Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/QNXFpXNJXkAxw4BgqJquQbUc0yE.roa
File: QNXFpXNJXkAxw4BgqJquQbUc0yE.roa (raw, json)
Hash identifier: I/wOHfGFjw8+3eU/4uM+hqKkiH1KO3pdVny3OcR+Wes=
Subject key identifier: 40:D5:C5:A5:73:49:5E:40:31:C3:80:60:A8:9A:AE:41:B5:1C:D3:21
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 018CC6B88921C7E31101B4A5EB27DEA8979F
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/QNXFpXNJXkAxw4BgqJquQbUc0yE.roa
Signing time: Mon 01 Jan 2024 20:30:31 +0000
ROA not before: Mon 01 Jan 2024 20:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39392
IP address blocks: 213.109.164.0/22 maxlen: 22
2a09:ec00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:89:21:c7:e3:11:01:b4:a5:eb:27:de:a8:97:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Jan 1 20:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40d5c5a573495e4031c38060a89aae41b51cd321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:02:1f:70:2b:4b:8f:68:d6:9f:08:ee:9c:
af:f1:5c:dc:9b:ba:2b:bc:bb:20:2a:37:19:d3:4e:
b1:22:90:07:45:dd:48:ce:7b:4c:9d:d7:77:8a:8c:
ce:7d:e8:b1:40:5e:19:fb:68:7b:40:6a:bd:0a:7e:
d5:b7:62:96:9a:92:ed:59:d8:4f:c7:51:d4:5c:79:
65:67:89:a1:00:50:62:e9:03:e6:d1:53:69:1c:c4:
15:ba:66:1b:79:cf:4f:66:7b:b3:7e:d4:16:69:27:
a9:46:1b:52:81:0c:97:16:8f:5b:68:41:fb:b6:a3:
65:f8:8f:4e:f4:ae:3e:a8:ea:da:a1:7f:03:0b:e1:
bf:2b:6b:a1:57:5c:fe:dd:de:e2:9c:39:62:3c:a0:
03:29:8b:da:ea:c8:95:21:8c:43:52:28:82:49:d5:
72:de:3e:83:94:ed:0e:b3:e3:1e:7d:16:8e:00:d1:
33:a0:62:46:4e:f6:af:7e:0d:9b:a4:f0:25:35:b0:
4b:af:12:c0:b8:18:f8:44:14:51:e9:82:d5:d0:08:
ef:8f:3f:b7:ab:84:aa:b6:f6:05:59:52:ee:87:e8:
13:20:7d:e2:02:c3:1c:cf:99:59:a4:e1:32:6e:e0:
72:ba:08:4f:69:9b:db:43:cb:2e:0e:e0:98:f0:1c:
32:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D5:C5:A5:73:49:5E:40:31:C3:80:60:A8:9A:AE:41:B5:1C:D3:21
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/QNXFpXNJXkAxw4BgqJquQbUc0yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.164.0/22
IPv6:
2a09:ec00::/29
Signature Algorithm: sha256WithRSAEncryption
bf:96:95:39:49:52:4f:ee:be:07:cd:3c:a3:c9:2a:2d:27:fa:
7c:7e:6a:7c:5a:3c:74:58:07:85:ee:aa:0e:e3:ec:97:f0:2f:
cd:82:c8:99:49:22:15:b9:7d:b9:9e:a5:db:c4:0e:91:d1:ca:
10:a4:81:32:06:17:d0:d4:c7:7e:ce:c8:59:16:bf:b2:fb:e1:
38:10:d0:64:9a:df:c4:8f:e8:bb:bc:7f:b8:c5:02:52:46:05:
e6:09:e6:b6:fb:45:23:79:c6:9c:58:55:83:87:65:3f:ff:62:
65:71:ed:7e:63:50:5a:10:fd:a8:80:a3:0d:73:ff:3d:69:52:
fc:a3:10:4c:b3:79:d4:db:2b:82:0f:30:6c:b7:55:a1:11:b5:
be:8a:d2:85:de:2f:94:be:35:eb:38:0a:65:54:33:06:7a:ce:
e2:52:8c:8a:bc:32:58:17:58:da:aa:d5:2a:6c:5d:1e:2b:65:
12:ae:35:72:63:2c:10:89:22:1a:87:c8:8f:82:3b:40:21:3d:
aa:16:5b:2d:fc:c9:84:fb:a1:1f:be:c8:ee:28:8c:be:f6:18:
da:bf:b0:4d:d8:af:78:8c:81:9a:95:c8:c1:6b:fe:dd:17:5d:
6b:b7:87:54:4e:be:cb:fa:55:03:7e:b9:c5:aa:ac:01:9d:11:
24:70:5c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:15:26 2024 by rpki-client on console-ams.rpki-client.org