Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/QX6CgQD4upDkzhRtoj_7HRllXIU.roa
File: QX6CgQD4upDkzhRtoj_7HRllXIU.roa (raw, json)
Hash identifier: CqW0Jj6Qx/VSe304K6tqyrEo9RpA43Rh1iQUBT4I0dE=
Subject key identifier: 41:7E:82:81:00:F8:BA:90:E4:CE:14:6D:A2:3F:FB:1D:19:65:5C:85
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 018CF458F89A12CA4F996803782BE5754826
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/QX6CgQD4upDkzhRtoj_7HRllXIU.roa
Signing time: Wed 10 Jan 2024 17:08:40 +0000
ROA not before: Wed 10 Jan 2024 17:08:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203416
IP address blocks: 185.227.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:58:f8:9a:12:ca:4f:99:68:03:78:2b:e5:75:48:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Jan 10 17:08:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=417e828100f8ba90e4ce146da23ffb1d19655c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:f4:70:09:a5:05:09:b2:b7:48:bb:a0:2a:
47:75:2f:d0:c4:3e:65:6d:9c:05:ec:6b:62:2f:6f:
0a:9c:c4:0f:fb:13:fc:7f:a1:c6:2c:93:32:d6:20:
4b:fb:64:63:6b:62:ff:a0:fb:06:39:8b:ea:54:c9:
76:c0:f5:1e:ef:5e:b0:f6:4d:57:24:48:07:75:df:
9c:ff:50:85:c7:b3:88:81:2e:14:12:95:80:63:88:
09:4c:5d:05:14:d9:34:8a:29:58:38:b9:2e:36:71:
1c:f0:f9:e0:7e:95:91:73:23:7c:cd:53:9d:75:ec:
0a:ea:ac:39:e7:64:8f:30:ae:2a:d2:40:7a:7a:93:
6f:d8:ce:c3:84:18:1a:e1:90:49:7b:6b:3e:ce:51:
87:29:79:2f:0b:10:0b:4e:fb:10:3c:d6:3a:a2:d1:
67:b5:7c:69:56:7e:19:5d:57:d5:a1:60:fb:89:af:
41:f9:3f:5d:e4:b3:f5:49:0b:66:a5:67:9e:34:c4:
bb:74:70:d7:85:88:48:11:87:3e:b1:49:0d:f8:1e:
5f:bc:e9:e5:74:8f:79:4d:8d:a6:85:66:14:5d:6a:
8b:4b:1e:03:89:a5:b0:6c:83:64:e8:18:91:06:eb:
b0:6c:eb:1e:ca:90:f4:f4:33:e2:8a:ce:7b:04:73:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7E:82:81:00:F8:BA:90:E4:CE:14:6D:A2:3F:FB:1D:19:65:5C:85
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/QX6CgQD4upDkzhRtoj_7HRllXIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ce:b3:ab:d8:46:f5:5c:8f:ff:67:58:03:87:b4:b2:47:65:
b4:16:30:61:29:a5:31:83:97:75:4a:41:96:00:ea:c9:8c:9e:
b4:8f:7d:90:5d:33:52:0e:c4:80:81:92:e2:00:10:ef:a5:6c:
09:15:c6:40:26:69:94:c1:c0:37:86:5e:06:f8:91:de:b3:4a:
0a:47:fb:ba:75:4f:cd:37:93:d9:01:4d:33:4b:9d:5e:d3:e9:
8e:66:e0:bd:05:a7:dd:83:cb:d8:7b:14:4f:84:49:f1:b7:16:
dc:91:99:14:3b:94:08:be:a4:ee:ad:12:d1:79:19:d4:01:d8:
34:a3:de:cd:86:91:94:14:79:19:f5:5e:12:6a:0e:df:d7:39:
56:b6:7d:68:c5:86:ae:f8:8c:96:ed:d3:d1:af:ff:dc:06:7c:
47:1d:b8:b7:4d:c7:bc:b3:ef:98:1d:82:3a:53:ff:77:e5:90:
a1:e6:67:57:45:60:0f:52:31:b3:e1:29:bb:ce:4e:24:6d:83:
b4:c8:39:c0:6b:ad:64:d7:9e:f7:fc:cf:26:25:65:5b:e0:8b:
ef:89:e0:29:95:92:08:96:fd:59:01:34:1f:28:20:c4:40:f2:
b7:fe:c0:11:27:d8:79:9b:7f:c2:05:ba:7d:97:5b:ad:d3:01:
13:18:03:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:36:11 2024 by rpki-client on console-ams.rpki-client.org