Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/N_qFpU4sKqwrkJaJGotNl69oTqs.roa
File: N_qFpU4sKqwrkJaJGotNl69oTqs.roa (raw, json)
Hash identifier: PQe7NfCF858l5Og0YY7M/dkOFXzWOJzC378yATiaJq4=
Subject key identifier: 37:FA:85:A5:4E:2C:2A:AC:2B:90:96:89:1A:8B:4D:97:AF:68:4E:AB
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 018CC4939D583E20B83DB3907B7C5BBE0D81
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/N_qFpU4sKqwrkJaJGotNl69oTqs.roa
Signing time: Mon 01 Jan 2024 10:30:57 +0000
ROA not before: Mon 01 Jan 2024 10:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62214
IP address blocks: 139.28.140.0/22 maxlen: 22
2a09:740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9d:58:3e:20:b8:3d:b3:90:7b:7c:5b:be:0d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: Jan 1 10:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37fa85a54e2c2aac2b9096891a8b4d97af684eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5d:3e:34:6a:ce:a4:5f:e9:e0:7e:8a:07:dc:
4a:4c:7c:c6:d1:f1:b8:82:73:76:95:06:44:13:ad:
b3:b5:12:8e:fd:8c:4c:f1:93:79:1d:d0:b1:b0:e3:
91:2a:32:b9:85:c3:5f:5f:c9:9d:9b:e3:f5:d6:d1:
b4:41:e2:27:8b:05:a1:c8:b2:ce:fc:7b:ac:d4:1a:
d7:44:da:49:e0:41:41:9e:c5:56:67:8e:bb:b0:ff:
04:16:79:80:df:eb:60:fa:77:e9:32:2d:61:17:bc:
10:40:a3:73:6f:71:80:47:51:91:a7:c3:16:9f:cd:
d6:40:6e:b1:45:2c:12:91:8f:ac:44:60:ba:67:5f:
8e:2b:27:fb:50:e1:f8:c7:67:60:b9:1a:b0:ca:59:
67:81:2d:dd:7e:8e:95:54:b0:8f:c3:ff:7d:72:3f:
2d:c4:f8:e4:4c:f8:90:e4:e4:a3:aa:96:2a:4c:6b:
c4:c2:39:30:19:8e:79:98:48:04:a2:8a:b8:b0:fd:
32:1e:fe:7a:c8:9d:f7:f0:99:e1:6e:8c:b7:9f:0a:
8d:02:49:54:94:5c:67:3e:01:d4:48:5e:6d:ca:69:
05:02:cb:f3:1c:b2:34:83:fd:e2:8d:07:ce:b8:ba:
80:73:10:4f:ba:21:5f:3a:3f:e2:fc:68:09:c2:cb:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FA:85:A5:4E:2C:2A:AC:2B:90:96:89:1A:8B:4D:97:AF:68:4E:AB
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/N_qFpU4sKqwrkJaJGotNl69oTqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.140.0/22
IPv6:
2a09:740::/32
Signature Algorithm: sha256WithRSAEncryption
39:48:80:e8:f9:70:f3:c0:1e:58:9e:98:c0:0e:7f:fd:de:aa:
16:cb:da:2c:a5:08:6a:35:c9:68:08:b1:d3:c4:ce:ae:92:08:
d7:99:62:24:c5:3e:17:a2:2a:b2:ab:fd:1e:b4:e5:45:5c:79:
f3:49:44:13:4d:39:11:dc:d0:29:2e:12:51:29:e5:90:f6:5b:
1b:d2:44:4f:8e:48:5c:68:d5:61:6c:3c:01:a8:7d:a0:12:bc:
8c:b0:5b:b0:ae:0a:3b:21:d0:16:30:7b:75:ac:c4:76:71:0a:
b7:4d:3e:fb:f3:08:b3:1b:e2:ea:2f:e1:a2:3a:0f:65:e3:98:
73:94:de:4a:05:5e:13:8f:1d:c2:27:e7:40:8c:68:66:0b:27:
2e:c3:9b:df:45:61:73:8f:c5:2c:a3:66:31:18:a3:2d:46:d4:
1e:42:89:37:f5:11:6e:8d:5c:07:95:8e:07:82:7f:7f:3a:2e:
67:90:c1:73:bd:9e:3f:39:b9:3e:8f:f1:0e:db:d8:66:f6:c7:
61:7e:6a:5f:82:34:de:be:f3:db:2e:41:91:ee:77:5f:16:10:
c6:c3:72:ae:0e:32:72:ef:62:9c:03:a6:3c:a6:e4:47:29:f0:
77:b3:ef:04:4d:6f:f6:a1:33:00:99:35:5c:1c:80:b6:f3:09:
71:b7:81:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:51:26 2024 by rpki-client on console-fra.rpki-client.org