Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/Qi_OHXfu1hiOizh3NIPGz_LUSB0.roa
File: Qi_OHXfu1hiOizh3NIPGz_LUSB0.roa (raw, json)
Hash identifier: iw5+sIBLpjz7j+dRbqeKbqwkL+0xyhT0VKgU1xLRDCw=
Subject key identifier: 42:2F:CE:1D:77:EE:D6:18:8E:8B:38:77:34:83:C6:CF:F2:D4:48:1D
Certificate issuer: /CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Certificate serial: 018CC4922E04AA135EDACD27F021C067ADC8
Authority key identifier: 10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/Qi_OHXfu1hiOizh3NIPGz_LUSB0.roa
Signing time: Mon 01 Jan 2024 10:29:23 +0000
ROA not before: Mon 01 Jan 2024 10:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205517
IP address blocks: 185.194.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:2e:04:aa:13:5e:da:cd:27:f0:21:c0:67:ad:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Validity
Not Before: Jan 1 10:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=422fce1d77eed6188e8b38773483c6cff2d4481d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:2b:ce:62:ef:03:cd:fe:9b:2d:cc:0e:82:
a3:bb:1d:ad:b9:43:4d:7c:98:36:64:f0:2d:dc:37:
5f:48:d8:7e:b4:cb:a5:2b:4c:d3:19:b8:c5:06:96:
35:24:29:f1:b0:96:d7:8c:e1:e8:fa:74:b9:59:be:
3d:79:03:3f:ad:d6:de:4f:04:c8:44:67:98:a6:23:
c3:58:b9:b8:29:c5:ec:63:9a:74:e8:c6:e0:4a:40:
58:c5:56:9e:96:99:4d:2d:46:17:23:55:40:bf:92:
52:75:22:f6:aa:01:a4:5f:a0:16:bb:53:6b:52:c4:
ea:dc:83:50:1a:c2:ec:98:f9:70:08:20:67:e2:fe:
76:89:be:82:6c:74:27:50:ba:c7:0a:c3:e9:3c:5c:
2a:52:cd:96:47:5b:1d:d0:a0:18:66:a4:cc:73:62:
6e:6e:56:e2:51:9d:99:28:63:c6:b3:ac:21:d7:1b:
5b:21:f4:17:80:22:45:a2:c8:2f:79:e4:92:a0:75:
51:ab:90:cb:06:8f:d5:25:cf:dd:63:00:ad:d1:68:
d0:53:3e:22:43:8f:78:32:92:f2:a3:a5:39:84:2a:
ba:05:30:75:67:c6:fe:9f:9f:d4:16:4d:fb:fb:2e:
66:06:bc:01:7e:a8:c1:e2:d9:21:04:bd:9a:e4:e1:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:CE:1D:77:EE:D6:18:8E:8B:38:77:34:83:C6:CF:F2:D4:48:1D
X509v3 Authority Key Identifier:
keyid:10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/Qi_OHXfu1hiOizh3NIPGz_LUSB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.115.0/24
Signature Algorithm: sha256WithRSAEncryption
63:74:53:50:f3:be:ff:68:d9:e8:7f:95:13:3e:a4:f2:7c:d8:
5f:2b:8e:7b:15:49:5a:d5:4d:f6:7f:5a:d4:6a:1b:21:75:e3:
b8:ea:12:13:34:74:52:1b:cf:c4:b0:db:77:77:80:f2:df:95:
33:5b:3c:4f:bb:0c:7c:47:f2:74:56:ac:26:7f:e9:e4:01:b5:
bc:ed:63:24:18:6d:6b:d6:e6:8d:27:cc:d9:03:43:31:ff:62:
8e:e9:46:c6:42:ec:2d:a7:bd:c4:dc:71:38:7a:31:10:9e:45:
76:a0:4b:1c:81:5c:42:ee:ef:44:88:5c:84:e3:fd:3e:a5:55:
e5:28:c4:6d:b1:fb:65:5b:47:e6:e8:60:80:90:13:7b:3f:e4:
24:4a:61:16:08:0d:3a:24:c6:f1:e2:e3:46:1c:08:da:f5:5e:
77:7d:72:3e:29:94:01:62:43:d6:63:54:18:09:bd:f6:d3:67:
5d:d7:bc:79:20:f2:cd:c1:0b:ab:60:d0:cc:23:5e:64:e5:1b:
4d:47:fb:78:c5:1c:aa:86:27:fe:08:81:3d:0a:fb:9d:20:3a:
1d:d1:40:9d:a8:d4:50:b3:1d:70:6b:e0:c4:b5:75:05:3b:51:
42:67:a1:6e:9d:a5:11:ba:b1:77:e0:92:2b:c8:2b:0d:35:87:
18:d3:38:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:01:46 2024 by rpki-client on console-fra.rpki-client.org