Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/qE4YbS7Vfrxxprd-2C0OwoH4NTU.roa
File: qE4YbS7Vfrxxprd-2C0OwoH4NTU.roa (raw, json)
Hash identifier: 4a6uM/gIYovlHozaW1WQf/fQTXlT/ZQoY9FEkPT1bVY=
Subject key identifier: A8:4E:18:6D:2E:D5:7E:BC:71:A6:B7:7E:D8:2D:0E:C2:81:F8:35:35
Certificate issuer: /CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Certificate serial: 018E3DA6CBA6A9317E19D6B7F437500F5A8F
Authority key identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/qE4YbS7Vfrxxprd-2C0OwoH4NTU.roa
Signing time: Thu 14 Mar 2024 15:48:44 +0000
ROA not before: Thu 14 Mar 2024 15:48:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 194.174.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:a6:cb:a6:a9:31:7e:19:d6:b7:f4:37:50:0f:5a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Validity
Not Before: Mar 14 15:48:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a84e186d2ed57ebc71a6b77ed82d0ec281f83535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:9a:cc:42:c6:eb:a4:4c:ad:cd:fe:01:ba:
bf:80:37:93:3d:84:0f:7f:5d:d7:27:b4:cf:96:1b:
0e:2e:9e:f4:59:d8:1d:ec:85:c0:85:1d:47:2b:71:
03:34:2f:66:b3:bc:22:44:ba:20:c7:d7:d2:32:4b:
65:b7:10:3e:fe:a2:97:23:c3:2d:10:be:a5:f1:ce:
70:e0:f6:19:06:c0:ff:36:33:c7:ef:ba:22:97:a5:
9f:d5:cf:a7:36:c7:97:3f:47:da:13:75:47:40:fb:
1b:7c:d9:95:6f:3a:ea:38:08:0e:4f:4c:83:b6:ae:
54:5a:06:0f:27:bd:76:d4:be:ab:8f:bf:5b:5c:b3:
e3:8f:08:f0:56:62:ec:89:41:04:22:5f:37:37:b2:
ba:ee:06:75:4c:47:37:4a:04:b1:46:49:8b:6f:2e:
e4:2e:66:77:49:99:0e:67:f7:e1:5c:2b:be:ad:9e:
9e:fd:60:dd:58:20:81:33:ab:b0:0e:39:52:c7:d3:
4a:6a:70:d5:af:90:ed:60:f1:fe:71:eb:a6:2e:03:
b1:fe:3c:77:ec:1f:7f:48:32:87:1a:7b:79:50:41:
7e:5c:3b:2e:b7:98:33:5f:27:fa:24:c4:ce:2d:3a:
60:3e:62:03:4f:a6:88:d0:3b:e5:4f:1b:4f:4c:89:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:18:6D:2E:D5:7E:BC:71:A6:B7:7E:D8:2D:0E:C2:81:F8:35:35
X509v3 Authority Key Identifier:
keyid:2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/qE4YbS7Vfrxxprd-2C0OwoH4NTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.174.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:23:c5:b8:2e:0a:cc:80:e4:29:9f:79:6c:8e:67:d0:9a:8c:
20:a3:c3:6e:ad:0e:17:ef:e6:05:93:18:24:e7:c3:87:41:95:
d8:ef:59:ab:66:8a:1a:64:da:c8:33:cc:c0:fe:ae:25:31:33:
6f:0a:c4:da:05:db:f4:15:c1:b4:f0:9c:f6:bf:3d:70:75:a8:
88:d4:3c:7f:14:97:85:7b:e3:92:3e:c6:70:d1:54:4b:2e:c2:
d2:6a:3d:f7:a6:f9:da:a9:4e:18:1e:08:a6:01:bb:e4:de:d5:
8a:9b:f4:0b:44:df:99:87:4d:ce:ca:49:01:a7:cc:2d:32:be:
e1:a5:2f:be:b6:0c:8f:5c:18:15:92:56:08:0d:01:4c:38:0d:
3a:3b:7f:da:2c:ac:92:5a:13:1f:8b:8e:57:09:48:f5:95:88:
e6:e0:0a:e9:45:f9:9e:a7:16:4b:19:2d:70:1a:8a:70:5c:0a:
da:67:b5:f5:ce:e2:36:08:ec:48:58:1f:02:7f:6a:a7:e4:b6:
ca:d6:2c:d8:17:28:2a:7d:5c:12:96:fe:76:a2:ab:40:a8:ea:
73:f3:ee:b9:17:d7:1c:65:da:64:f4:9f:06:a7:cf:0c:02:d5:
08:fa:69:b6:65:ba:42:54:97:69:d8:54:19:b7:2b:c9:ee:a1:
cb:ea:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:14:28 2024 by rpki-client on console-fra.rpki-client.org