Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/qVEjuJJrASb3-aL3tqUyHpp6UY4.roa
File: qVEjuJJrASb3-aL3tqUyHpp6UY4.roa (raw, json)
Hash identifier: iqFHrdY9cxM7a1U/MX3151bVbW8lWxQqS0GpC7CgUvs=
Subject key identifier: A9:51:23:B8:92:6B:01:26:F7:F9:A2:F7:B6:A5:32:1E:9A:7A:51:8E
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01908C6CB97D933CD684CAF36888EBCBCE02
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/qVEjuJJrASb3-aL3tqUyHpp6UY4.roa
Signing time: Sun 07 Jul 2024 09:00:53 +0000
ROA not before: Sun 07 Jul 2024 09:00:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 92.114.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8c:6c:b9:7d:93:3c:d6:84:ca:f3:68:88:eb:cb:ce:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jul 7 09:00:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a95123b8926b0126f7f9a2f7b6a5321e9a7a518e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:86:39:7d:03:1f:6b:b2:b3:c6:d1:b8:e4:c7:
27:5a:96:82:3b:8e:c7:9d:6b:b2:6e:23:9d:76:81:
7c:aa:5c:48:68:65:26:c1:ec:88:eb:6d:41:f5:b7:
d4:9f:26:98:23:bf:d3:9e:72:4e:76:7b:04:e7:e4:
6e:69:10:66:ab:11:32:98:f3:e7:ce:bb:ae:d3:58:
0e:c4:05:ea:0b:0e:fb:1d:5f:0a:50:26:43:5b:1b:
fe:b5:8c:a1:c8:a6:c8:00:b2:78:6a:16:f4:30:01:
fc:24:2f:bd:cc:b5:5b:07:62:e6:51:41:70:23:39:
30:7b:8d:68:d4:f9:aa:56:ae:20:51:25:fa:4b:48:
bd:70:3d:86:8c:73:a4:94:cc:51:68:33:0b:98:08:
6d:ba:b0:bd:04:be:16:94:15:ea:7c:3d:13:0f:31:
aa:10:3c:45:86:e8:86:84:53:a5:c9:8b:be:7b:56:
78:05:43:33:2d:17:59:99:d7:65:b2:d4:8d:d4:8b:
9f:13:c2:98:6c:63:9b:07:b2:d9:bc:8e:bd:eb:c9:
9f:9a:b2:df:32:ac:c4:4b:7d:08:0d:b8:78:ac:5a:
e0:f3:12:42:bb:45:98:b9:8b:dd:53:c8:c4:d3:10:
ff:d8:68:3f:e8:60:21:c6:bc:19:67:72:e7:39:e8:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:51:23:B8:92:6B:01:26:F7:F9:A2:F7:B6:A5:32:1E:9A:7A:51:8E
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/qVEjuJJrASb3-aL3tqUyHpp6UY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
95:19:37:e6:2d:4c:38:a9:ce:a0:9d:eb:dc:11:69:7c:85:4d:
82:24:2e:15:22:b9:73:8d:b5:c4:df:a7:61:3f:fb:36:03:db:
45:09:4a:4e:74:da:8a:68:9b:52:b1:2d:06:63:73:54:53:30:
0a:c0:3f:e2:7f:06:5d:21:a2:ee:39:a0:86:d7:0a:7d:22:e3:
8e:bb:99:e4:6f:f5:97:b7:5a:13:16:d4:2a:15:f8:b4:f4:e2:
bd:2f:37:b4:d5:88:e6:ac:b6:9b:a7:58:ed:64:7c:75:41:56:
85:1d:c6:2a:7a:09:fc:6f:08:13:3f:37:e9:1d:ad:d2:fe:36:
51:74:26:9d:86:ea:60:d5:42:49:f6:7e:f4:64:e0:22:1b:3e:
7c:5d:03:e4:6d:c7:d7:4f:04:c9:99:84:9f:93:21:5c:ae:b9:
83:1f:d3:49:95:1a:7f:aa:0c:5f:64:bf:70:f6:3d:7a:33:f9:
2c:eb:84:9c:41:2c:19:1b:e3:1e:58:5f:cb:1d:39:4b:af:2c:
ce:6d:60:2d:9b:6c:01:ab:ab:5d:80:ca:68:d5:4b:69:8b:c5:
c8:2a:04:8b:7e:17:11:9c:d6:18:7a:f2:58:99:72:f9:01:d6:
51:4a:39:d5:06:d4:c1:4d:ac:e9:d3:ff:88:01:30:19:00:4b:
dc:d8:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:05:50 2024 by rpki-client on console-ams.rpki-client.org