Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QkUCJiLV2PGJkZErcvCgIvmTG5Y.roa
File: QkUCJiLV2PGJkZErcvCgIvmTG5Y.roa (raw, json)
Hash identifier: NpBV0fJGPrKRB6e50jQ/bDDaXWvLAPf/5zncqBWwMkw=
Subject key identifier: 42:45:02:26:22:D5:D8:F1:89:91:91:2B:72:F0:A0:22:F9:93:1B:96
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B73A7AB6600EEAA8C3308B7C50EEF8
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QkUCJiLV2PGJkZErcvCgIvmTG5Y.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47150
IP address blocks: 90.84.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3a:7a:b6:60:0e:ea:a8:c3:30:8b:7c:50:ee:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4245022622d5d8f18991912b72f0a022f9931b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:1f:bf:c6:b0:12:86:47:53:4c:1b:e1:cc:
ff:19:aa:93:4f:30:d0:70:8a:4f:33:49:6b:85:ae:
23:0f:08:35:79:62:2a:f1:f4:04:dd:04:35:8e:04:
52:2a:08:3f:e8:5d:05:bc:29:14:50:45:b1:b0:b4:
e7:cb:06:e5:ad:d7:8b:f9:30:0a:c0:e3:75:3b:7c:
03:bc:58:ae:9d:49:83:3e:48:ac:8a:82:70:48:ea:
06:04:78:eb:b0:b9:df:7e:be:80:f9:66:84:f9:13:
91:fa:ab:5e:fc:67:9d:f1:eb:e8:f8:10:11:db:9e:
1f:1d:b2:df:8f:f3:f4:3b:28:80:12:22:fa:ab:25:
7c:c5:36:e8:6f:27:c2:d6:86:68:91:2b:d4:08:8f:
d4:f6:80:1a:b4:14:f1:c1:b3:a2:58:83:51:ad:33:
e7:7f:b7:39:a5:d3:6a:51:0d:1e:52:90:1e:5b:40:
be:9f:ad:34:e9:37:56:d7:7e:1e:f6:17:a0:21:69:
bf:90:58:78:0a:81:05:83:4a:59:32:23:aa:61:5a:
ee:79:d5:2e:e1:26:4a:2c:4a:dc:b1:95:26:48:a1:
ed:02:94:c1:8d:29:79:e2:f2:8f:b3:f6:62:99:ad:
fc:c8:a2:8d:4e:4f:66:1c:14:2b:03:19:f9:64:0b:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:45:02:26:22:D5:D8:F1:89:91:91:2B:72:F0:A0:22:F9:93:1B:96
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/QkUCJiLV2PGJkZErcvCgIvmTG5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.12.0/23
Signature Algorithm: sha256WithRSAEncryption
79:3b:a7:a9:df:2e:a3:46:de:93:42:5f:96:a0:74:f0:9d:f9:
54:29:d9:5d:b4:a3:6f:f6:fa:06:50:d9:80:ce:26:7b:c1:ba:
9e:95:a7:a2:75:5d:50:58:70:61:27:b6:f4:00:bb:e7:ac:cf:
30:ba:f9:e7:fd:9e:e3:ee:53:7d:41:25:60:f2:19:fc:6c:b7:
bb:6c:aa:a6:54:0a:80:59:cb:ee:21:5c:b3:62:e3:18:74:3a:
88:a4:f9:a5:3c:cd:6a:24:d8:b7:c4:12:f6:b1:72:5d:98:0a:
67:d7:87:78:1f:d8:54:50:26:bd:e6:d3:cc:a6:a2:23:7a:5a:
bd:c5:d4:d4:76:e4:50:62:88:41:77:a0:d5:d3:f9:70:a2:56:
09:b6:b9:17:4a:8f:8e:03:9c:47:4c:51:4a:78:9b:91:50:d7:
3b:76:c3:5f:fe:87:18:75:96:fe:5b:22:81:db:0e:a0:0f:dc:
10:4f:67:80:6c:4a:9d:66:74:b7:45:58:c7:27:71:16:fc:9e:
97:8f:bc:21:4d:67:d4:ed:36:d4:cd:3d:a5:9b:c7:fd:4c:30:
37:c7:e8:c2:75:18:58:bb:27:b3:4f:d9:db:dd:87:68:65:b9:
98:e9:96:4e:7d:33:1e:cc:de:11:cd:c8:67:23:a1:5a:28:1f:
08:ba:75:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:40:49 2024 by rpki-client on console-fra.rpki-client.org