Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/QIRJHo2ndsf7zMpZPv9Uc6FS-R0.roa
File: QIRJHo2ndsf7zMpZPv9Uc6FS-R0.roa (raw, json)
Hash identifier: roBAczBPI1k7l1+MBUUz8IhGGTITI5y/Ju+TQSpXPxI=
Subject key identifier: 40:84:49:1E:8D:A7:76:C7:FB:CC:CA:59:3E:FF:54:73:A1:52:F9:1D
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018CC794F188C50BE7B590EA1AE2F6421BB8
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/QIRJHo2ndsf7zMpZPv9Uc6FS-R0.roa
Signing time: Tue 02 Jan 2024 00:31:16 +0000
ROA not before: Tue 02 Jan 2024 00:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216127
IP address blocks: 5.104.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f1:88:c5:0b:e7:b5:90:ea:1a:e2:f6:42:1b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 00:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4084491e8da776c7fbccca593eff5473a152f91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:e2:aa:e6:d0:21:a6:c3:21:c5:d3:84:c7:
04:bd:16:01:0b:aa:4a:7f:e4:e6:8d:d7:78:18:47:
98:0b:5a:bc:93:b1:f3:ef:c4:44:34:94:48:7a:b3:
1a:7f:10:56:44:b1:39:96:a0:6a:80:a0:7e:24:32:
33:28:26:33:e3:0d:69:c2:3c:39:be:36:0a:79:ed:
e2:6f:22:ba:fe:93:09:ef:29:09:7d:21:60:5e:32:
5d:53:36:3a:9f:15:4d:13:41:70:bc:f5:1a:f8:c7:
6b:19:dc:54:13:fd:b6:7c:61:fe:91:f9:a3:23:a3:
d9:db:1c:91:59:e4:5c:76:13:4f:ad:2a:24:8a:af:
de:a3:0f:65:3d:f8:9c:bd:3e:58:79:e7:d6:89:55:
95:a1:d4:9e:70:7d:f5:29:14:a7:60:cc:6f:1c:ca:
36:33:15:56:7f:eb:5f:cc:d6:b2:54:b9:1e:9e:b2:
ca:f5:d3:59:3c:97:23:ee:58:76:49:08:48:ca:85:
7d:d4:4f:3f:36:ca:ca:84:0a:d7:a2:25:0f:41:20:
75:ec:f2:8e:52:d3:8f:d3:ae:96:cc:f9:54:a2:3c:
d4:1c:3c:9d:b8:72:e1:d0:71:40:65:9b:b3:7d:74:
04:04:dc:70:b4:ef:b8:cd:f2:ab:16:92:8f:56:dd:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:49:1E:8D:A7:76:C7:FB:CC:CA:59:3E:FF:54:73:A1:52:F9:1D
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/QIRJHo2ndsf7zMpZPv9Uc6FS-R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.75.0/24
Signature Algorithm: sha256WithRSAEncryption
17:97:91:d2:c5:05:d3:ae:4e:dd:6d:a0:74:6f:a5:28:1b:31:
ba:e7:36:9d:6a:35:4c:7e:bb:8c:d5:65:c0:b2:29:73:5b:ca:
29:76:05:89:38:cc:a2:cc:8c:fc:2e:1d:e5:81:80:3b:72:53:
81:16:54:ab:73:04:1f:e5:2e:a3:47:c5:bc:a6:bf:3f:01:61:
ab:32:d5:3e:d2:38:95:1f:05:58:9a:1d:c7:51:64:42:b3:54:
c9:23:b0:84:0a:62:a5:74:68:d3:02:94:c6:bc:4e:f7:91:f9:
c1:cb:51:43:db:ce:23:0a:77:f2:2d:3f:7c:02:0f:4d:60:e5:
ce:cb:af:65:5d:53:ef:45:44:a6:f1:37:c8:8c:5d:2a:6b:9c:
f3:69:7e:96:1b:df:70:08:64:d3:a2:14:32:40:0e:f7:5e:44:
84:84:8b:fd:9d:fe:92:ee:8a:60:71:62:a4:2a:b0:17:0f:d4:
11:22:f6:c8:c2:c7:e1:5a:55:83:54:11:3c:3f:32:36:01:1e:
ab:16:89:25:ab:66:44:4a:95:82:f1:f2:8f:58:8a:95:46:ac:
31:37:e0:5a:4d:e5:0c:98:56:47:45:87:49:00:55:65:bc:47:
79:7c:7a:21:e1:47:b1:fd:b4:8b:e4:7e:e7:69:0d:ff:d2:18:
f1:81:f7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:25:10 2024 by rpki-client on console-fra.rpki-client.org