Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Q0hu0jMm4Gqq2q3YixyNy0lQCZ4.roa
File: Q0hu0jMm4Gqq2q3YixyNy0lQCZ4.roa (raw, json)
Hash identifier: R99ExSHEef3d7EJ3WbYnTwJOqyMyKnE0XRoZZNT20Ws=
Subject key identifier: 43:48:6E:D2:33:26:E0:6A:AA:DA:AD:D8:8B:1C:8D:CB:49:50:09:9E
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 018CCA2A24B2B3FAA8F9F1B8D62663974AF7
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Q0hu0jMm4Gqq2q3YixyNy0lQCZ4.roa
Signing time: Tue 02 Jan 2024 12:33:28 +0000
ROA not before: Tue 02 Jan 2024 12:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50795
IP address blocks: 188.75.112.0/22 maxlen: 22
188.75.112.0/23 maxlen: 23
188.75.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jul 2024 15:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:24:b2:b3:fa:a8:f9:f1:b8:d6:26:63:97:4a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 2 12:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43486ed23326e06aaadaadd88b1c8dcb4950099e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:f3:71:c5:30:04:d4:99:15:4a:2f:25:35:
d1:11:9e:6b:9f:00:a2:e3:87:7d:84:3e:67:86:19:
74:bc:03:3e:25:35:83:e0:e5:20:7b:ef:ba:0e:1b:
2e:e4:d0:f8:3b:db:a4:11:ee:6e:cf:2b:6d:f3:22:
cb:79:31:a3:38:88:88:b1:49:b1:88:de:88:4d:dd:
6e:48:21:60:79:f6:95:6a:f3:ba:05:20:88:d6:6c:
ad:17:48:5d:52:79:50:19:c3:25:fb:5d:de:8c:a2:
ae:1c:c1:93:87:6f:c3:2f:f6:d6:e4:c4:34:09:ff:
51:a0:84:4f:ff:7c:76:d4:f6:c6:d6:28:b2:3e:64:
8b:ec:fc:80:6d:a2:a3:a2:87:98:e3:4a:e2:3b:05:
0d:09:dd:66:3e:42:ba:4e:fc:81:5a:e4:82:53:7d:
bf:8a:4e:c1:89:5c:cf:0d:54:9d:79:f5:a0:88:57:
23:01:e1:b0:3e:d9:5f:36:fd:26:47:d7:35:59:4b:
22:8f:ed:76:0a:af:b7:6b:9b:0c:0f:c9:24:2a:db:
78:ef:e0:88:26:ce:f3:10:60:6b:60:02:90:6e:d3:
09:4c:24:84:0d:c1:c4:20:50:8d:41:bf:90:da:50:
85:b4:1c:83:ee:8a:98:ca:24:47:c0:89:92:25:9c:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:48:6E:D2:33:26:E0:6A:AA:DA:AD:D8:8B:1C:8D:CB:49:50:09:9E
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Q0hu0jMm4Gqq2q3YixyNy0lQCZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.75.112.0/22
Signature Algorithm: sha256WithRSAEncryption
47:3f:f3:2e:04:fd:8c:bc:47:19:58:78:c8:5f:29:9a:2d:ff:
89:af:a6:63:d6:7d:9e:c6:28:8b:5f:52:ad:f1:54:8f:27:15:
63:4d:79:c7:a8:cd:a1:0c:cd:95:aa:4b:7c:04:8b:db:8f:97:
5a:4e:93:40:df:97:ca:7d:40:1a:90:bf:35:62:cb:ab:63:f2:
4e:c0:88:d4:56:d9:1e:3a:24:43:67:85:06:8f:e8:0d:ef:79:
48:03:2d:d7:37:7a:e9:15:d8:c4:62:fb:df:09:0b:9b:2d:1a:
a8:fd:2f:df:89:90:7a:08:7d:61:9e:c0:c8:a3:39:d1:60:25:
f8:5f:dc:c2:4f:f7:57:e6:d1:1e:45:06:b3:54:87:11:0e:c1:
2a:7f:57:cc:c5:85:07:45:3c:c1:5d:93:cf:97:8e:d7:09:c9:
97:7f:d0:35:20:1e:00:6b:b4:e4:5f:b5:8a:47:e1:07:e2:ca:
c0:92:73:cd:81:07:11:be:86:d0:de:0f:dc:5b:f6:f1:4a:ff:
c3:24:57:04:4a:00:71:ad:88:58:cd:65:0c:99:44:2b:57:f3:
15:9e:2b:cf:5f:3d:a6:51:97:0c:c2:79:c2:00:11:a8:6b:f1:
4c:2d:4e:6c:d4:93:6e:c0:79:88:34:55:60:5c:64:6b:fd:71:
c3:53:5d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 20:38:24 2024 by rpki-client on console-ams.rpki-client.org