Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/QFDOEP5IjFVqqOQuHtgav38n7dc.roa
File: QFDOEP5IjFVqqOQuHtgav38n7dc.roa (raw, json)
Hash identifier: 4DOT9UQE7x3My/cdE5KyF32qZlgk+1HWtdME73jkRt4=
Subject key identifier: 40:50:CE:10:FE:48:8C:55:6A:A8:E4:2E:1E:D8:1A:BF:7F:27:ED:D7
Certificate issuer: /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Certificate serial: 018CC801CCE025CA44DBF31449F5BC39A574
Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/QFDOEP5IjFVqqOQuHtgav38n7dc.roa
Signing time: Tue 02 Jan 2024 02:30:10 +0000
ROA not before: Tue 02 Jan 2024 02:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56532
IP address blocks: 185.103.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 22:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:cc:e0:25:ca:44:db:f3:14:49:f5:bc:39:a5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Validity
Not Before: Jan 2 02:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4050ce10fe488c556aa8e42e1ed81abf7f27edd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:fd:0a:f8:f3:03:8e:5d:b7:74:be:52:a1:
9d:b6:f0:7c:b3:de:8a:23:f9:16:aa:08:86:73:fa:
5e:c1:d4:86:aa:a1:3c:74:7d:d7:9a:36:7a:12:32:
dd:b8:14:15:8c:4b:96:bd:6e:97:ba:d5:1b:0e:ee:
66:9b:00:d3:b3:0c:e5:04:67:8d:07:ee:6d:50:03:
ad:07:23:f4:ab:12:7a:e6:6a:ee:0c:66:17:c5:6e:
ec:02:b0:a3:fb:b4:45:2d:c8:c8:10:65:89:7e:7a:
a8:1d:fb:19:ab:0c:4b:47:9b:52:1b:7b:e3:47:47:
df:c9:ce:a4:96:f9:6f:7d:df:23:29:ce:c1:a8:d6:
2e:73:ab:5f:e2:32:ee:6a:6b:6e:6f:7b:5c:7a:f4:
75:a6:b8:fb:1d:24:e6:3d:bd:33:21:71:8a:0a:9a:
96:1b:d4:17:37:b6:42:ad:03:70:de:cb:a9:a9:0a:
33:90:39:36:16:a9:c6:89:a0:1f:c2:95:c8:fa:a0:
40:1d:a6:de:2f:d7:df:b9:4e:ac:1a:ed:eb:1f:8a:
b3:65:e1:d6:b1:8b:a4:4d:b0:df:b6:1f:d7:be:fb:
59:f3:28:d1:c9:f3:6e:c2:7e:1f:12:6e:ab:80:be:
1b:e5:17:76:6a:36:f8:8e:10:ed:cb:b9:30:20:1a:
2b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:50:CE:10:FE:48:8C:55:6A:A8:E4:2E:1E:D8:1A:BF:7F:27:ED:D7
X509v3 Authority Key Identifier:
keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/QFDOEP5IjFVqqOQuHtgav38n7dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:51:6d:ab:01:d6:4e:f6:48:91:80:f7:04:d9:d4:a4:5f:36:
6f:ce:fa:2d:e6:af:a6:91:2a:38:e5:49:c5:cf:be:ff:df:18:
1b:4f:8e:52:43:7c:b2:f9:16:57:0a:02:41:13:8c:0c:bf:92:
65:ed:61:48:55:cc:81:18:2a:97:d8:3b:aa:55:42:3d:48:be:
ce:0e:6f:7f:eb:9e:33:d8:98:74:f6:71:69:4c:81:9b:01:81:
21:72:41:a1:07:22:3e:db:9f:78:70:a1:93:1f:e1:dd:fa:bd:
32:10:05:cb:65:91:8b:7f:e9:39:e9:9b:a2:41:4f:40:04:14:
d7:60:60:88:95:cb:9d:96:13:86:55:8a:e9:d9:52:52:de:c8:
a8:5f:fb:20:f1:e2:99:bc:31:f5:e8:59:53:71:5e:f7:ed:fa:
d3:24:33:63:b1:59:10:52:b4:e4:f4:9f:c8:73:03:34:4e:87:
63:90:6c:cc:c1:55:53:2a:40:ad:26:ee:b8:da:cb:ec:0c:3a:
7b:f7:82:ec:72:d6:9b:ca:12:f1:c4:91:44:ef:6d:94:7d:8d:
79:08:5d:ee:19:99:06:e0:3a:ae:d2:13:79:40:b6:fd:bb:78:
12:7f:11:a5:8f:10:3b:4e:0d:7c:ec:2a:e4:63:a2:84:73:fd:
65:25:17:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:57:17 2024 by rpki-client on console-ams.rpki-client.org