Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/qBa0P_EhLzgmJxj2FhuMjUCCgDA.roa
File: qBa0P_EhLzgmJxj2FhuMjUCCgDA.roa (raw, json)
Hash identifier: /CbhYy0Fw+GwdLpVIFzwvgX8oLLZdPA6DIe1c6O3CGE=
Subject key identifier: A8:16:B4:3F:F1:21:2F:38:26:27:18:F6:16:1B:8C:8D:40:82:80:30
Certificate issuer: /CN=d2d58cf4c6838f9b3d17718dcbc948f2c455a83d
Certificate serial: 018CC42538434D96BC8DA4340233F8EA3389
Authority key identifier: D2:D5:8C:F4:C6:83:8F:9B:3D:17:71:8D:CB:C9:48:F2:C4:55:A8:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tWM9MaDj5s9F3GNy8lI8sRVqD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/qBa0P_EhLzgmJxj2FhuMjUCCgDA.roa
Signing time: Mon 01 Jan 2024 08:30:22 +0000
ROA not before: Mon 01 Jan 2024 08:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 195.74.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/0tWM9MaDj5s9F3GNy8lI8sRVqD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/0tWM9MaDj5s9F3GNy8lI8sRVqD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tWM9MaDj5s9F3GNy8lI8sRVqD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 13:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:38:43:4d:96:bc:8d:a4:34:02:33:f8:ea:33:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d58cf4c6838f9b3d17718dcbc948f2c455a83d
Validity
Not Before: Jan 1 08:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a816b43ff1212f38262718f6161b8c8d40828030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:80:94:9f:6f:83:e8:f4:d6:20:82:30:e5:
57:20:be:c7:59:c6:4a:31:15:ab:0d:bc:95:ad:41:
b6:25:9c:76:77:e7:73:8b:7b:e6:5c:b2:59:da:da:
d6:de:e5:08:f8:a5:85:88:e2:b2:43:a7:79:56:28:
5e:46:40:83:16:03:b5:6d:1d:43:4a:bf:ac:54:92:
70:71:01:e9:82:b9:fc:43:b6:ba:66:15:ea:57:d7:
01:38:45:33:70:d3:39:b6:cc:bf:bf:49:59:ad:c0:
4c:a5:fc:df:11:e5:e0:64:87:96:05:a6:e7:38:69:
07:51:b8:2b:1d:ba:5e:da:45:78:0b:7d:b3:9c:14:
29:7a:4b:c2:24:cc:a1:86:67:31:4b:a5:c3:e9:3d:
27:db:db:02:5a:c4:c7:7c:70:24:ae:b0:9b:6f:51:
d1:75:b2:91:79:a9:7d:09:a3:94:63:2f:5e:23:35:
5a:b5:bd:53:e3:eb:b4:01:86:c8:e4:13:47:80:1c:
22:bc:e6:a8:98:e8:f6:32:11:bf:8e:69:eb:96:61:
65:f8:26:1c:fb:b1:9a:09:37:d8:d0:95:5f:01:f1:
c7:f0:bf:c0:e3:cc:60:61:8c:df:fa:38:ea:8e:79:
32:42:ef:18:ed:d9:e2:aa:ef:c8:d0:02:6b:8b:16:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:16:B4:3F:F1:21:2F:38:26:27:18:F6:16:1B:8C:8D:40:82:80:30
X509v3 Authority Key Identifier:
keyid:D2:D5:8C:F4:C6:83:8F:9B:3D:17:71:8D:CB:C9:48:F2:C4:55:A8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tWM9MaDj5s9F3GNy8lI8sRVqD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/qBa0P_EhLzgmJxj2FhuMjUCCgDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/0tWM9MaDj5s9F3GNy8lI8sRVqD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.74.86.0/24
Signature Algorithm: sha256WithRSAEncryption
72:fe:db:f1:ad:28:ef:43:2d:83:57:36:25:75:9c:d8:52:42:
a7:6a:9a:db:92:a6:1c:64:2b:23:7f:8a:06:94:2d:cd:3c:db:
c0:2c:eb:36:be:5a:d7:d6:09:9d:bc:92:7a:b5:d6:40:ed:cf:
d3:c6:89:19:99:55:07:c0:51:0b:e1:d2:73:07:62:4a:92:00:
41:ec:91:22:36:6a:1a:0f:cc:a1:c8:aa:3b:8e:f8:d1:39:29:
ad:26:cb:3a:b0:07:fe:19:8d:56:f8:ee:dc:84:66:29:be:6e:
75:ca:6f:78:24:d3:26:cd:d8:1c:3c:bb:12:fa:a9:b1:e5:ab:
ba:3f:9d:37:20:29:9b:04:a6:29:ad:e4:26:10:db:2c:a2:83:
74:42:c4:59:f1:68:55:5b:d7:12:35:8f:d4:50:df:b5:c5:46:
ed:ea:54:15:f4:f7:8f:ba:82:10:86:ae:d2:97:55:ff:ad:e6:
bf:5a:2f:c5:25:a1:e0:e9:3e:63:5c:8d:a4:09:dc:2a:fa:d8:
d9:75:4e:df:9c:5e:9e:17:7b:fd:e0:67:5e:57:b9:8b:14:e8:
9c:00:56:9f:ce:f5:18:65:a5:64:de:d3:0a:bf:98:dc:ad:bd:
c6:b5:ee:35:fa:d8:40:b1:cd:a9:19:2c:89:af:08:db:51:43:
d4:f0:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 20:42:19 2024 by rpki-client on console-fra.rpki-client.org