Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QDPp4wMj2RnwrSyFtcHSFXAS3ns.roa
File: QDPp4wMj2RnwrSyFtcHSFXAS3ns.roa (raw, json)
Hash identifier: XHCsFvBuue4lMpo75lJAjl6NXO6ojEK02rZUAYHfv+Y=
Subject key identifier: 40:33:E9:E3:03:23:D9:19:F0:AD:2C:85:B5:C1:D2:15:70:12:DE:7B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E5235D9157E957AE44BC900EDD8A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QDPp4wMj2RnwrSyFtcHSFXAS3ns.roa
Signing time: Tue 02 Jan 2024 12:33:12 +0000
ROA not before: Tue 02 Jan 2024 12:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31133
IP address blocks: 92.38.42.0/24 maxlen: 24
92.38.80.0/22 maxlen: 24
146.158.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e5:23:5d:91:57:e9:57:ae:44:bc:90:0e:dd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4033e9e30323d919f0ad2c85b5c1d2157012de7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b2:04:43:4b:50:f1:90:5f:1d:84:10:cd:88:
0c:40:a7:78:94:81:9f:03:00:df:ea:f2:5b:dd:b3:
46:bc:41:30:f2:14:cf:90:b1:58:26:66:18:df:4c:
46:8b:41:0d:e4:7e:a4:9c:f0:fd:e6:cb:0a:4e:4d:
ba:5b:2e:5a:3a:f7:42:a9:fc:02:14:44:cd:5a:a1:
c5:7b:7d:85:e4:b2:2d:56:1c:f1:32:c9:30:13:9d:
44:d9:89:4d:4b:18:81:99:59:e2:e0:55:23:69:3b:
12:15:c9:cf:91:b3:ae:04:9d:87:4a:25:3e:bd:88:
9f:ae:5b:eb:5b:ce:31:ab:26:1e:4e:b6:2e:eb:b3:
a2:3e:e9:1f:77:ab:56:ee:b2:7a:f4:e3:ae:d5:7c:
8c:57:4b:3f:ec:dc:83:84:74:74:8a:5f:34:08:46:
f0:84:02:1b:d1:9f:43:c0:00:7e:fc:a9:6d:2f:c2:
c4:b4:c0:1c:25:86:a1:6c:e4:9e:d5:07:cb:ac:5a:
ce:c9:ba:f4:b7:39:e4:75:fa:62:4f:d5:74:87:47:
92:86:42:c5:3d:10:df:36:e8:73:47:a7:68:d1:43:
04:9e:37:c6:85:c3:e7:cf:eb:de:03:d3:ee:dd:f7:
74:d4:3a:3a:64:ae:4b:09:a8:f8:42:e9:e7:32:0c:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:33:E9:E3:03:23:D9:19:F0:AD:2C:85:B5:C1:D2:15:70:12:DE:7B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QDPp4wMj2RnwrSyFtcHSFXAS3ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.42.0/24
92.38.80.0/22
146.158.88.0/22
Signature Algorithm: sha256WithRSAEncryption
56:1f:f0:3f:28:6f:1a:d2:ce:78:0e:9e:e7:e7:2e:7b:2b:37:
d5:4a:1e:6e:ff:27:a5:93:94:c7:b8:d6:71:58:54:fb:03:9f:
54:5e:1d:48:fb:e0:d9:9e:96:e8:6a:7e:a7:ab:a0:d9:f0:07:
dc:77:c1:f0:b9:19:54:46:99:37:2e:5c:58:de:93:b2:2f:60:
7d:98:35:33:97:6d:4c:d7:ab:34:56:2f:1f:59:d6:12:f0:f4:
a3:73:9b:72:65:42:34:ae:ca:a9:70:59:46:fe:f9:7f:f0:28:
5f:85:ed:df:cb:44:10:38:0f:2d:b1:29:ac:e2:98:63:9c:41:
2e:83:f2:32:2e:15:49:28:a6:45:96:5e:44:b9:26:02:e9:1a:
56:07:63:c3:2e:71:c8:26:d0:29:8f:55:5c:0a:55:6a:94:d3:
bd:41:a6:7d:95:22:2e:f0:4b:d8:38:85:68:0c:b8:d2:46:43:
18:a2:59:9e:b7:17:d4:77:93:7c:09:97:a8:71:cf:c2:a7:ee:
c6:ca:bd:1b:67:83:20:cb:61:da:15:9e:a3:b5:12:80:5a:ae:
f9:72:b1:3c:50:7e:7f:43:66:92:45:a4:1b:e6:be:03:8d:ab:
75:38:5c:0f:4a:ff:59:9c:b7:b5:bb:00:d1:19:0f:36:dd:0e:
37:37:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 17:00:19 2024 by rpki-client on console-ams.rpki-client.org