Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/QM5D-CDjL9WV-Tdv68XgJjkCeoU.roa
File: QM5D-CDjL9WV-Tdv68XgJjkCeoU.roa (raw, json)
Hash identifier: U9ClZSwV4qrOFO6XUoKo+xTX6S2gnUZq+587anKwzqA=
Subject key identifier: 40:CE:43:F8:20:E3:2F:D5:95:F9:37:6F:EB:C5:E0:26:39:02:7A:85
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 018CCA2B7CD19934057F0BA270C1606E8DAF
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/QM5D-CDjL9WV-Tdv68XgJjkCeoU.roa
Signing time: Tue 02 Jan 2024 12:34:56 +0000
ROA not before: Tue 02 Jan 2024 12:34:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6736
IP address blocks: 94.184.0.0/16 maxlen: 24
185.62.232.0/22 maxlen: 22
194.225.0.0/16 maxlen: 24
2001:678:b0::/46 maxlen: 48
2001:14e8::/32 maxlen: 48
2001:14e8::/48 maxlen: 48
2001:14e8:1::/48 maxlen: 48
2001:14e8:0:405::405/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:7c:d1:99:34:05:7f:0b:a2:70:c1:60:6e:8d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 12:34:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40ce43f820e32fd595f9376febc5e02639027a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:32:9e:b6:c5:c4:68:aa:35:82:e7:81:d5:bd:
f1:32:95:f0:dc:96:6b:82:a5:d3:9a:25:14:49:2f:
28:bf:bd:12:97:d6:0c:01:0c:15:f4:4c:4c:bb:23:
e4:08:8e:6d:7a:73:6f:dc:e9:90:30:b7:22:ce:1f:
8f:45:75:bd:59:68:6b:a0:02:b1:d2:31:e6:88:39:
c7:14:e8:b1:fa:6f:85:1a:54:97:a7:68:d7:4f:83:
cb:09:14:0d:df:7a:f3:ed:08:54:cf:66:1c:3a:98:
26:44:56:88:7e:5b:14:c6:9a:23:60:d2:a0:34:d6:
47:1a:8c:67:00:02:31:be:a5:b5:38:09:ec:fc:06:
d7:ac:4f:cb:34:36:55:46:5d:84:c5:25:e0:9d:fe:
21:91:5c:60:90:ae:76:15:ba:72:73:41:ab:02:97:
26:2f:48:d6:62:f5:16:51:b5:4d:f8:04:58:b8:fe:
42:2d:12:d0:8d:54:6b:08:b0:09:cc:f5:d0:16:a2:
69:6b:9d:d4:a7:e3:29:21:2e:cc:68:cf:15:3e:27:
ed:e1:56:d0:e7:3b:dc:c4:55:34:c3:d4:9e:e3:39:
a5:b9:4d:75:63:0a:49:71:4f:3d:c3:08:46:d2:1a:
df:45:bf:79:fc:8a:77:d3:c1:46:64:80:78:ff:1a:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CE:43:F8:20:E3:2F:D5:95:F9:37:6F:EB:C5:E0:26:39:02:7A:85
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/QM5D-CDjL9WV-Tdv68XgJjkCeoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.0.0/16
185.62.232.0/22
194.225.0.0/16
IPv6:
2001:678:b0::/46
2001:14e8::/32
Signature Algorithm: sha256WithRSAEncryption
5e:32:73:13:e3:c7:36:50:6c:1d:96:27:30:d6:7a:a9:41:15:
ff:99:4e:52:f8:ff:74:af:4d:73:e5:92:b0:a9:59:e7:2d:46:
75:51:f7:5e:9e:03:d4:42:23:57:e3:3a:25:55:92:18:53:82:
10:c2:4b:2e:29:ca:aa:72:07:c6:4c:65:3c:19:75:85:9c:07:
ef:c8:9d:6a:d4:6f:9c:9b:99:49:2a:aa:e8:d0:a8:b2:41:b8:
3d:fa:62:1b:ee:d0:1f:fd:63:db:77:10:57:3b:1f:4e:11:29:
63:44:a3:3b:14:15:1c:e3:8d:55:bd:28:2b:72:7c:43:da:7c:
ba:d5:85:a7:f8:94:94:71:80:4a:f7:9d:b6:43:14:30:f3:df:
76:56:41:34:1c:5e:e6:9e:e6:2c:35:7a:fb:30:a5:29:ca:ae:
c7:2e:46:2b:57:11:b6:a9:a5:24:63:6d:dd:b0:c5:f7:a5:8f:
56:e4:66:77:f2:aa:15:63:50:c6:50:c5:05:fb:54:b2:5a:c6:
f8:1c:91:ef:6c:b0:f1:8c:60:92:08:0b:64:71:76:e0:b5:1b:
05:dd:1d:10:88:85:f9:c2:39:9c:e4:48:01:70:40:5c:b9:bc:
82:c7:e9:27:64:e1:85:79:32:85:b9:71:3f:90:43:5d:ae:70:
5a:4d:4c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:58:49 2024 by rpki-client on console-ams.rpki-client.org