Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/QxTbULH5Bh93Vt114_okPlz9wCI.roa
File: QxTbULH5Bh93Vt114_okPlz9wCI.roa (raw, json)
Hash identifier: w3RO8Na56fTMZyFGSl4KI0465S7yg5GDPWl5OCfrYLk=
Subject key identifier: 43:14:DB:50:B1:F9:06:1F:77:56:DD:75:E3:FA:24:3E:5C:FD:C0:22
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01924A36F5D8C68EC61C973EB9A1F6B2F871
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/QxTbULH5Bh93Vt114_okPlz9wCI.roa
Signing time: Tue 01 Oct 2024 22:32:48 +0000
ROA not before: Tue 01 Oct 2024 22:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 86.110.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4a:36:f5:d8:c6:8e:c6:1c:97:3e:b9:a1:f6:b2:f8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Oct 1 22:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4314db50b1f9061f7756dd75e3fa243e5cfdc022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:f6:28:d6:a8:ff:26:8e:c8:d5:b0:5a:79:
03:8f:fb:43:ed:44:04:d5:ec:a2:01:59:2e:ac:29:
52:90:f3:be:78:84:71:e7:08:c6:5c:8d:a5:ed:a6:
d3:09:38:21:c6:23:e8:7e:33:21:85:ee:33:dc:bf:
6c:91:ac:0c:f3:71:c5:27:b6:74:00:12:90:99:0d:
95:df:fa:73:4c:92:13:99:42:05:62:e1:a0:35:dd:
59:d4:09:a8:33:74:f2:5d:c9:bf:28:45:af:21:32:
d9:ad:6b:f6:54:b4:09:65:fb:98:b2:7a:15:7b:ef:
fc:fd:eb:40:09:19:07:05:74:20:f0:55:98:b5:f0:
ba:c7:c1:01:67:c9:ba:ff:50:82:ac:53:49:fb:ca:
c0:d1:cb:9c:8a:6e:34:a3:84:62:ee:57:d4:77:bd:
04:7e:fe:39:84:55:33:19:ac:ff:26:ea:f4:09:8d:
7b:79:40:ea:d3:10:5f:fa:d0:e0:ff:ca:f7:0f:bd:
ae:38:af:ab:3e:fb:80:4e:e4:91:4e:53:7a:18:ce:
24:68:d8:74:b0:f7:04:cf:6c:48:9d:4d:b7:c7:23:
f3:54:0d:3b:4e:f1:5a:90:90:7a:8f:d7:46:cf:05:
4e:88:08:36:48:67:c6:6f:0b:56:e4:3b:19:d3:c9:
d6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:14:DB:50:B1:F9:06:1F:77:56:DD:75:E3:FA:24:3E:5C:FD:C0:22
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/QxTbULH5Bh93Vt114_okPlz9wCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f5:35:f6:f2:05:a0:1a:d0:99:33:58:55:bb:e6:c0:75:d6:
af:f4:92:d3:20:69:b3:98:e1:0c:2e:c4:e1:de:a1:a2:a3:40:
1d:38:dc:9e:a0:cd:54:5b:f6:51:3d:e1:9b:90:92:19:88:f0:
9b:87:18:f1:f5:25:d4:bc:fd:d7:72:5b:66:71:04:c9:2b:e7:
ee:55:71:ad:53:da:42:30:1e:ca:88:f7:02:6b:a2:25:62:67:
9f:43:59:6c:8b:e7:cc:f4:1f:4f:d0:91:84:be:85:c6:ff:ca:
46:6f:5f:d4:fb:b5:a5:c9:ad:76:49:6c:90:d6:54:75:d2:28:
a9:4e:8d:12:8f:74:40:5f:12:f0:19:ff:be:e7:06:80:6e:57:
38:de:a4:7d:73:c2:13:7f:34:db:d0:7d:b0:a7:db:f8:43:4e:
f9:3e:90:dd:57:ec:e9:c6:9f:90:64:02:b3:5b:51:5f:0c:f9:
97:a9:dd:9e:0b:ea:c3:5a:ef:b9:e0:55:41:28:20:5a:b8:59:
a5:ba:3a:44:35:a8:65:88:f7:39:94:f5:aa:a5:88:e7:f7:8b:
9c:d4:1d:7b:65:b7:d4:7b:f8:9b:9e:65:3b:3f:5b:83:a1:5b:
de:2c:6e:7a:5f:66:1f:55:44:ee:10:3e:75:fc:2d:8a:89:b0:
06:47:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:47:00 2024 by rpki-client on console-ams.rpki-client.org