Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/QCDRP-RMOxGYDp_Chw4PKJtKi3A.roa
File: QCDRP-RMOxGYDp_Chw4PKJtKi3A.roa (raw, json)
Hash identifier: RO1voxSewD55U1A/5MFmQfqwpG4MhNwj8vZAV31n2lk=
Subject key identifier: 40:20:D1:3F:E4:4C:3B:11:98:0E:9F:C2:87:0E:0F:28:9B:4A:8B:70
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 018CC2DAD8FA3BFEA559A8CE7B5434867107
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/QCDRP-RMOxGYDp_Chw4PKJtKi3A.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20493
IP address blocks: 193.108.21.0/24 maxlen: 24
185.113.160.0/22 maxlen: 24
2a06:6a00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d8:fa:3b:fe:a5:59:a8:ce:7b:54:34:86:71:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4020d13fe44c3b11980e9fc2870e0f289b4a8b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:dd:c9:89:a6:51:38:a7:d5:91:08:0c:a9:
f3:bf:62:5a:cb:aa:bc:17:52:cc:cc:11:2c:d9:e1:
ee:ba:d9:81:97:f7:5e:5e:73:ec:30:87:4f:a3:35:
44:87:c4:d0:10:9b:4d:20:9c:35:45:32:dc:8e:09:
33:a5:ba:90:a7:b0:f1:2c:c1:2f:c0:4f:c2:0e:01:
4e:f1:72:20:d1:78:8e:bd:d6:c9:41:f3:48:9f:9f:
92:03:f2:97:ba:d8:13:f8:47:3d:3a:df:18:d1:1d:
4b:5e:9c:60:50:46:49:fa:82:0b:4c:f8:06:6d:dd:
82:e2:b9:30:e9:f4:0e:e7:ee:0f:5c:01:1b:80:d1:
f0:e9:90:54:62:4d:0a:11:2d:92:ed:0d:12:a7:d6:
00:ac:03:ea:a9:c8:8f:21:8f:f9:4a:3b:06:f9:15:
d9:f5:9c:0a:f1:4c:eb:b6:b7:ce:cf:a1:d0:40:ba:
f5:55:b3:04:5c:15:10:d3:3e:53:64:0e:c5:32:23:
3e:21:82:dc:06:e2:5e:27:94:b0:ba:da:f7:1b:46:
a9:a9:71:5d:2f:4f:3b:c4:98:24:c0:8a:9d:34:ea:
7a:f3:d7:a9:da:c3:65:09:a8:5d:8a:f4:fb:ef:7b:
4e:c8:6e:0e:ac:32:20:0f:79:32:40:88:17:9f:d2:
07:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:20:D1:3F:E4:4C:3B:11:98:0E:9F:C2:87:0E:0F:28:9B:4A:8B:70
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/QCDRP-RMOxGYDp_Chw4PKJtKi3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.160.0/22
193.108.21.0/24
IPv6:
2a06:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
6b:d7:41:af:8c:bd:31:f0:a7:8f:f2:8a:b4:ea:f4:98:98:58:
7a:43:6c:be:37:7d:af:54:0d:38:17:02:d5:a5:d2:61:b9:c7:
92:dd:a5:a8:5d:01:a8:e7:3b:d2:c6:0a:2a:15:74:66:37:7c:
16:1e:4f:b3:42:98:b5:69:93:50:4f:fb:db:9f:7b:1f:e2:98:
8d:42:23:d2:eb:7f:1a:38:20:4c:73:1a:79:c6:ce:5a:3f:07:
b1:2c:8b:53:8d:85:e6:6c:f6:71:7b:83:02:93:00:0e:e5:7e:
4b:78:89:87:65:93:1e:77:b0:3a:59:fd:94:49:c4:80:98:ba:
41:00:80:47:6d:e3:33:f9:ee:cb:fd:5a:8f:52:27:0d:6b:a2:
0c:a9:ec:c3:14:3e:6d:fc:59:12:a4:1a:20:0b:90:2f:e6:95:
f6:79:a2:11:29:02:bf:d6:e8:74:25:40:c7:2d:f2:5a:9c:2d:
04:ce:b4:f2:97:28:a1:c5:e3:fe:c6:17:4a:6b:75:b5:94:6f:
cf:b0:5c:76:56:d5:1b:58:10:fb:d6:d7:9e:92:4e:c2:c3:b6:
aa:31:f5:b4:a3:67:d6:39:03:51:b2:a0:07:65:22:00:78:2d:
1e:69:22:96:5e:50:15:01:7f:62:1a:a5:4b:ac:2c:b5:79:ef:
06:20:eb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:02:55 2024 by rpki-client on console-fra.rpki-client.org