Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QZeErr2tx5xIpFp6xDUDB7MEbhI.roa
File: QZeErr2tx5xIpFp6xDUDB7MEbhI.roa (raw, json)
Hash identifier: FnYM8RAX97tGX6TLUJCLOw4db9NspZUboMndNX934Oo=
Subject key identifier: 41:97:84:AE:BD:AD:C7:9C:48:A4:5A:7A:C4:35:03:07:B3:04:6E:12
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B9A232CFCEF84687FFE8A1E377BA9
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QZeErr2tx5xIpFp6xDUDB7MEbhI.roa
Signing time: Mon 01 Jan 2024 18:31:32 +0000
ROA not before: Mon 01 Jan 2024 18:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209292
IP address blocks: 85.31.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:9a:23:2c:fc:ef:84:68:7f:fe:8a:1e:37:7b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=419784aebdadc79c48a45a7ac4350307b3046e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:8a:d3:2e:c8:4f:e9:62:5e:52:c9:d6:77:
c1:50:6a:31:65:3c:6d:57:96:34:2a:08:5b:eb:0d:
34:dd:96:0e:79:11:a3:3c:74:a4:d0:d8:b3:fc:dd:
d7:ec:7a:b7:2c:3f:c7:18:29:54:ea:ab:6a:a9:72:
5a:6b:e1:87:f3:90:be:37:8b:6b:bf:93:5b:68:e5:
d0:96:4b:05:5b:63:c4:a5:b9:ac:c7:12:57:c9:25:
44:47:ea:e1:56:4b:b4:6d:75:a7:39:7c:24:e9:f5:
a7:8b:ab:06:4f:20:85:5f:30:83:0c:c0:39:4a:4d:
03:b5:41:ac:84:48:e7:fd:62:d6:54:e9:48:e1:06:
b6:ec:0f:dd:09:fd:ad:3f:f7:bb:eb:f9:b5:2b:e4:
80:60:31:f8:e8:da:bb:cf:e6:c4:0c:7e:58:52:6b:
e9:20:da:e9:ab:00:cf:f8:b0:91:4a:84:56:22:f3:
b8:92:0a:93:82:1f:be:8f:e7:13:0e:76:6b:d7:2f:
1d:82:7b:10:1c:c2:0c:e9:2d:8b:dc:b3:93:a2:5d:
e0:bf:ea:68:c4:e1:1c:12:e9:7d:88:66:81:c4:f2:
a7:fc:83:3b:ed:58:b8:7d:27:3c:28:40:91:13:49:
4b:06:2d:92:3b:c7:b9:e0:d8:71:28:4e:22:4a:33:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:97:84:AE:BD:AD:C7:9C:48:A4:5A:7A:C4:35:03:07:B3:04:6E:12
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QZeErr2tx5xIpFp6xDUDB7MEbhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.254.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e2:1c:9d:2c:a4:96:ee:2c:f8:4e:cf:23:26:ab:c9:2a:f3:
82:1f:f8:ba:2b:59:b8:f9:09:aa:a3:90:4f:2a:22:55:b4:4e:
52:21:a8:e5:29:d0:fe:d4:21:e9:16:85:cc:87:7c:77:c9:ca:
4e:e0:0f:3f:99:16:5e:22:48:54:b6:f0:77:cf:d3:60:f2:7a:
cb:25:35:85:b0:60:d3:b6:51:37:c7:97:93:83:47:3d:3f:45:
e6:ee:96:01:57:5f:61:78:ad:dd:28:29:6e:bd:d0:dd:86:c7:
6d:bd:b3:87:7d:b8:ac:c3:77:6d:74:23:38:51:64:a8:31:2e:
72:98:79:ee:2d:be:73:11:d1:c2:f0:65:7c:38:24:56:87:af:
49:81:ed:21:ae:13:b1:e4:7e:a1:82:b5:20:e6:77:cc:e7:6b:
04:ea:43:c2:c9:67:9f:6f:b1:65:9f:6d:00:f9:1e:7f:a9:07:
b3:07:b4:dd:34:4c:57:03:af:93:80:74:53:c8:88:ee:29:88:
14:4c:1d:8f:ae:c8:b4:3b:a2:48:13:3c:b9:3b:18:b7:88:16:
42:d7:4c:10:b6:35:08:46:48:e5:66:8d:42:c8:cf:28:75:bd:
64:30:55:02:41:4a:87:a2:49:4e:27:f5:c5:77:1f:5e:fc:90:
e0:38:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:19:04 2024 by rpki-client on console-fra.rpki-client.org