Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/qk_zIVMThxvXKkadhPsMB66xbUM.roa
File: qk_zIVMThxvXKkadhPsMB66xbUM.roa (raw, json)
Hash identifier: 0WBd824Bg2QA59lcnsFwvgVaJ7pksHx/SVll2eBAOXM=
Subject key identifier: AA:4F:F3:21:53:13:87:1B:D7:2A:46:9D:84:FB:0C:07:AE:B1:6D:43
Certificate issuer: /CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d
Certificate serial: 018CC9BCEA4D6E65F182B1DAEE5BB28B9A0C
Authority key identifier: 96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/qk_zIVMThxvXKkadhPsMB66xbUM.roa
Signing time: Tue 02 Jan 2024 10:34:10 +0000
ROA not before: Tue 02 Jan 2024 10:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34895
IP address blocks: 83.138.64.0/18 maxlen: 18
185.171.136.0/22 maxlen: 22
2a01:4da0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ea:4d:6e:65:f1:82:b1:da:ee:5b:b2:8b:9a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d
Validity
Not Before: Jan 2 10:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa4ff3215313871bd72a469d84fb0c07aeb16d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1a:91:b8:74:a4:4a:4b:39:a2:c8:cd:f1:63:
40:19:dd:50:6e:f3:49:9f:cf:0e:8b:d9:4e:dd:52:
4e:19:99:27:ea:ca:45:5a:84:53:e0:89:9b:52:3f:
32:af:3b:9f:88:2a:97:f8:a5:b0:7e:f8:fe:07:ad:
03:22:96:09:20:d9:bb:a1:43:0c:93:b5:35:d2:96:
28:12:2c:9f:fb:a2:e2:31:d9:57:95:d0:5b:ca:da:
f9:8f:77:30:16:60:3a:7c:c4:96:b5:cd:8c:0e:7b:
cc:93:a5:9b:1a:87:e3:c4:87:ca:ee:3e:2d:35:78:
5a:37:12:c1:3a:02:aa:1f:89:6f:37:30:a4:94:09:
8d:05:ce:11:14:24:44:ee:71:65:65:fe:4f:90:13:
15:f0:2b:ef:42:6e:96:cb:c1:25:e2:10:6a:22:f9:
02:05:3d:26:8b:d6:7f:d4:9f:df:1d:be:3c:a4:44:
35:2f:4f:2b:7d:db:de:37:76:67:3a:b0:46:52:5f:
af:d8:4b:f1:c0:b4:c5:8f:59:4e:af:ab:ab:62:75:
97:7b:75:93:e4:a9:d0:44:ce:11:a5:78:ed:18:24:
e0:ac:41:db:a7:f7:d5:64:3b:49:ce:c6:ac:1e:d8:
df:61:9b:49:34:fc:1c:8d:8a:5b:de:b0:ce:7c:4f:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4F:F3:21:53:13:87:1B:D7:2A:46:9D:84:FB:0C:07:AE:B1:6D:43
X509v3 Authority Key Identifier:
keyid:96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/qk_zIVMThxvXKkadhPsMB66xbUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.64.0/18
185.171.136.0/22
IPv6:
2a01:4da0::/48
Signature Algorithm: sha256WithRSAEncryption
71:ef:e2:77:40:84:96:95:4b:65:ea:c0:75:2c:96:f8:a6:1d:
fa:1f:08:3f:c0:fc:41:58:ef:bd:3f:94:19:6d:b4:d9:48:a1:
28:f2:8f:7c:33:b0:45:dc:a9:df:a2:cc:89:7d:63:b0:6f:f3:
3b:8c:c6:92:b1:2f:f1:ce:0b:f5:82:11:89:56:be:c4:09:32:
ae:69:10:94:22:9c:ec:93:45:c6:0d:d3:92:db:05:2b:f7:97:
fd:4e:61:75:eb:a6:b0:4e:db:b2:7d:a9:d3:5f:ce:a1:eb:cf:
93:c0:ab:f6:54:66:99:78:43:72:66:6b:bc:88:80:4b:4b:5a:
3d:47:b2:d9:c4:7b:48:16:c8:3c:43:ca:da:57:c4:a7:67:43:
61:4e:c6:cc:d6:21:f2:e8:c9:df:09:a8:08:a6:1b:fc:7a:32:
8d:c0:84:14:43:d2:99:c4:90:af:04:84:3f:0d:fc:d1:54:33:
35:66:c1:60:06:b6:46:be:dd:22:cb:11:ca:73:a4:0a:8f:a2:
0f:40:d5:d5:28:d9:67:ee:16:ed:e5:e1:de:d0:7c:ea:05:53:
f0:25:d5:be:89:62:8b:cd:de:5b:e0:bb:9f:b5:c3:be:db:9d:
f4:73:9c:3c:74:fb:d4:43:f5:93:45:b7:95:3b:77:16:ef:b0:
c4:29:c5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:55:43 2024 by rpki-client on console-fra.rpki-client.org