Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/QHzVBVfJKYv2y6KnSnSxBJygqsE.roa
File: QHzVBVfJKYv2y6KnSnSxBJygqsE.roa (raw, json)
Hash identifier: aD6l2QtoKD8c66kZ8QUCKRsCxTvXtwsAbfyv8IqncPI=
Subject key identifier: 40:7C:D5:05:57:C9:29:8B:F6:CB:A2:A7:4A:74:B1:04:9C:A0:AA:C1
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01931051DFCCD2C7043FF43B4479CE204DC4
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/QHzVBVfJKYv2y6KnSnSxBJygqsE.roa
Signing time: Sat 09 Nov 2024 09:47:01 +0000
ROA not before: Sat 09 Nov 2024 09:47:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 109.122.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:51:df:cc:d2:c7:04:3f:f4:3b:44:79:ce:20:4d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Nov 9 09:47:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=407cd50557c9298bf6cba2a74a74b1049ca0aac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:82:8b:04:d6:05:e6:d0:ae:48:df:bd:30:
be:a8:b2:0d:ec:1f:42:c2:c8:d1:21:9d:4a:0b:98:
64:a5:c5:06:63:b5:47:d5:5e:db:e6:58:28:ed:ff:
dc:55:9a:7a:e1:51:6e:b8:e9:bf:05:5e:c2:35:e0:
c1:ef:ba:ff:ee:e5:88:53:3d:9f:1f:76:ae:a7:6b:
8b:d3:4c:fe:24:4a:5e:36:84:5f:15:13:93:b6:00:
38:c2:29:f2:b9:d3:51:83:9e:49:7b:47:f3:7d:07:
9f:0d:3b:bb:e0:d6:12:fb:c4:16:75:79:13:34:48:
ee:27:6d:f1:47:2b:a3:98:f9:82:13:c4:69:91:84:
19:64:56:f5:fa:d0:0e:60:29:09:8e:03:48:a9:20:
c5:8c:3c:c8:98:2a:6f:46:ed:eb:e5:ba:9b:4f:64:
c7:65:c2:c8:42:58:da:34:8a:31:77:02:46:0a:4c:
de:02:28:2a:a1:35:9a:6a:8e:a4:8f:07:c6:4b:ea:
15:17:e5:f8:93:91:78:db:c2:cd:e5:55:0b:1b:e8:
70:a6:b2:d1:ea:ef:2d:f9:55:1a:b7:f1:42:aa:94:
58:8b:e2:dd:3a:b1:c1:f4:b5:0f:4f:f0:68:57:51:
fd:18:3e:0e:d6:fc:67:14:28:7c:09:61:d0:3c:4a:
a5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7C:D5:05:57:C9:29:8B:F6:CB:A2:A7:4A:74:B1:04:9C:A0:AA:C1
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/QHzVBVfJKYv2y6KnSnSxBJygqsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:9c:43:c0:ea:4e:bd:f4:ca:f3:33:42:0d:54:56:d5:88:5c:
6d:a0:61:e4:4a:6e:5d:62:c6:e4:5e:f8:ad:60:b2:df:99:cf:
3e:cb:15:4b:cc:b5:27:3a:c4:02:e4:32:0a:8a:6f:45:a2:15:
53:ed:58:e4:d1:4a:c5:be:2c:19:ab:ca:70:0d:45:9a:ea:c6:
83:2d:7f:ae:68:8d:0f:c0:84:07:f9:e2:fd:ef:6e:fd:6b:f5:
4b:05:47:83:77:54:ba:44:de:c8:e2:97:7e:e5:16:6a:54:c4:
f8:bf:6b:81:32:c2:96:91:25:f9:26:1f:20:1f:b0:ec:b7:d6:
48:75:b6:c0:b2:41:ba:8a:f6:6f:4b:de:c7:a0:5d:49:75:2f:
df:74:5b:ef:1b:40:21:10:4e:6d:95:82:fd:b4:ad:23:19:04:
6d:46:4e:38:54:62:87:f5:79:aa:6f:1e:99:fb:d2:32:3a:99:
2a:6a:fd:fe:5d:f2:80:d7:39:30:69:0e:a9:05:5f:c3:84:e5:
c6:36:15:68:29:e8:d4:34:6c:d1:1f:27:65:3a:26:4b:1a:4b:
a2:f1:4e:7a:bb:fe:e6:d9:00:fe:43:06:70:d7:ad:3b:8d:8f:
02:b2:b3:f2:e2:df:c8:25:dc:6c:fd:d3:88:58:e9:fb:02:e8:
4f:e3:ac:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:08 2024 by rpki-client on console-ams.rpki-client.org