc:11:f2:cd:12:63:f8:
94:90:4c:6b:1a:0a:56:b4:9e:52:90:ba:d5:66:cd:c9:fd:25:
53:e4:23:22:24:3c:a4:72:51:fa:cf:2b:6c:c5:0f:62:b0:a9:
72:10:81:73:0b:d2:29:ea:5d:a8:21:c3:c8:ae:8c:92:2e:93:
14:fa:fc:35:6f:ec:a2:45:07:57:34:b2:d4:9f:ac:8b:be:fd:
79:0a:6a:61:6e:06:77:1b:ab:2c:85:20:2b:37:1b:a3:5a:ac:
32:38:75:17:e7:d6:4c:e2:2e:b7:fe:ce:0e:e9:89:60:47:da:
7f:28:3e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:41:05 2024 by rpki-client on console-fra.rpki-client.org