Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/QrEc5VlePkRUrj0BBNGsfQr603s.roa
File: QrEc5VlePkRUrj0BBNGsfQr603s.roa (raw, json)
Hash identifier: bdMXBs00habtsN8miQK8EtPeO5HElRuDJVE7tXRQnNw=
Subject key identifier: 42:B1:1C:E5:59:5E:3E:44:54:AE:3D:01:04:D1:AC:7D:0A:FA:D3:7B
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 0192499E11B1FE9013A61F0F55832B0D1438
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/QrEc5VlePkRUrj0BBNGsfQr603s.roa
Signing time: Tue 01 Oct 2024 19:45:48 +0000
ROA not before: Tue 01 Oct 2024 19:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197393
IP address blocks: 185.138.68.0/22 maxlen: 24
193.138.152.0/22 maxlen: 22
2a07:bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:49:9e:11:b1:fe:90:13:a6:1f:0f:55:83:2b:0d:14:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Oct 1 19:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42b11ce5595e3e4454ae3d0104d1ac7d0afad37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:14:74:d3:d5:e9:87:05:2d:7e:f0:9c:58:
30:92:ab:eb:56:15:14:4f:d3:49:ba:a6:9d:57:90:
e3:47:cc:11:28:33:5b:59:54:97:bf:10:72:11:08:
f1:e6:0f:3a:af:b0:18:78:8b:2f:d4:3a:e8:e8:42:
eb:f8:7d:56:44:4d:64:ac:8f:ba:e9:70:6c:fd:eb:
91:6a:0d:26:eb:14:ca:62:7d:b0:42:83:65:d6:a5:
62:7b:a3:34:c7:78:73:00:ea:25:c7:eb:85:25:c1:
93:f1:a7:31:d3:16:4e:5d:02:94:6b:ea:5a:fd:27:
58:8d:23:b6:3c:45:cf:2b:5a:e0:be:99:04:80:a2:
38:40:aa:e4:43:a6:80:c5:05:23:3b:03:0e:88:f1:
92:2a:f5:f5:a4:13:67:9f:de:18:ac:70:51:12:7d:
4d:e9:1f:ce:96:ff:a1:33:76:d0:1d:33:65:20:16:
ba:b2:fc:89:d1:0e:87:75:a9:5e:00:d5:b0:4a:78:
ad:7a:58:9e:88:14:9a:83:a1:b6:e0:92:6f:ff:9a:
eb:ec:30:4d:d6:2f:7c:0b:82:87:23:ae:11:e4:8a:
4d:8c:8f:fb:be:f8:73:17:00:75:e7:c4:4f:ed:b6:
2b:73:3c:2d:70:7f:c8:ea:8e:91:56:a3:f8:db:1a:
30:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B1:1C:E5:59:5E:3E:44:54:AE:3D:01:04:D1:AC:7D:0A:FA:D3:7B
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/QrEc5VlePkRUrj0BBNGsfQr603s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.68.0/22
193.138.152.0/22
IPv6:
2a07:bc0::/29
Signature Algorithm: sha256WithRSAEncryption
6e:3e:a5:ea:5c:1c:61:19:c0:51:1b:53:06:08:f5:f1:4c:ba:
97:5e:c2:ff:6d:7b:dc:7c:75:7e:1b:02:73:06:e3:fd:24:ea:
f4:a3:34:e9:ab:fc:6d:a7:dd:6e:61:85:6a:ee:43:b7:42:f7:
82:77:af:d2:35:e3:81:20:90:7f:1e:12:b4:6b:57:1b:f5:13:
63:89:8c:de:9d:db:78:74:72:f4:c1:cc:65:2e:13:c8:7a:e0:
39:ca:11:d2:50:26:8a:ee:bf:44:7b:4d:db:83:6e:4a:94:ef:
37:05:37:fc:1d:9a:c7:ae:e8:22:8f:8c:36:f2:f6:75:d2:35:
0d:d7:12:cd:75:46:c6:12:46:2d:7b:49:1b:94:04:d3:bd:ec:
a8:96:37:5d:c3:b4:24:40:e2:5b:b6:5b:eb:9b:a3:eb:a4:55:
80:36:7c:76:ab:69:9d:7d:fe:81:1b:53:50:da:a2:fb:3b:1c:
f2:a3:6b:21:b5:cc:5b:71:e6:da:3b:e5:f0:d5:60:d6:7c:d6:
31:3f:42:9b:78:00:a5:0e:cb:88:62:db:d1:60:f2:f3:41:51:
a0:73:1f:76:94:8e:d6:9a:57:0f:6e:21:90:68:3d:c1:c0:a1:
49:b8:d4:0e:ff:e9:27:cd:ec:17:c2:5b:fe:b4:8d:12:34:90:
cc:dc:a7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:07:59 2024 by rpki-client on console-fra.rpki-client.org