Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/Qt3-8jnXnP6YoU2M4DM8s6DDBKc.roa
File: Qt3-8jnXnP6YoU2M4DM8s6DDBKc.roa (raw, json)
Hash identifier: xiHffGU+yhPtdLWJgUlBeremhv3kn/JKFBOHXS8Zw04=
Subject key identifier: 42:DD:FE:F2:39:D7:9C:FE:98:A1:4D:8C:E0:33:3C:B3:A0:C3:04:A7
Certificate issuer: /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial: 018CCA29BC590C5641C87054346718F9C8FF
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/Qt3-8jnXnP6YoU2M4DM8s6DDBKc.roa
Signing time: Tue 02 Jan 2024 12:33:01 +0000
ROA not before: Tue 02 Jan 2024 12:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205147
IP address blocks: 185.8.97.0/24 maxlen: 24
185.8.98.0/24 maxlen: 24
185.8.96.0/22 maxlen: 24
185.8.96.0/24 maxlen: 24
185.8.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:bc:59:0c:56:41:c8:70:54:34:67:18:f9:c8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Validity
Not Before: Jan 2 12:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42ddfef239d79cfe98a14d8ce0333cb3a0c304a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:d5:b0:18:79:2f:2e:1c:55:10:da:e1:76:
61:2b:9e:28:3f:20:6d:cd:de:60:ef:11:9d:96:e1:
90:8a:dc:f5:60:4d:ee:58:69:49:b3:64:0e:c5:e3:
17:ad:c7:1f:09:e7:b4:cb:20:64:18:7a:05:ef:85:
1c:23:e9:c2:41:3b:ba:8b:d8:38:9a:d9:28:a5:c2:
b3:af:a7:0c:b6:63:cf:bb:1f:74:5f:a3:8e:d5:9a:
b6:05:1c:07:7d:a2:d7:2a:9d:b5:d4:19:81:f6:be:
b8:14:89:63:86:ad:1f:30:93:90:6d:39:15:da:cf:
95:22:57:47:7d:09:c3:d8:4e:72:23:79:c7:e7:1c:
3e:cb:58:18:ae:c0:c5:32:26:03:c8:13:b4:4a:b1:
c4:8b:68:52:3c:b5:cc:2c:03:f0:0b:62:fa:08:d8:
20:bc:0c:f8:f6:8f:ea:88:11:55:5b:3e:29:c3:80:
27:c5:d3:1b:90:13:5c:b6:5f:88:c6:99:2d:2d:a1:
84:41:a1:d8:48:1b:91:ef:45:a9:8f:d4:da:c6:42:
fc:de:a7:3a:ed:0a:64:2d:a2:58:db:4c:fc:e7:a9:
cd:0b:91:0e:af:88:c0:c7:d1:8a:74:be:ec:16:00:
4a:40:3d:65:5d:b7:6e:1f:31:df:8d:e4:83:dc:cb:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DD:FE:F2:39:D7:9C:FE:98:A1:4D:8C:E0:33:3C:B3:A0:C3:04:A7
X509v3 Authority Key Identifier:
keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/Qt3-8jnXnP6YoU2M4DM8s6DDBKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.96.0/22
Signature Algorithm: sha256WithRSAEncryption
87:fb:a7:0e:89:92:41:99:a0:ca:08:30:fe:28:48:a2:f1:5c:
a7:af:b0:48:67:fc:74:36:d6:58:41:60:63:46:89:2f:57:2a:
d0:80:17:24:ed:a6:74:3c:b6:df:32:a1:9e:13:09:a9:b0:b3:
87:cf:d9:b9:9b:7e:27:a0:16:46:70:e8:ac:f6:41:8e:52:b3:
ef:e8:ac:f0:aa:07:28:c4:7e:c0:83:9a:42:36:18:f8:1b:33:
91:57:1c:f2:aa:35:84:bc:f3:b1:ff:af:a9:29:35:48:56:79:
8f:21:f5:c2:e4:88:7d:0f:f4:2c:15:45:ae:fc:e5:dc:bb:73:
b5:41:21:6a:26:4d:d0:d2:ba:8d:bc:f6:9f:0f:37:38:25:d0:
c5:83:62:d3:91:f1:b3:8b:24:a5:1b:5c:fb:df:a9:d4:d1:e7:
5a:2f:89:49:c3:fa:e9:99:aa:42:cb:c3:ff:e8:bb:c6:07:1b:
76:d4:6f:19:79:d9:2d:38:90:48:ab:96:c7:c5:fa:89:57:af:
0a:d7:29:0e:e6:9a:b2:8b:6a:6c:6e:70:86:d3:20:92:36:27:
14:e6:cd:3a:94:a5:95:60:a1:fa:f9:8e:f2:41:1d:6f:d5:d5:
3c:34:27:ec:7c:e6:30:f1:a9:1d:c1:d2:2d:a0:11:bd:3b:aa:
10:7a:77:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:51:47 2024 by rpki-client on console-fra.rpki-client.org