Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/QGhG6RxqyM5xS4zSfkTkhEc08iw.roa
File: QGhG6RxqyM5xS4zSfkTkhEc08iw.roa (raw, json)
Hash identifier: Zbfe3Kbv20fwsPXZZlxeo8S7ShO9tsbTG5lOXXoVCSo=
Subject key identifier: 40:68:46:E9:1C:6A:C8:CE:71:4B:8C:D2:7E:44:E4:84:47:34:F2:2C
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 018CC348F04AC46E0BE9EBD68D7C6F441D86
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/QGhG6RxqyM5xS4zSfkTkhEc08iw.roa
Signing time: Mon 01 Jan 2024 04:29:46 +0000
ROA not before: Mon 01 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207360
IP address blocks: 217.22.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f0:4a:c4:6e:0b:e9:eb:d6:8d:7c:6f:44:1d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jan 1 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=406846e91c6ac8ce714b8cd27e44e4844734f22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:95:d0:c1:00:cb:d3:7d:93:b7:80:42:7a:5e:
0f:84:a3:0f:b3:8f:70:54:ff:e1:a0:f3:09:5d:ed:
9b:be:6f:7b:cb:09:d8:d0:05:5c:4d:9c:fc:16:ef:
fa:d5:96:2a:6a:69:5b:be:ff:6d:2a:98:6b:c1:9e:
7f:fa:cb:85:c6:4f:f7:6f:21:75:ca:09:ed:fb:f6:
b6:96:61:6f:60:61:cd:98:77:0d:33:48:75:da:42:
b5:1e:2b:ae:c4:a7:8b:73:cb:7c:eb:c2:c7:0a:83:
66:d1:0e:6c:43:7d:5e:87:2c:f0:34:eb:f2:80:c9:
58:47:b2:d3:2e:67:39:a9:3b:17:ca:82:aa:1d:22:
cb:cd:64:f2:8e:66:89:06:66:18:27:c8:fb:09:e7:
24:57:35:fb:eb:9a:07:97:53:3c:39:2d:1b:54:1a:
5a:85:b7:b6:a4:18:fb:32:97:0c:80:9b:25:6f:49:
e3:17:f1:7f:74:db:92:c9:95:f4:2e:0c:16:c1:6b:
75:ac:80:c4:ac:2b:5d:20:95:78:10:2c:eb:c5:b9:
b6:f2:74:1e:84:2b:00:05:63:ef:5c:e2:7d:94:18:
fd:a9:be:29:ef:b3:26:58:d3:6c:8f:b5:81:de:9a:
06:69:3f:58:0b:5f:ed:c1:11:ef:44:9e:82:12:5f:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:68:46:E9:1C:6A:C8:CE:71:4B:8C:D2:7E:44:E4:84:47:34:F2:2C
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/QGhG6RxqyM5xS4zSfkTkhEc08iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.22.115.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f4:c5:ad:58:52:bb:bb:42:7c:b9:d7:40:07:b5:a5:c4:f7:
34:2c:cf:0b:b5:3e:c6:3e:15:36:f8:9d:b4:8c:a2:79:36:24:
df:d3:9a:88:63:1b:6b:9c:91:c8:85:a5:af:95:eb:e5:7c:de:
40:ae:f8:2a:97:54:9d:8f:7f:41:d8:1c:3e:1a:6e:ed:0e:fa:
67:ae:82:f6:09:ea:56:3e:9c:76:24:f7:22:5a:01:96:e4:8e:
38:d9:5c:ad:5e:33:02:ae:bf:21:ae:ae:96:ed:70:1f:d3:b5:
36:5c:59:15:de:c2:13:3e:61:0a:ee:96:52:98:72:bf:e3:58:
a1:81:05:46:8e:a5:e9:60:8c:63:1e:22:ea:0e:23:f1:e1:47:
f0:72:86:38:69:6c:86:1b:b4:37:33:67:19:c6:33:e6:0a:6d:
0e:36:af:a3:11:fe:1c:6e:a6:9f:90:cc:82:65:03:2e:0c:32:
12:4b:ff:ff:19:3d:1b:96:3b:0f:17:e9:6b:b5:4d:d4:00:63:
67:71:15:33:00:2f:16:f0:5e:88:98:95:ef:de:71:2f:a7:13:
d1:ea:5b:86:c2:dc:e6:b2:09:c7:39:68:d3:d1:43:13:60:1d:
c0:ed:31:3a:b5:26:2b:9c:2d:c6:dd:d2:44:0e:5b:3f:ca:bb:
c4:6a:af:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:15:34 2024 by rpki-client on console-ams.rpki-client.org