Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/QfjpDtaPfxK1-ySA4tY7fZcmHBg.roa
File: QfjpDtaPfxK1-ySA4tY7fZcmHBg.roa (raw, json)
Hash identifier: 5jl+NlVmfUuAu/5Fp4M/Nesg2o61KZGldvPmvS2GGu4=
Subject key identifier: 41:F8:E9:0E:D6:8F:7F:12:B5:FB:24:80:E2:D6:3B:7D:97:26:1C:18
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 018CCA96EA24F2D8EA2B56705AF11E7F94A8
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/QfjpDtaPfxK1-ySA4tY7fZcmHBg.roa
Signing time: Tue 02 Jan 2024 14:32:17 +0000
ROA not before: Tue 02 Jan 2024 14:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50870
IP address blocks: 94.243.208.0/22 maxlen: 22
94.243.212.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:ea:24:f2:d8:ea:2b:56:70:5a:f1:1e:7f:94:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Jan 2 14:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41f8e90ed68f7f12b5fb2480e2d63b7d97261c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:05:aa:66:99:ed:92:37:6c:25:b2:c7:f8:23:
79:19:4a:94:b0:4c:92:e1:41:71:3e:1b:de:bd:50:
08:98:44:5f:58:50:74:b4:77:1e:21:91:3e:ec:5c:
03:6c:e9:72:e0:69:ff:42:d1:69:b2:d1:52:8a:20:
7d:cc:5a:5a:d2:d8:ff:f0:2f:b8:54:7a:c9:b0:8d:
e4:e6:d7:3d:18:f6:44:e4:c1:1b:f2:79:72:f1:6a:
68:97:70:5d:23:29:c3:8e:e8:ee:68:e0:2a:52:7b:
d2:0a:19:d8:6d:a2:9c:da:59:71:c3:5f:b5:45:19:
4c:2d:f1:96:7a:4b:32:62:e8:19:ee:b9:77:e6:4b:
c1:40:8a:5b:79:ae:76:3c:09:e7:a6:2c:59:5e:3e:
c7:16:bf:a2:3f:5f:54:c1:05:0b:62:d7:ab:f1:ee:
c2:73:22:90:2a:88:a1:89:1a:5d:69:b0:f5:17:75:
6d:7a:b2:fc:fc:64:ac:94:d7:6f:49:dc:59:4b:6e:
48:67:b1:17:eb:32:33:61:f1:e1:51:c3:4c:63:b1:
84:6c:95:f4:bc:20:b7:18:00:b2:26:c0:b0:1e:60:
0b:4f:8d:19:20:00:3e:3a:9c:8e:8f:be:a7:6b:19:
a3:fb:c5:b3:a6:81:42:91:14:29:d1:50:2f:49:c9:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F8:E9:0E:D6:8F:7F:12:B5:FB:24:80:E2:D6:3B:7D:97:26:1C:18
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/QfjpDtaPfxK1-ySA4tY7fZcmHBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.243.208.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:02:0b:f8:6b:09:b0:56:59:56:2e:26:5a:54:a5:dc:1e:e4:
fe:ac:b1:55:39:a0:dd:95:19:1a:51:e4:8c:8a:06:60:dc:54:
b0:77:7c:9d:00:bf:cf:30:59:18:39:b9:b1:a0:ed:ee:4b:16:
5c:08:10:61:fe:06:65:03:bc:5f:c0:96:93:62:57:13:76:99:
e1:b1:03:fb:9c:f5:3c:ef:46:5e:93:1b:11:46:6e:96:d7:fc:
7d:6f:65:df:70:7b:54:43:7e:f8:1e:c4:c6:2c:49:95:18:b9:
ea:27:13:7b:b2:f7:ed:8f:0f:25:c9:1d:a6:2e:d9:10:61:24:
0d:ef:2d:f9:55:cb:20:fe:e2:d3:10:a6:7f:e5:51:08:db:d1:
4a:50:b5:dc:51:b0:d3:a0:a1:38:68:a7:b6:0d:94:5a:59:e6:
85:c2:7b:ae:f8:a7:1f:7c:72:61:81:4e:0a:b6:63:3f:1a:61:
a7:53:d2:29:f9:6c:1e:90:4c:99:9a:9d:93:f9:25:d3:63:fc:
e9:3a:7a:2d:05:26:2b:aa:69:2c:99:03:9b:28:da:2f:ee:a0:
a9:af:e3:74:a1:af:84:f0:61:12:89:7c:66:db:22:fe:13:ef:
45:b1:26:d0:ce:45:d3:0d:b5:77:85:52:cb:9d:48:d6:72:29:
7d:42:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:35:23 2024 by rpki-client on console-ams.rpki-client.org