Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/IQB1HRt5HQW0Qx64TDyoZUjnz3w.roa
File: IQB1HRt5HQW0Qx64TDyoZUjnz3w.roa (raw, json)
Hash identifier: kquizzJVg67j/qae4Yjb1Nqt5ttlnmOqResBtPXurBk=
Subject key identifier: 21:00:75:1D:1B:79:1D:05:B4:43:1E:B8:4C:3C:A8:65:48:E7:CF:7C
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 0191756CB1CC6785968D4DD4B2D22F45217E
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/IQB1HRt5HQW0Qx64TDyoZUjnz3w.roa
Signing time: Wed 21 Aug 2024 14:52:23 +0000
ROA not before: Wed 21 Aug 2024 14:52:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 194.4.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:75:6c:b1:cc:67:85:96:8d:4d:d4:b2:d2:2f:45:21:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Aug 21 14:52:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2100751d1b791d05b4431eb84c3ca86548e7cf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:12:12:51:a0:6c:e3:01:73:30:25:ff:a0:
4f:02:b9:93:c7:aa:05:7c:04:0a:5b:5c:0e:ae:00:
df:d3:59:99:dc:cb:64:52:15:ed:b7:5c:3e:a4:04:
d8:77:b5:42:17:b8:11:6a:b6:12:cd:86:ca:7d:77:
ac:1d:9b:43:62:57:b4:94:83:a7:a9:14:39:2b:c6:
9a:c5:52:95:2e:08:dc:2f:5f:38:93:88:af:a3:c7:
5d:e3:46:cd:08:aa:c9:75:60:37:8e:ee:fd:78:25:
52:90:9c:c2:1e:5b:25:19:8c:bc:95:87:b8:54:3d:
fc:c8:9a:2a:49:42:41:e5:c0:93:57:55:c4:3f:15:
81:cc:6d:36:83:ba:6b:dc:5f:f6:ec:c6:65:fb:ad:
0b:42:47:ba:99:45:5a:c2:60:1c:a0:bc:fc:8f:ec:
f2:ac:d3:59:d9:db:05:cd:52:af:b4:23:c7:d5:ba:
53:40:53:3e:6a:3e:4b:83:d8:25:fc:3c:43:e9:92:
e3:04:5a:65:29:07:8f:88:8c:d3:b6:8e:55:16:5b:
22:5a:0a:21:88:aa:b0:60:b1:bf:9f:30:d3:13:97:
39:a7:2e:3d:51:64:17:26:6b:97:5b:36:9b:1d:2d:
2d:22:b5:69:98:62:2f:56:2b:d8:2e:28:99:c7:c3:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:00:75:1D:1B:79:1D:05:B4:43:1E:B8:4C:3C:A8:65:48:E7:CF:7C
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/IQB1HRt5HQW0Qx64TDyoZUjnz3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.52.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e8:69:6e:58:c9:e4:e5:5f:a4:1a:a9:f6:bc:fb:1f:8c:15:
18:04:db:6b:f3:03:e8:1e:4c:5d:19:b2:ba:57:dc:6b:5d:32:
3b:95:67:5a:a0:8d:3d:3d:9d:e7:ba:e0:fe:71:e9:97:5d:f1:
24:62:af:ad:dd:0b:dd:a9:37:a6:0d:00:85:34:73:39:07:7a:
fa:24:f5:70:52:01:3a:32:d3:1b:47:fc:24:36:a4:40:e3:7f:
96:93:a2:8c:2c:4a:ab:ee:7b:b2:d4:70:19:bd:f6:5c:8f:30:
c9:65:f4:23:31:0b:c6:7b:e5:15:3a:92:d5:60:08:97:94:28:
1d:e5:41:50:17:6e:d4:0f:0a:35:93:64:2b:a3:06:d6:c7:b8:
15:c2:01:93:b9:6c:a7:c0:28:1f:75:2f:ac:35:23:96:1f:44:
f8:e1:6f:18:36:d6:4c:a5:40:35:6d:b2:61:e4:b0:62:cd:08:
f5:a7:89:d9:6a:2c:97:e4:bd:b8:f7:ad:88:cf:46:77:3a:bd:
1a:eb:8c:7a:fa:4a:a4:91:5c:0b:96:63:24:eb:5d:d8:fd:5e:
bf:a6:76:87:4c:54:0f:77:d1:78:42:11:2f:d8:8d:8d:7f:a6:
21:73:40:65:6d:0d:1e:ed:f6:6e:2e:bf:a0:61:08:84:e2:05:
f6:69:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:34:09 2024 by rpki-client on console-fra.rpki-client.org