Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/QN7-2pvz-zlc86VHXAvWZBwelSA.roa
File: QN7-2pvz-zlc86VHXAvWZBwelSA.roa (raw, json)
Hash identifier: 1StUB7vWQyVZ6PHJmbhkzXxWgZsqAhwPO+K+GGyljMo=
Subject key identifier: 40:DE:FE:DA:9B:F3:FB:39:5C:F3:A5:47:5C:0B:D6:64:1C:1E:95:20
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 018CC500D35FACBF6DCA8CBB4F5967E920CE
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/QN7-2pvz-zlc86VHXAvWZBwelSA.roa
Signing time: Mon 01 Jan 2024 12:30:14 +0000
ROA not before: Mon 01 Jan 2024 12:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206061
IP address blocks: 185.24.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d3:5f:ac:bf:6d:ca:8c:bb:4f:59:67:e9:20:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: Jan 1 12:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40defeda9bf3fb395cf3a5475c0bd6641c1e9520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0a:6a:7c:79:24:6c:c6:cc:17:53:4c:cc:8b:
88:d2:53:b6:aa:57:9d:68:46:84:5f:80:b1:57:ba:
4c:bf:f8:d3:69:8c:9b:9c:9c:5c:46:c8:f6:09:f3:
bd:ad:0e:27:e2:58:b3:01:01:de:cf:c7:26:93:14:
a8:11:e9:52:b2:ae:b1:74:99:06:d0:1e:79:85:9f:
7d:e4:2b:cd:64:56:d9:62:a9:39:af:29:a2:e8:1a:
47:04:05:99:cf:32:68:3d:0f:97:8f:31:f0:b6:6f:
bf:0c:b3:d2:35:79:b4:1d:ca:84:fd:26:17:38:11:
f0:10:eb:e5:ee:41:f9:6d:2d:af:45:cc:a3:57:7e:
ed:c8:a1:0d:ff:90:ff:c7:ea:d9:d9:fd:41:2a:ae:
56:e2:fc:5c:a4:11:17:a0:62:6d:97:ca:e4:14:ee:
af:8e:65:84:25:a2:6a:18:7e:db:92:7c:cb:1e:f1:
88:96:e6:da:38:d7:fa:cd:8d:3c:89:66:cb:d1:3b:
e4:ec:0d:da:12:8c:b2:4b:4c:70:16:e8:1f:57:71:
76:17:19:02:86:04:05:31:3b:24:ed:0c:3c:d5:42:
b7:51:d1:ac:c9:a4:14:58:e1:d6:58:49:56:fd:92:
8f:c1:04:ab:d5:c0:a2:54:ce:2d:5a:40:b5:c5:3a:
22:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DE:FE:DA:9B:F3:FB:39:5C:F3:A5:47:5C:0B:D6:64:1C:1E:95:20
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/QN7-2pvz-zlc86VHXAvWZBwelSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:eb:17:66:0e:1a:30:80:73:43:14:93:1f:83:99:f5:77:68:
83:28:16:71:07:f6:ae:fb:37:d8:35:11:49:75:c0:0a:32:58:
76:82:95:8a:70:7f:cf:fd:fd:7f:e8:ec:f6:aa:80:96:c2:f3:
c9:09:fc:17:d1:c5:04:80:56:31:16:2e:28:54:aa:ae:22:4f:
ba:fe:68:74:ac:39:5f:67:1b:94:0e:c2:2a:1c:c6:ec:d5:90:
b5:0b:80:36:fc:19:d4:87:99:bc:0c:19:5e:4f:1c:09:a7:14:
99:28:83:76:e4:1d:12:dd:d5:89:38:1e:2c:da:43:0a:de:cb:
af:ed:67:28:7b:73:2c:e9:d3:e9:4d:5b:ae:bc:40:a0:d6:69:
04:fa:d0:39:d7:1b:d4:b9:74:52:cf:5c:c7:99:c2:d3:85:b5:
da:03:b3:c1:1b:88:f6:45:f5:66:23:9e:cf:f1:8e:46:b7:78:
86:48:e6:e5:51:86:44:60:bc:e2:ce:d1:0c:80:e4:60:4e:48:
f2:15:8d:8f:ea:9c:de:0e:30:63:82:56:63:1c:8f:5a:ec:cc:
29:30:3b:ad:eb:35:e4:ff:ac:94:c3:c4:d4:f0:32:1f:d0:1d:
4f:e4:f1:2c:be:51:ee:c8:6e:68:62:b6:80:53:ad:a8:2b:44:
a7:04:cd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:07:37 2024 by rpki-client on console-fra.rpki-client.org