Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/qdTYXzy-Pok5BO-WCrtpBn5uxzE.roa
File: qdTYXzy-Pok5BO-WCrtpBn5uxzE.roa (raw, json)
Hash identifier: fn8a9IKwy1ZxNqeUMUdre0CE8WqFSZS6bcEEWSYJ00U=
Subject key identifier: A9:D4:D8:5F:3C:BE:3E:89:39:04:EF:96:0A:BB:69:06:7E:6E:C7:31
Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial: 018CCA2A467DEE736BCC3A3CA243CCE7F33B
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/qdTYXzy-Pok5BO-WCrtpBn5uxzE.roa
Signing time: Tue 02 Jan 2024 12:33:37 +0000
ROA not before: Tue 02 Jan 2024 12:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15576
IP address blocks: 185.187.120.0/22 maxlen: 22
2a0b:9e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:46:7d:ee:73:6b:cc:3a:3c:a2:43:cc:e7:f3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Validity
Not Before: Jan 2 12:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9d4d85f3cbe3e893904ef960abb69067e6ec731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:12:96:80:f4:65:d6:f5:e2:6e:9b:96:db:96:
a7:4c:a5:85:3a:69:de:c9:bf:c6:c0:7c:08:a1:b1:
c1:97:b1:5d:df:df:67:33:8f:e0:87:b7:bc:0a:c7:
ce:92:ce:3e:fe:99:fc:83:30:8a:22:7e:9f:6e:2b:
9b:fd:ce:1c:59:11:e9:2b:ff:a3:3b:5f:86:31:42:
cd:bf:ad:c1:24:07:4d:7a:4e:85:27:8b:77:a4:70:
51:b5:88:8f:c1:cd:f4:66:48:ed:26:75:fd:86:eb:
19:74:3e:39:d4:63:01:0a:78:39:f6:e2:14:16:c9:
73:28:6c:d1:76:06:dd:65:eb:26:23:1e:15:ec:0c:
6b:4e:72:9b:e7:37:fd:24:2a:46:f8:74:10:de:50:
6e:f4:6e:e1:73:3f:69:00:57:b7:7e:4d:fa:2d:fd:
cc:c1:b3:55:af:fd:8c:e5:b4:f4:66:14:91:a7:f2:
ae:54:21:45:ca:fd:48:fb:65:ab:0f:40:af:f6:40:
ed:e9:fe:d9:46:dc:ab:5d:cc:9a:88:f8:9c:72:2c:
0b:63:95:fc:9a:c4:c5:c4:16:64:bf:26:99:80:af:
6a:05:6d:03:88:5b:ce:18:4c:a9:6d:62:a3:04:bf:
4d:2b:2b:ad:e5:b8:08:3d:58:64:1b:2f:89:74:56:
ce:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D4:D8:5F:3C:BE:3E:89:39:04:EF:96:0A:BB:69:06:7E:6E:C7:31
X509v3 Authority Key Identifier:
keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/qdTYXzy-Pok5BO-WCrtpBn5uxzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.120.0/22
IPv6:
2a0b:9e80::/32
Signature Algorithm: sha256WithRSAEncryption
21:04:79:1a:76:cd:97:93:b8:5c:92:86:4f:ca:71:f8:3e:c2:
06:a3:a0:8f:c4:1d:49:46:9c:6f:93:e3:3d:89:42:71:13:1f:
32:e3:dd:ef:a0:61:bb:24:ac:85:b6:14:ae:23:7f:81:13:d2:
05:c9:52:21:b0:0a:63:5f:36:4f:9b:e9:33:98:1b:ef:ff:ad:
69:7e:ff:94:fc:28:fd:4b:ee:bb:16:c6:36:08:8a:65:63:cd:
8e:56:59:56:18:bb:0d:4c:3c:e3:16:21:3d:1d:0b:6a:7f:0b:
03:72:12:f3:22:71:fe:43:1e:72:99:9c:6a:1b:8b:11:4c:10:
1b:7a:66:64:59:b9:fa:0c:12:b9:c0:bd:1e:46:ea:59:d8:0d:
61:88:cc:12:79:af:c2:e0:24:26:7a:0d:cd:81:01:00:d0:f8:
67:dd:0b:a4:f1:91:ce:d3:9d:c8:20:e4:e8:65:15:d6:65:76:
f7:78:57:ee:f7:39:b3:21:c6:5f:b8:6d:01:5e:b6:03:dd:f4:
b6:d7:10:cd:04:46:f9:81:9a:1d:e5:8f:81:54:69:0e:44:fe:
f1:66:ea:be:98:24:c6:8e:60:6e:a9:57:b8:6b:48:78:99:88:
c8:77:6a:0e:99:30:e2:f3:af:1a:bc:59:19:e5:71:1b:2c:8e:
05:3b:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:13:57 2024 by rpki-client on console-fra.rpki-client.org