Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/QypHGsL17z-U7H1CqSwMKBxJ2Zk.roa
File: QypHGsL17z-U7H1CqSwMKBxJ2Zk.roa (raw, json)
Hash identifier: CM6DEylffExeTgvhIRIsAlE9Ch65iFSZJNZbfftjj7s=
Subject key identifier: 43:2A:47:1A:C2:F5:EF:3F:94:EC:7D:42:A9:2C:0C:28:1C:49:D9:99
Certificate issuer: /CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Certificate serial: 018CC56EAC0627B9FB2A6FD92B77C1B7EEBD
Authority key identifier: 73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/QypHGsL17z-U7H1CqSwMKBxJ2Zk.roa
Signing time: Mon 01 Jan 2024 14:30:13 +0000
ROA not before: Mon 01 Jan 2024 14:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49192
IP address blocks: 185.86.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ac:06:27:b9:fb:2a:6f:d9:2b:77:c1:b7:ee:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Validity
Not Before: Jan 1 14:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=432a471ac2f5ef3f94ec7d42a92c0c281c49d999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:fb:7c:5d:31:08:33:2d:14:f0:8a:44:13:
ee:8b:73:dc:40:65:c3:d9:05:8e:bf:b0:eb:96:a0:
f4:95:a5:6a:0a:2f:25:7f:92:30:a5:98:95:04:f6:
fd:4a:e1:c9:e1:d2:40:e0:a8:f0:7d:0a:5f:2c:45:
8e:3d:42:d8:5e:95:3e:3b:e5:c4:80:6a:de:62:ae:
3d:ae:c9:3a:5e:26:56:05:34:9e:42:e8:1c:19:c1:
24:a6:30:10:64:f8:f3:91:77:c6:c8:ee:92:c3:87:
98:76:6d:c2:e7:a5:bd:e6:02:bb:93:31:c6:6d:88:
22:c9:45:33:21:0b:61:4e:cf:b4:ce:27:b7:20:f3:
76:5e:60:1a:1b:91:ec:f9:9a:5e:cb:ba:8f:3a:ab:
51:3e:74:84:eb:13:e9:37:2b:96:45:c8:43:33:12:
73:8f:dd:da:e9:9b:71:87:36:96:e6:b4:ed:c8:66:
ae:a8:c1:6d:43:59:cb:f1:5b:5e:d3:b3:ab:97:ee:
b2:85:91:34:99:8b:b8:05:55:ad:75:b9:ce:8a:2d:
46:44:ab:db:ad:1f:db:3d:0c:c7:6a:ab:88:58:94:
a2:02:82:a7:e7:3b:77:32:16:d9:87:65:fb:09:be:
f3:54:d0:0e:59:32:0b:e9:25:3d:77:cd:96:93:ee:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2A:47:1A:C2:F5:EF:3F:94:EC:7D:42:A9:2C:0C:28:1C:49:D9:99
X509v3 Authority Key Identifier:
keyid:73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/QypHGsL17z-U7H1CqSwMKBxJ2Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e5:09:40:f2:a3:32:89:b9:05:7c:e2:fd:7a:9d:ea:cb:f8:
d8:c1:d9:af:9b:5e:4f:43:7f:e6:f3:9b:61:ab:e6:ae:ab:12:
2f:66:a1:ec:68:e8:3e:cf:2d:61:6a:2c:9f:c3:45:25:cf:f4:
d2:9f:d3:45:a9:3c:17:f5:27:66:4a:d4:65:ea:67:a1:d2:83:
62:fc:e2:ab:c9:a1:a7:35:0d:25:e3:f0:8f:ae:90:25:f9:1d:
a4:00:c2:d5:07:36:10:20:7a:bb:c0:10:d6:3c:9f:fa:90:68:
6a:40:7d:c9:0e:ad:64:c4:83:6f:62:5b:ff:62:26:cf:3f:aa:
b1:c6:e9:f9:26:4b:34:6b:e5:ba:2b:6e:73:12:f3:e8:d3:1a:
ba:76:b1:a7:c3:6e:68:f2:f4:e9:33:0f:1a:df:eb:ff:d5:12:
45:a4:56:3b:26:bc:1b:ae:e3:02:9b:7c:f0:b6:bb:ce:42:85:
3b:96:3c:a9:f4:45:93:bd:7f:40:1d:a3:b8:b5:b6:92:9c:93:
34:58:c4:e1:63:ba:45:9b:4c:28:09:6c:7a:74:87:6b:74:9e:
5b:e1:2c:6d:c9:e5:89:a7:e3:62:b1:15:63:9d:4f:0b:22:6f:
76:36:bb:3d:38:84:e2:20:96:3e:99:93:3e:35:34:b2:80:2c:
c0:84:9f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:37:48 2024 by rpki-client on console-ams.rpki-client.org