Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_-QMYlDOnAuGbZ2gwXT5a0uWcqM.roa
File: _-QMYlDOnAuGbZ2gwXT5a0uWcqM.roa (raw, json)
Hash identifier: ESlu5J14effQoSjVknDL1QZQPEFkGkQ/BtfY2NOtbf8=
Subject key identifier: FF:E4:0C:62:50:CE:9C:0B:86:6D:9D:A0:C1:74:F9:6B:4B:96:72:A3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29F41E21437D6F9F9BB2D333019F82
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_-QMYlDOnAuGbZ2gwXT5a0uWcqM.roa
Signing time: Tue 02 Jan 2024 12:33:16 +0000
ROA not before: Tue 02 Jan 2024 12:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43680
IP address blocks: 185.67.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f4:1e:21:43:7d:6f:9f:9b:b2:d3:33:01:9f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffe40c6250ce9c0b866d9da0c174f96b4b9672a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:1b:e0:46:cc:0f:cb:50:34:42:78:8e:c0:
87:16:24:d2:f7:6a:93:ba:f0:b5:09:45:25:b0:e1:
aa:a0:78:ce:8b:7f:64:c7:ae:ab:7e:23:c0:44:7c:
61:42:eb:4e:b9:7e:b1:74:b1:5d:09:e0:12:c0:0c:
84:22:c1:3e:85:39:51:2e:98:0f:c8:78:5e:24:38:
f6:5e:67:fc:cf:bc:df:2c:50:c4:1a:48:c0:35:b8:
d0:b6:51:21:7c:ca:b5:b5:61:d3:c6:3e:eb:28:fc:
d3:19:29:e0:79:d1:bb:a0:74:7a:d6:2f:2c:51:1c:
89:72:bd:e2:79:29:ad:13:d2:b9:a9:c8:5c:a8:54:
33:c0:25:72:e1:9c:ba:af:12:35:43:d2:7a:06:73:
d3:a2:57:ea:c8:17:e0:dc:ac:76:58:c3:df:7e:ec:
10:7a:01:d3:ca:08:3b:e2:13:90:e3:57:2f:0b:c3:
85:65:a6:e9:a8:fe:58:ea:3d:65:2b:5c:d5:b6:0a:
57:c4:82:0f:69:a8:32:74:f6:e1:8e:69:5a:34:d9:
5d:d5:b1:17:8a:89:ae:b4:a2:8f:96:e8:27:af:fb:
f2:98:c8:e9:cb:ab:97:11:10:6d:4b:59:ad:f8:50:
b4:b3:4f:8c:05:29:d1:6f:49:dc:5c:5b:ed:62:8d:
e7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E4:0C:62:50:CE:9C:0B:86:6D:9D:A0:C1:74:F9:6B:4B:96:72:A3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_-QMYlDOnAuGbZ2gwXT5a0uWcqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.254.0/23
Signature Algorithm: sha256WithRSAEncryption
58:e7:af:4b:d7:4d:fe:44:c0:54:9a:96:09:7c:81:62:81:a9:
8b:e6:e3:e6:2f:7c:16:0f:a4:00:27:12:62:ae:e2:d4:b5:ff:
40:5e:fe:4b:13:74:2e:13:e3:a7:b2:6b:7c:2b:e1:51:a2:b5:
23:b5:b0:4b:87:97:29:63:32:49:44:77:1d:fe:55:7a:ae:df:
bf:7d:fd:14:4b:f1:60:b4:3f:2c:44:c0:14:ba:36:43:58:57:
d3:7e:ac:ad:28:90:4e:bd:b9:b4:c5:9a:52:97:e1:7c:b7:76:
d2:72:52:bf:48:2b:fc:2a:3a:2e:98:6d:84:50:49:f6:c9:d8:
af:5a:c6:34:55:3b:e4:0e:d1:53:99:1a:33:bf:e1:dd:22:58:
cf:3a:dd:08:dc:32:e4:0a:e4:cd:ab:70:17:08:63:7c:fa:6f:
46:2a:63:6a:5c:da:f0:4b:8a:e7:67:e6:cf:e9:4c:8c:22:a0:
f6:aa:87:5f:f5:d7:59:ef:2d:76:f0:7d:a0:12:e5:bf:e3:eb:
17:62:4a:e3:37:65:91:c6:3d:ae:fd:08:46:9d:e2:7b:95:a7:
96:28:3c:95:e0:26:fa:ce:8b:e1:1c:8e:e6:17:7e:7d:89:0d:
f2:d1:85:10:7e:10:f2:ff:c8:0d:74:a8:68:e8:5d:57:88:97:
93:ab:69:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:12 2024 by rpki-client on console-fra.rpki-client.org