Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/SQDCG6zjTMebLAbFU8xvjy9ghXQ.roa
File: SQDCG6zjTMebLAbFU8xvjy9ghXQ.roa (raw, json)
Hash identifier: oMJPt23IW+dSXTElFEnHAre9qvZABISYAVdnbxwqK+0=
Subject key identifier: 49:00:C2:1B:AC:E3:4C:C7:9B:2C:06:C5:53:CC:6F:8F:2F:60:85:74
Certificate issuer: /CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Certificate serial: 018CC7273A47FF90DFF86FD90E8776BCD389
Authority key identifier: CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/SQDCG6zjTMebLAbFU8xvjy9ghXQ.roa
Signing time: Mon 01 Jan 2024 22:31:25 +0000
ROA not before: Mon 01 Jan 2024 22:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3549
IP address blocks: 185.64.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:3a:47:ff:90:df:f8:6f:d9:0e:87:76:bc:d3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4900c21bace34cc79b2c06c553cc6f8f2f608574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fc:26:9e:08:6d:1c:0f:92:8e:26:ed:7c:c3:
d1:87:34:71:c8:6d:9f:dd:5b:7b:a8:97:f2:59:27:
a9:fc:c6:7d:55:39:65:da:2c:b8:2e:09:27:e2:8b:
07:96:82:a3:03:23:05:f5:cf:46:8b:84:ff:ab:d3:
a6:9c:56:4b:51:13:e2:05:80:f6:61:b4:ee:27:36:
10:b8:08:e7:30:e0:62:ef:5e:ef:77:19:2f:44:d9:
22:a2:df:6c:94:37:c2:88:d8:de:aa:5b:66:6e:a2:
f1:20:5b:79:22:db:d7:88:4e:f5:83:55:0a:9e:f0:
81:3f:b7:2a:71:b0:15:48:ec:c0:ef:28:2a:1f:bc:
2b:66:fa:72:c0:73:4d:d4:1a:4d:21:69:a6:57:4e:
83:60:24:dc:5e:55:a4:c4:c9:8d:ff:78:b3:77:d2:
f7:43:d3:64:7a:5d:07:05:03:13:89:5c:2e:7d:92:
bd:73:e5:1e:97:b8:61:9c:49:8b:03:7a:53:bf:bc:
53:97:a5:9a:7e:c1:84:fa:c0:0c:f1:fb:91:98:05:
e4:e7:bc:11:81:67:a5:8e:fa:05:12:1c:cd:ba:a3:
aa:7f:fa:70:07:6c:60:86:39:c1:fc:d5:76:d4:2c:
4e:9d:b7:ae:61:ff:e2:67:1d:02:30:75:07:08:9a:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:00:C2:1B:AC:E3:4C:C7:9B:2C:06:C5:53:CC:6F:8F:2F:60:85:74
X509v3 Authority Key Identifier:
keyid:CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/SQDCG6zjTMebLAbFU8xvjy9ghXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.252.0/22
Signature Algorithm: sha256WithRSAEncryption
53:89:6e:54:ce:91:98:b3:66:0e:95:01:88:dd:07:45:2b:00:
da:fa:6b:6f:ec:78:b2:ce:80:e0:99:66:35:6b:e3:aa:04:ca:
c9:c3:5f:4b:fd:45:a1:6c:86:43:02:86:55:7a:e0:e0:6e:96:
9f:2d:75:6c:c4:60:04:6d:e8:c4:75:9b:1d:f4:a6:56:f1:06:
86:89:d0:7a:19:da:c4:62:df:24:de:36:e0:3b:9b:f7:ce:1e:
c6:f2:56:4d:9c:dd:81:c2:4d:04:2b:23:2b:e9:c2:fd:2c:6f:
1d:67:be:9f:d9:75:2c:69:cf:d3:d3:dd:71:05:ce:9e:f8:2e:
d7:0c:dd:69:29:1e:44:8e:6f:fd:e4:89:bb:57:cf:d9:4a:e3:
76:1a:f4:d8:0b:6b:d0:f0:ad:7d:69:1f:f0:89:78:c5:a5:e5:
47:40:cc:64:5d:a9:c8:e7:04:c6:17:15:3a:46:23:cd:b6:4f:
76:65:94:85:ea:fa:c7:3d:90:23:77:cb:56:76:8f:62:57:31:
10:b3:f6:d9:a9:09:22:22:da:f3:4b:e1:35:2f:a5:89:de:2a:
d3:45:70:6a:55:8d:e5:ae:59:06:df:a9:5b:ce:2b:2f:b2:69:
21:09:1e:5e:fe:f8:df:bf:6a:89:d9:ce:7f:83:f8:61:be:0e:
72:bf:55:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:38:32 2024 by rpki-client on console-fra.rpki-client.org