Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QqZatAQs7iJyD3I3sF0TPpr6cyg.roa
File: QqZatAQs7iJyD3I3sF0TPpr6cyg.roa (raw, json)
Hash identifier: rqeKALoru59alzwTEjByc0C7jkIMhT8QTDFdAKl67sQ=
Subject key identifier: 42:A6:5A:B4:04:2C:EE:22:72:0F:72:37:B0:5D:13:3E:9A:FA:73:28
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAE4B662590A2FC19214D9E36CF7C6
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QqZatAQs7iJyD3I3sF0TPpr6cyg.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206411
IP address blocks: 88.220.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e4:b6:62:59:0a:2f:c1:92:14:d9:e3:6c:f7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42a65ab4042cee22720f7237b05d133e9afa7328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:36:ca:6c:0b:d1:d2:05:6a:2b:c1:8b:ee:a3:
10:1d:69:b0:72:d4:f6:b3:4e:ad:e7:b2:ac:34:ec:
5b:9d:96:c7:1d:bb:82:fa:94:21:ca:ba:c0:ac:dc:
e7:c2:db:4f:6a:ea:90:87:c6:f4:24:87:5d:a8:d1:
a2:70:84:18:8b:83:ca:9d:9f:40:a2:a9:3d:f9:69:
9f:30:fe:f3:27:2a:65:24:54:fc:83:4d:ca:fe:14:
7c:0b:6b:8c:46:2e:79:49:36:cb:f2:66:a0:12:b0:
5a:68:75:dc:8d:e5:9f:e4:cc:6d:11:88:8e:c4:aa:
99:fc:43:3e:3b:01:1e:7a:c8:72:41:6f:0c:dd:bd:
b6:5d:78:82:3e:34:12:4a:36:07:fc:9b:be:ba:4a:
4c:78:6b:9e:8b:09:99:ce:4c:f5:7c:c1:46:63:5a:
ee:d8:ac:98:44:34:e8:52:a9:d7:6f:a9:fd:c7:be:
f6:bd:39:d6:f1:c2:8b:79:2e:12:4c:a8:c3:94:07:
75:fa:6e:2f:70:cc:fe:5c:62:71:39:fe:d1:49:54:
d3:89:1b:53:12:7d:4a:5f:11:e5:f3:7f:72:f3:0e:
89:12:17:35:56:5e:32:9f:58:2e:51:46:dd:b6:6f:
c7:50:57:bc:89:0e:9a:36:17:4f:d9:c0:2a:c2:a5:
00:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A6:5A:B4:04:2C:EE:22:72:0F:72:37:B0:5D:13:3E:9A:FA:73:28
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QqZatAQs7iJyD3I3sF0TPpr6cyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:b3:62:1b:7d:65:1b:db:11:f7:00:f2:3a:c1:e0:37:9f:c6:
ed:11:21:3b:51:e3:e0:ce:fa:0a:16:a2:3f:4d:eb:66:5f:ec:
10:df:f5:06:10:05:ff:27:79:56:37:29:89:4c:22:12:cb:a2:
66:e5:29:11:c3:6b:d1:51:6a:ea:17:c5:6b:06:84:7a:1c:8c:
a3:75:98:74:04:f2:c6:99:3c:29:3f:62:e5:59:95:60:7a:6a:
ab:b0:82:a8:9d:f1:8e:34:17:f6:a1:57:f8:a2:53:e1:4d:31:
39:14:24:0e:e1:8c:ac:e2:29:c4:1d:7c:0d:45:04:7f:89:a7:
35:41:13:63:30:cd:c7:a0:31:78:3f:49:24:8d:2d:45:18:41:
f2:2f:86:9b:12:b1:93:c3:01:80:fd:88:71:17:a3:d0:99:c3:
9e:cb:e4:50:3d:4a:1a:72:c4:3c:d0:4e:27:a1:d7:ed:5e:71:
af:bc:35:a3:e3:f0:48:ed:22:34:07:1f:33:dc:b8:f4:f8:7f:
00:0b:84:d9:e9:55:dd:d6:b8:48:8e:a7:10:89:62:24:7a:3f:
7a:5b:46:52:88:88:56:c9:d3:85:82:be:6d:72:5d:12:79:cd:
50:fa:b8:12:f9:40:3e:3f:c8:c1:55:b6:a6:0e:6f:2e:d7:8d:
1c:d3:50:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:57:25 2024 by rpki-client on console-ams.rpki-client.org