Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/QNezt6ql0MkvZS6apeOCQm5vnfI.roa
File: QNezt6ql0MkvZS6apeOCQm5vnfI.roa (raw, json)
Hash identifier: Aliy3ZabUKFjh4MDhQna6gQEe3t+yIZsY3qaOL937Tw=
Subject key identifier: 40:D7:B3:B7:AA:A5:D0:C9:2F:65:2E:9A:A5:E3:82:42:6E:6F:9D:F2
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 018CC492D44BBF51DA8D03727B9BE923539E
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/QNezt6ql0MkvZS6apeOCQm5vnfI.roa
Signing time: Mon 01 Jan 2024 10:30:06 +0000
ROA not before: Mon 01 Jan 2024 10:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1836
IP address blocks: 194.150.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:d4:4b:bf:51:da:8d:03:72:7b:9b:e9:23:53:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Jan 1 10:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40d7b3b7aaa5d0c92f652e9aa5e382426e6f9df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:46:4c:af:0b:f7:c8:b8:ea:d8:57:c6:90:
cb:53:2b:bb:46:83:13:af:54:f9:a8:cf:4b:cd:5e:
6e:86:60:f0:98:5c:ba:1e:e8:26:0d:55:36:a2:37:
59:39:3e:d0:b1:ba:7d:68:a2:d4:5c:27:90:18:bc:
a2:c5:ce:c3:c9:4d:d6:5c:49:cd:f7:ae:f9:63:41:
30:4f:26:0f:24:93:5c:c2:13:8b:38:7f:c0:e4:60:
dd:fd:6d:02:01:8e:e6:57:e2:ea:1f:87:bd:a4:c2:
c8:cf:9f:6b:82:f0:80:20:55:fd:73:88:e9:54:98:
47:27:93:da:62:e2:b0:4f:ea:2f:43:c1:a9:8c:07:
93:72:6d:86:d2:f4:ca:3f:ca:4a:d5:c3:83:57:c6:
42:a4:f9:a9:4e:30:88:ca:4f:2a:ad:e4:55:82:27:
0d:42:2c:54:27:7f:0a:7c:62:21:b8:f4:3e:e9:a4:
44:6f:2d:3f:b2:bd:4a:c9:1d:4b:aa:c4:e8:d6:be:
57:38:52:6e:1a:c7:37:d8:0c:30:64:92:5d:e5:d2:
fb:98:6f:a1:ea:c7:2e:8a:2c:8b:5f:eb:7f:6a:79:
28:5d:1d:56:9d:ac:97:20:13:5e:c8:3f:c5:1f:98:
73:9f:2a:30:b3:84:8e:ef:75:dd:3c:be:10:fe:fb:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D7:B3:B7:AA:A5:D0:C9:2F:65:2E:9A:A5:E3:82:42:6E:6F:9D:F2
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/QNezt6ql0MkvZS6apeOCQm5vnfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.160.0/23
Signature Algorithm: sha256WithRSAEncryption
02:88:c6:24:af:b4:51:19:e4:38:11:45:49:51:c5:18:4c:db:
1a:1e:83:fc:76:d4:48:91:96:d0:0f:71:e8:7d:9e:92:af:03:
95:cf:c9:85:bc:58:92:cc:33:47:49:1c:c2:21:60:16:6f:86:
4f:bd:fc:76:51:a4:9d:88:32:3b:d0:9a:06:72:4d:12:04:25:
3d:3b:f5:ac:8b:59:58:fe:cf:17:9c:b4:67:ac:31:b5:1e:a6:
0d:80:86:39:14:c5:0c:24:96:52:f6:16:7b:21:2e:26:22:09:
4f:8a:ae:2b:67:5c:7e:3c:d3:94:ab:bf:d8:11:48:1c:40:2a:
2c:83:88:cc:51:a5:36:7e:27:70:41:49:2d:7f:2d:88:e1:9a:
b8:a2:0b:97:e4:a7:05:02:32:b8:ae:e8:ca:02:44:73:76:27:
40:bf:1f:41:9c:68:c9:1d:17:97:88:f8:49:51:78:38:02:1e:
be:e9:ef:ad:8b:79:01:25:26:68:27:47:be:42:a5:76:84:c1:
03:b7:a1:56:d0:6d:3a:37:16:50:dd:af:a7:83:43:b7:c9:71:
2f:4e:ec:55:5e:a7:5e:1e:44:f2:5e:4d:59:55:91:2e:b4:e6:
ab:74:0d:71:8b:9a:e6:de:e9:39:b1:98:78:fb:5c:bc:94:ef:
30:ce:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:23:38 2024 by rpki-client on console-ams.rpki-client.org