Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/QJJ4QBluqgRp0HLNr7mF3dKr3nc.roa
File: QJJ4QBluqgRp0HLNr7mF3dKr3nc.roa (raw, json)
Hash identifier: moT0H8d1nZnNKzjOkgcKUq+FRl/pzyEUdsrHD9Nks1g=
Subject key identifier: 40:92:78:40:19:6E:AA:04:69:D0:72:CD:AF:B9:85:DD:D2:AB:DE:77
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 018CC2DB37A933E9A0D3EEC3FCD08E4105C8
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/QJJ4QBluqgRp0HLNr7mF3dKr3nc.roa
Signing time: Mon 01 Jan 2024 02:29:55 +0000
ROA not before: Mon 01 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31368
IP address blocks: 185.173.156.0/24 maxlen: 24
185.173.159.0/24 maxlen: 24
89.107.132.0/23 maxlen: 23
89.107.128.0/23 maxlen: 23
185.173.158.0/24 maxlen: 24
89.107.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:37:a9:33:e9:a0:d3:ee:c3:fc:d0:8e:41:05:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40927840196eaa0469d072cdafb985ddd2abde77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:5e:4f:4d:b5:e0:46:a6:2d:b6:e0:3a:22:
12:f7:00:87:46:4f:82:fe:7a:29:16:fb:c1:30:df:
f0:72:1a:83:04:57:f6:13:c1:d8:55:98:83:1e:18:
a7:26:24:d4:8e:4c:40:46:ea:c3:e9:d9:52:bc:e8:
e0:4c:dc:00:88:e4:bb:8b:71:ad:fd:a7:8a:04:84:
2f:81:d0:f7:f7:24:d7:ba:02:c4:a1:bd:33:cb:54:
e6:6a:5f:5b:6f:6b:30:0a:36:91:50:c5:d7:fd:d6:
f6:eb:76:69:48:49:df:05:30:55:e9:47:8f:33:39:
c5:2a:71:2b:5a:9f:7c:e0:7a:87:5b:6f:8b:05:5b:
c8:f6:1f:6d:13:4d:e0:9f:ff:00:1b:a9:81:2f:54:
fd:f5:8d:69:a3:9c:f1:96:eb:b8:89:58:d2:bc:c9:
36:2f:a5:19:17:58:ac:46:c9:c2:80:f9:07:c0:25:
a8:89:5d:dc:39:85:74:f2:68:ff:f8:4a:58:0d:10:
1a:67:3b:d4:bd:32:f4:6f:c0:57:af:fb:ec:27:4a:
15:e8:81:76:14:39:fd:74:3e:66:df:53:7c:12:84:
0b:0c:fe:48:4c:4c:05:9e:03:b2:4f:75:54:57:51:
3d:b6:20:c5:bb:ce:32:fc:4e:e3:96:91:b6:26:41:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:92:78:40:19:6E:AA:04:69:D0:72:CD:AF:B9:85:DD:D2:AB:DE:77
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/QJJ4QBluqgRp0HLNr7mF3dKr3nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.128.0-89.107.133.255
185.173.156.0/24
185.173.158.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:71:b9:03:ea:c1:98:77:32:66:a4:e9:df:e0:cd:11:f7:f9:
02:56:06:23:5b:95:7c:4d:e4:1e:b4:e1:cb:9c:b4:97:d8:fd:
bb:2f:ce:6b:bf:47:c8:c8:3f:03:81:3e:b8:8f:09:7a:fa:a1:
04:42:e5:1a:33:80:ae:ab:da:24:7f:d5:57:54:f9:fa:d5:c2:
b6:ee:f4:ff:35:8a:b0:45:9c:a5:00:00:b3:95:be:2f:48:f4:
dd:cf:86:30:28:25:93:e6:f5:4d:62:02:e3:14:ee:dc:15:4c:
f3:78:16:d5:8d:3f:aa:a4:aa:bc:3f:92:4c:28:ca:ff:25:58:
a2:ab:77:7a:2b:0d:b7:46:84:8d:84:e1:9a:8b:5e:76:b9:37:
a7:8b:55:3b:95:61:4e:38:4b:f2:80:d9:48:fc:5a:1d:38:b0:
5d:ee:ed:7c:62:f1:62:ad:c7:3f:db:e1:5e:d1:58:ef:0b:8e:
69:16:15:45:ab:f7:58:e9:3f:61:87:d9:0a:d9:28:1c:32:c1:
61:b4:17:ec:7f:5d:8b:d3:bc:78:b6:b7:3d:a2:40:d0:40:ac:
68:95:b6:94:a0:2b:89:45:88:5c:b7:be:3a:27:91:5f:e6:bc:
44:b3:ad:e8:c4:e2:bb:2a:cb:5e:29:33:4c:58:42:bc:ef:92:
88:3c:8d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:02 2024 by rpki-client on console-fra.rpki-client.org