Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/2qk-AERxd_MjuwP354At_Q3g1M4.roa
File: 2qk-AERxd_MjuwP354At_Q3g1M4.roa (raw, json)
Hash identifier: J+KB5f0lgJRwjPvi/68LkauuhVyPpQv59620nnRemHg=
Subject key identifier: DA:A9:3E:00:44:71:77:F3:23:BB:03:F7:E7:80:2D:FD:0D:E0:D4:CE
Certificate issuer: /CN=c49aa3226eafac1e77d23e8fcef18900384003c7
Certificate serial: 018CC94AA711E31B9E59B63566D71899FB35
Authority key identifier: C4:9A:A3:22:6E:AF:AC:1E:77:D2:3E:8F:CE:F1:89:00:38:40:03:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/2qk-AERxd_MjuwP354At_Q3g1M4.roa
Signing time: Tue 02 Jan 2024 08:29:22 +0000
ROA not before: Tue 02 Jan 2024 08:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59441
IP address blocks: 185.40.16.0/24 maxlen: 24
2a0d:7780::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:a7:11:e3:1b:9e:59:b6:35:66:d7:18:99:fb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49aa3226eafac1e77d23e8fcef18900384003c7
Validity
Not Before: Jan 2 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daa93e00447177f323bb03f7e7802dfd0de0d4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:49:ff:6f:ce:e0:bf:c8:e7:c3:8b:50:54:3a:
ce:08:3b:6f:ab:58:ab:ee:2b:2e:e5:ce:60:ae:b7:
70:83:8b:e1:f9:a6:22:63:66:9b:ee:a5:1a:19:1f:
a9:36:0d:ba:9f:73:7a:4e:b9:91:57:7b:49:c1:35:
dc:39:37:23:15:79:e8:25:57:f7:71:37:1b:52:a9:
17:2f:12:9d:0a:5b:7a:05:ed:ca:af:ba:d1:d0:d8:
3c:7c:81:2c:f6:f2:84:27:6f:09:eb:b5:51:73:ab:
71:ad:6d:37:e0:f5:54:c2:b7:ef:69:48:fb:5b:20:
bb:9c:67:ae:58:c3:8d:35:f5:9d:0f:49:71:e6:7a:
47:a8:ce:95:5a:62:1b:28:8e:61:85:8e:75:48:db:
89:64:ab:55:89:5c:d9:bf:84:3f:a8:0d:4d:27:cb:
76:89:43:36:d4:1f:49:da:e9:df:e1:74:01:1b:b0:
c0:10:7a:d7:45:82:0c:36:ff:4b:44:fb:51:bd:4e:
fe:b6:ec:ab:a5:5c:29:33:66:5d:78:59:0e:71:68:
6a:0d:17:12:10:20:53:b3:a4:29:30:90:ad:5b:93:
f1:5c:e8:6c:b7:fc:cb:3b:ad:f5:be:06:86:80:ea:
3f:32:fe:88:06:a9:b5:a2:8d:1b:34:f0:d0:e1:c7:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A9:3E:00:44:71:77:F3:23:BB:03:F7:E7:80:2D:FD:0D:E0:D4:CE
X509v3 Authority Key Identifier:
keyid:C4:9A:A3:22:6E:AF:AC:1E:77:D2:3E:8F:CE:F1:89:00:38:40:03:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/2qk-AERxd_MjuwP354At_Q3g1M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.16.0/24
IPv6:
2a0d:7780::/29
Signature Algorithm: sha256WithRSAEncryption
5f:87:47:91:e0:f2:6d:a8:a5:6e:a4:c8:c1:79:70:20:df:a5:
46:0a:75:73:cd:6e:0e:1e:c4:97:d3:3b:2f:ee:fb:ed:13:ed:
88:c3:f6:53:76:de:98:bb:2e:d5:f3:1d:b0:d5:aa:c6:bc:ac:
2a:ed:62:32:45:42:9a:3c:82:3e:2d:73:f4:c9:45:8c:e3:93:
5b:a9:b8:a9:74:1e:97:a4:ae:05:89:0e:ac:3a:d1:11:31:bd:
19:40:76:7a:3b:5a:14:08:56:f7:d4:ce:9b:ab:0b:bf:f3:b7:
8a:63:23:ab:a2:ff:f1:c6:be:b5:42:8a:c1:43:ff:5a:f2:58:
49:a4:32:66:d6:94:e5:b0:cd:53:d7:11:b6:eb:af:07:71:c3:
03:ec:2e:a3:2a:f8:54:bd:46:cc:98:f5:d7:4f:a8:2b:43:b3:
3a:df:90:5b:39:b7:46:23:18:a4:cd:2d:6a:30:36:85:ef:63:
05:ec:67:90:08:97:1d:d2:16:22:a5:72:59:1c:d5:79:ad:63:
45:28:85:3b:59:da:47:b4:0b:38:92:f6:0d:f3:ae:0c:c1:f2:
43:03:1b:e0:f4:2c:1a:ab:83:b3:a9:d9:13:02:7a:eb:58:69:
48:1f:6e:c3:c3:ab:4b:d3:47:ea:e4:3a:a8:31:76:55:3c:df:
33:5c:43:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:28 2024 by rpki-client on console-fra.rpki-client.org