Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/QKPjasEa6LKOHGwtxIWqahMqjPY.roa
File: QKPjasEa6LKOHGwtxIWqahMqjPY.roa (raw, json)
Hash identifier: ZN/Rns+XsFt2j4C0jjvf48ujpuBkdRE4cvR7wvcp/tQ=
Subject key identifier: 40:A3:E3:6A:C1:1A:E8:B2:8E:1C:6C:2D:C4:85:AA:6A:13:2A:8C:F6
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF296E0658CD551230EC3BAD5022B
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/QKPjasEa6LKOHGwtxIWqahMqjPY.roa
Signing time: Tue 02 Jan 2024 04:30:28 +0000
ROA not before: Tue 02 Jan 2024 04:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60250
IP address blocks: 213.74.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f2:96:e0:65:8c:d5:51:23:0e:c3:ba:d5:02:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40a3e36ac11ae8b28e1c6c2dc485aa6a132a8cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:fc:23:9a:33:eb:5c:05:53:6d:d7:dc:c2:
2c:68:b0:fd:94:30:b8:0e:54:11:06:5c:c5:76:0e:
00:8b:e9:0a:73:ba:22:66:6b:5b:1e:8f:38:1d:7f:
12:b6:db:16:20:60:9e:bc:b7:c1:cd:1a:99:05:55:
d1:47:1c:00:b6:3d:ec:84:23:27:08:6a:62:02:ac:
36:7d:76:43:76:48:1b:fa:95:e9:ee:a0:02:74:85:
25:c7:61:28:6c:d7:73:1e:f8:7f:7d:ff:e2:98:9c:
9c:b7:dd:cc:8b:12:86:61:74:bf:e4:55:16:19:4f:
ac:f0:ae:5d:77:98:5b:38:dd:e8:72:e1:7d:c0:ef:
9b:94:21:8f:63:47:e4:f4:65:c1:96:3e:69:eb:e2:
a2:bf:e3:64:95:69:57:40:c8:43:ac:87:7c:d3:ba:
35:ed:7d:45:65:a1:64:21:8b:e5:ff:d0:15:43:4d:
33:b5:dc:9b:df:ca:a1:93:4f:a7:48:58:2f:15:01:
2b:92:5e:d9:f0:09:c9:cc:75:ed:b1:06:35:32:09:
92:79:f3:f4:6c:5f:05:fa:c7:6a:03:28:ce:ca:33:
01:39:0f:e2:b3:c9:83:17:c3:f9:25:b3:44:bf:c7:
fe:64:47:ec:4c:86:16:14:de:2b:34:7a:c1:c2:49:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A3:E3:6A:C1:1A:E8:B2:8E:1C:6C:2D:C4:85:AA:6A:13:2A:8C:F6
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/QKPjasEa6LKOHGwtxIWqahMqjPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.74.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b8:a0:1d:8d:77:08:f5:3e:7e:5b:18:2c:56:f0:78:02:7c:
d5:d8:a9:cb:b6:fd:f8:cf:70:1b:f3:e8:1c:17:a0:fe:a1:fe:
9f:9f:6e:c8:2c:8e:ad:88:c3:a4:b8:6b:87:03:62:c0:69:dc:
6a:87:2d:70:1e:39:13:56:3a:90:5d:00:99:b4:d8:1b:03:d8:
af:f4:d5:36:de:41:dd:b4:b9:9c:18:6d:df:33:da:69:15:af:
47:a8:45:cf:eb:bb:11:3e:9d:2a:f6:40:c7:f8:87:37:f1:34:
f2:56:23:18:ad:1a:de:02:8e:75:d4:39:82:2f:69:18:e3:9e:
33:31:64:cc:10:8e:3a:73:85:5b:cb:0f:55:4f:3e:0e:72:47:
34:f0:27:56:f7:68:81:16:92:37:94:6b:df:34:f2:09:1f:fd:
ce:47:dd:70:8a:d0:f7:1d:d0:f8:58:01:54:67:12:2e:14:59:
05:84:26:89:44:13:81:8c:b1:1e:a4:0b:aa:bc:cb:a1:ad:e2:
0f:1a:60:96:a9:a4:9e:5b:c6:b6:55:92:1d:11:4d:ac:ef:1b:
18:5c:35:ca:0b:60:4e:b4:ce:52:63:52:8a:d0:2b:41:ea:e8:
0e:d2:2c:95:50:9b:98:2b:9e:13:73:8c:23:eb:f2:0d:c6:58:
70:80:ed:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:23:11 2024 by rpki-client on console-ams.rpki-client.org