Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/QBsxv1-ROJ7L7jOZDVT5S9GcsT4.roa
File: QBsxv1-ROJ7L7jOZDVT5S9GcsT4.roa (raw, json)
Hash identifier: pq5vLeEc1mbw0D2Ub9Wsh+byEvuwNtsNAEW6+4xPlt8=
Subject key identifier: 40:1B:31:BF:5F:91:38:9E:CB:EE:33:99:0D:54:F9:4B:D1:9C:B1:3E
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 018CC6B8280225E1B2DD9F5AD41DF1F90625
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/QBsxv1-ROJ7L7jOZDVT5S9GcsT4.roa
Signing time: Mon 01 Jan 2024 20:30:06 +0000
ROA not before: Mon 01 Jan 2024 20:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44643
IP address blocks: 31.6.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:28:02:25:e1:b2:dd:9f:5a:d4:1d:f1:f9:06:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jan 1 20:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=401b31bf5f91389ecbee33990d54f94bd19cb13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:f8:4a:74:64:2b:e5:fc:fb:39:26:f1:0c:
9f:d6:2f:45:18:a8:aa:1f:28:3e:cd:8a:60:93:49:
eb:98:e0:d9:ae:d9:5b:3d:f8:8b:a2:a5:4a:e8:75:
e7:f3:d8:f9:16:d6:b6:cb:f5:05:dd:69:a8:66:67:
8c:63:29:fa:d6:c7:07:c6:bb:80:83:e2:34:76:ee:
15:72:f1:39:9c:fa:0a:d0:aa:f4:be:41:2b:69:23:
3a:cc:f2:bf:f6:34:eb:b3:78:c1:e4:51:82:6b:81:
13:48:cb:d7:97:d7:2d:9a:1d:04:56:b2:04:dd:bc:
a5:2a:50:24:73:f8:02:74:19:1b:72:dd:84:85:3c:
1e:15:11:5b:07:5e:85:ef:66:38:7f:ac:be:5d:0a:
cb:62:25:13:79:59:2a:6c:7a:f0:e8:1a:79:ee:84:
89:5e:7c:11:95:4b:36:a2:f7:dc:56:e9:a6:6a:42:
67:9c:e0:ab:b0:43:f4:a0:2a:ee:15:90:9b:1c:0d:
38:45:86:1e:14:e2:40:64:b6:0a:b0:8a:ee:cf:b7:
31:e5:74:c6:36:9b:c3:9a:f6:4e:8f:50:62:59:c0:
6d:71:0f:d2:29:c8:43:f5:40:31:2a:d8:c2:51:f0:
11:1e:0f:c3:db:61:fa:58:48:66:9f:71:81:67:73:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:31:BF:5F:91:38:9E:CB:EE:33:99:0D:54:F9:4B:D1:9C:B1:3E
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/QBsxv1-ROJ7L7jOZDVT5S9GcsT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:0b:46:7f:b5:9c:5a:c0:a1:ae:81:89:9d:95:1e:3d:52:4c:
bf:fb:fd:87:36:16:30:1f:a4:91:ba:a7:3a:5e:d3:3d:73:97:
82:de:06:0f:25:85:4e:15:08:a9:46:41:9c:80:9a:13:11:31:
4b:e7:87:4d:75:15:af:61:83:a2:40:ca:db:a7:74:2c:e7:a9:
48:f8:60:93:84:07:6e:50:73:24:bb:60:dc:e2:5a:3b:65:9e:
c1:41:b5:d0:ec:10:9f:ee:9b:3a:21:73:98:a7:09:46:c6:14:
64:05:91:9f:06:b4:c0:65:47:ff:f5:ee:6e:04:87:d4:b0:27:
bd:39:13:05:43:f2:19:97:9c:a4:e5:6f:0f:9d:41:ac:35:15:
2b:de:ed:86:de:bd:94:6a:26:2a:aa:ff:f0:eb:b5:2c:53:f8:
c6:3c:c6:c1:1c:96:4c:fd:aa:60:15:f0:f8:08:df:43:56:3d:
c4:89:7e:9b:56:1b:d9:75:32:5b:90:74:ae:29:3f:0e:83:a7:
5f:7c:e7:a2:69:a2:21:62:3d:5f:d0:23:db:41:fa:7f:31:d8:
76:c2:bd:14:e5:de:5b:c0:cd:16:28:fc:cb:4e:c9:76:7f:6d:
06:b5:ad:59:93:fb:9a:c5:50:d1:d5:ca:e6:ea:af:37:c3:b8:
20:25:6b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:59:01 2024 by rpki-client on console-fra.rpki-client.org