Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/kQPM49QgSdDxOD0FqWZR9uqZzvE.roa
File: kQPM49QgSdDxOD0FqWZR9uqZzvE.roa (raw, json)
Hash identifier: TFX2yn/9nXE2/wRCc8e2znDiNTJDxpdZ6D/QkOKOBhc=
Subject key identifier: 91:03:CC:E3:D4:20:49:D0:F1:38:3D:05:A9:66:51:F6:EA:99:CE:F1
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 018CC72713B062B2035D14C722775E5BB956
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/kQPM49QgSdDxOD0FqWZR9uqZzvE.roa
Signing time: Mon 01 Jan 2024 22:31:16 +0000
ROA not before: Mon 01 Jan 2024 22:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43090
IP address blocks: 45.129.192.0/24 maxlen: 24
2a0e:4dc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:13:b0:62:b2:03:5d:14:c7:22:77:5e:5b:b9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Jan 1 22:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9103cce3d42049d0f1383d05a96651f6ea99cef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:1d:ad:05:5b:e8:ab:3a:94:06:4d:7c:06:
58:8d:d9:23:bc:be:ff:8a:45:38:85:b6:58:03:e5:
07:2c:e8:f6:9a:f6:47:a7:42:ef:62:4c:27:3c:5b:
a4:42:98:25:b4:61:70:11:e6:b9:b4:c8:3c:d2:42:
f1:f8:0d:d7:67:fe:ea:65:9d:a9:17:ec:26:ab:d1:
ff:fa:40:10:fb:55:de:b4:66:9e:f6:b4:98:b1:77:
9b:7d:e7:c8:78:40:b3:07:dd:61:12:d4:f1:ce:c7:
54:73:bf:1e:5c:23:37:37:f1:98:ba:ce:7f:a4:d7:
90:8e:5f:7a:ab:8c:ec:84:b3:45:d0:3b:69:bf:9c:
b8:10:09:2d:a8:f4:0d:71:6a:7b:5d:0b:3e:6f:fb:
ca:11:59:0a:24:28:cc:81:09:9d:ff:9a:ec:1b:ba:
94:99:78:ca:90:50:bb:be:bf:9d:69:7f:9c:5a:3d:
61:92:6c:66:4a:2a:1d:56:23:47:75:c6:97:ca:d6:
20:cf:cc:ce:dc:8a:d8:16:ff:7f:1a:56:e6:1b:96:
6c:eb:be:e6:e6:80:61:60:16:5c:83:f5:a9:5f:19:
99:12:3c:17:75:21:30:72:1f:36:20:0d:8a:e9:c1:
33:59:6c:f7:aa:41:42:be:0f:24:db:cb:2a:55:49:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:03:CC:E3:D4:20:49:D0:F1:38:3D:05:A9:66:51:F6:EA:99:CE:F1
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/kQPM49QgSdDxOD0FqWZR9uqZzvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.192.0/24
IPv6:
2a0e:4dc0::/29
Signature Algorithm: sha256WithRSAEncryption
b9:77:c1:44:fc:7b:8d:5a:4e:27:db:55:c9:fc:22:37:be:a4:
1f:95:05:22:f5:f8:3c:21:4a:61:9e:18:1a:93:c9:3f:69:fc:
85:5f:df:58:c9:40:65:6d:a3:9e:5b:b4:5a:1b:4d:bf:ca:21:
73:89:50:bf:47:79:53:63:54:c2:3f:6a:1e:ce:6a:2d:e2:13:
94:9d:3e:f1:02:10:74:c4:91:df:60:67:71:94:35:1b:9b:c6:
b5:ff:c5:2c:f1:31:86:02:37:c4:93:a9:75:0d:a9:a9:0f:bf:
70:2b:d8:83:4e:7a:6f:bd:ae:34:42:fb:d8:cd:bc:6c:65:9b:
48:5e:78:d8:dd:d5:a7:90:f0:42:74:9a:5e:ca:8c:af:92:b1:
96:56:61:c5:e7:4c:05:85:e0:98:55:02:97:fe:77:60:5b:8b:
1b:23:8a:54:b5:97:ea:3f:5b:54:08:b4:be:9b:f0:23:1d:a3:
e5:7d:1c:a9:2c:5d:50:0c:6d:6b:a2:1c:ef:85:ac:b9:35:14:
46:55:f4:21:7c:f8:78:84:3d:83:00:a7:54:f4:0b:03:73:4e:
d6:60:70:de:66:49:4d:65:a0:20:9f:67:2f:f5:18:a6:87:11:
5a:4d:9e:5a:19:f3:5f:5a:ff:51:2b:32:8f:fc:11:36:e1:ce:
bf:13:b6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:45:19 2024 by rpki-client on console-fra.rpki-client.org