Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/QChmympRlIcxRiKkqxdP7x1wou4.roa
File: QChmympRlIcxRiKkqxdP7x1wou4.roa (raw, json)
Hash identifier: kMjU/7vZRf6xYo2Uw9eBqZ4uDLJBjr7pU3JwHkpaUec=
Subject key identifier: 40:28:66:CA:6A:51:94:87:31:46:22:A4:AB:17:4F:EF:1D:70:A2:EE
Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Certificate serial: 018CC4252B8C27D8CA3956C3E32F3940C56E
Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/QChmympRlIcxRiKkqxdP7x1wou4.roa
Signing time: Mon 01 Jan 2024 08:30:19 +0000
ROA not before: Mon 01 Jan 2024 08:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206844
IP address blocks: 171.22.245.0/24 maxlen: 24
171.22.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:2b:8c:27:d8:ca:39:56:c3:e3:2f:39:40:c5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Validity
Not Before: Jan 1 08:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=402866ca6a519487314622a4ab174fef1d70a2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:cb:36:d0:d7:b4:ec:e3:c7:77:c9:be:39:
a1:4f:1f:44:19:7f:a8:d2:c1:6e:bf:00:03:08:19:
13:d3:66:df:bd:96:64:e3:00:c4:4b:5f:98:28:25:
a0:08:c0:5d:7c:dd:28:d4:4d:8b:30:4f:ac:b3:60:
ef:27:fb:ca:4d:c5:6a:e9:a5:55:48:bd:e0:2f:8e:
43:8a:36:46:e1:6e:fd:97:24:98:d2:96:48:e5:e6:
29:14:18:8b:9f:84:85:ed:98:54:c9:0d:22:7f:b7:
cb:17:8e:f6:7a:80:a3:08:f5:bf:3c:85:c8:bb:df:
e9:9f:4b:c6:3d:c8:40:00:3d:83:c9:de:9c:3c:f9:
17:f1:06:ae:9b:f0:0b:fa:2f:24:a4:b0:24:5a:23:
1b:3d:c9:fb:68:3e:74:88:de:e2:63:a3:9f:4f:aa:
f9:ae:4d:3f:f5:bd:fc:17:54:66:4a:89:c3:5b:e5:
69:60:1c:7d:cc:05:64:56:c8:d4:67:ef:e2:6b:eb:
7f:f6:97:db:b2:49:e3:dc:15:da:0f:ea:54:c7:8e:
fe:e2:33:79:ce:24:d0:2f:86:27:9a:30:bd:fb:0d:
b0:f2:36:85:5e:86:1e:0d:c2:87:e3:51:bf:0d:1a:
9d:4a:02:80:63:67:89:19:07:83:ba:6c:f1:db:8b:
8e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:66:CA:6A:51:94:87:31:46:22:A4:AB:17:4F:EF:1D:70:A2:EE
X509v3 Authority Key Identifier:
keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/QChmympRlIcxRiKkqxdP7x1wou4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.245.0-171.22.247.255
Signature Algorithm: sha256WithRSAEncryption
ba:19:45:0c:ea:0f:4f:57:74:b5:38:14:5d:00:bc:1a:d2:bb:
44:c1:37:db:9a:56:c2:20:22:ad:82:55:20:60:dd:57:7c:0a:
dd:37:e0:07:c1:48:d1:3c:52:24:f3:87:23:c7:16:47:b0:75:
30:30:8f:00:a6:9c:6d:ef:ba:b4:0c:90:48:00:40:9d:69:10:
45:cf:8c:f5:f1:94:18:af:1c:f4:1f:43:83:01:56:59:de:e6:
a1:8d:7b:c7:0d:43:dc:3e:85:2e:99:1b:69:37:e2:ba:b5:b5:
14:e5:d1:05:32:5b:63:8c:d8:c2:06:4b:46:70:2f:58:44:48:
15:2d:e4:9d:a6:db:4b:ef:83:0e:14:f7:80:27:e9:e8:39:19:
35:c3:51:39:8e:9f:6f:1d:27:cf:18:98:67:95:4f:f0:11:7c:
ac:d9:cb:96:b8:cc:df:8e:6d:78:4a:c5:3f:9c:8e:e8:10:00:
b4:90:b3:03:b1:78:40:62:5a:49:ef:ba:5a:4f:9d:03:a2:94:
fb:12:7e:cb:e2:35:4b:03:4b:7e:15:9b:27:cb:17:b7:57:d0:
e3:2d:ef:f5:b0:dd:53:72:cb:a9:7a:65:34:42:0e:71:6d:e0:
1c:70:2f:19:c7:4e:ad:ac:ab:39:1c:bc:ca:0c:37:04:fa:3f:
23:2c:3d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:01:47 2024 by rpki-client on console-ams.rpki-client.org