Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/_NPKQ-d8O2sOenTGpK3-zkJsgkk.roa
File: _NPKQ-d8O2sOenTGpK3-zkJsgkk.roa (raw, json)
Hash identifier: nVLB4c0OHi4POyk8ZD7zhvOwgivZJTbLNxqJTiZC+Pw=
Subject key identifier: FC:D3:CA:43:E7:7C:3B:6B:0E:7A:74:C6:A4:AD:FE:CE:42:6C:82:49
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 018CC5DC86942D2D998173E2EBE30AC8F412
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/_NPKQ-d8O2sOenTGpK3-zkJsgkk.roa
Signing time: Mon 01 Jan 2024 16:30:13 +0000
ROA not before: Mon 01 Jan 2024 16:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204814
IP address blocks: 185.239.28.0/22 maxlen: 24
45.128.248.0/22 maxlen: 24
84.252.96.0/22 maxlen: 24
45.158.24.0/22 maxlen: 24
2a0c:4780::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:86:94:2d:2d:99:81:73:e2:eb:e3:0a:c8:f4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Jan 1 16:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcd3ca43e77c3b6b0e7a74c6a4adfece426c8249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:04:53:05:d9:78:28:c6:03:9d:ac:90:91:
87:ef:25:d4:43:de:6b:4c:28:f8:2c:b5:f5:82:5c:
4a:fe:d1:a5:de:df:ae:dc:18:33:fa:ef:2f:a3:31:
2d:0e:dd:11:4b:1c:96:6c:e1:ad:18:eb:67:6a:d5:
ee:f0:25:bd:9b:90:19:d6:ea:0e:0c:b8:03:f4:c8:
45:f0:b6:72:a5:a3:d3:ab:9b:31:a5:e1:f3:0d:85:
3f:00:c3:8f:7a:89:92:82:31:dc:03:d6:8b:24:49:
dc:09:5a:56:34:30:bd:a9:0c:32:ac:cf:a3:8c:96:
f0:5c:85:24:ed:98:6d:53:c8:2e:9e:49:74:20:79:
a1:3b:3a:08:cb:de:24:6c:99:d4:bf:0e:a0:a3:54:
39:6e:0d:1a:70:c9:d4:c2:46:40:b3:ea:76:76:16:
c4:87:87:6c:e8:62:b0:07:02:cd:2d:f4:b6:60:4e:
08:da:72:a0:ea:d3:e2:f7:db:ed:04:c0:0e:79:f4:
95:5b:4b:70:be:2d:15:ac:96:a9:58:e3:78:a7:a3:
83:0f:5a:f0:3c:26:4e:12:1d:62:d5:e3:1f:3f:e8:
e4:d1:2a:e4:a0:b6:a0:b3:45:4a:bf:30:c7:a5:6b:
05:6b:c6:12:38:ba:0f:71:12:8f:48:88:96:5c:b2:
a7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D3:CA:43:E7:7C:3B:6B:0E:7A:74:C6:A4:AD:FE:CE:42:6C:82:49
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/_NPKQ-d8O2sOenTGpK3-zkJsgkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.248.0/22
45.158.24.0/22
84.252.96.0/22
185.239.28.0/22
IPv6:
2a0c:4780::/29
Signature Algorithm: sha256WithRSAEncryption
b9:d8:32:16:f0:03:4b:38:ea:07:70:10:db:7c:63:07:c6:b0:
ac:6d:d0:45:68:20:92:a9:10:c6:0f:f8:4c:f9:a4:b0:ee:fe:
fd:03:23:c9:d6:14:ad:1c:56:58:30:3b:25:a8:98:15:0c:0f:
13:3a:6f:3e:4f:ef:aa:4b:aa:99:56:6e:70:9f:d2:4c:80:db:
4c:8e:40:fd:27:b6:4b:f7:0d:99:91:ad:ba:37:91:1f:71:63:
0b:23:b2:a5:f2:76:ca:5a:a8:a7:72:81:96:6e:b6:6a:6e:1c:
98:1b:d8:2e:7f:30:31:51:9f:94:0d:58:ca:51:97:82:ed:ab:
8f:41:3e:35:98:7e:6f:44:c2:18:0e:93:54:61:d1:f4:ea:4b:
3a:23:8d:80:19:8e:67:c2:9f:a4:3f:e9:42:30:ac:cb:a7:9c:
de:84:ba:e0:30:05:6c:26:a7:f1:02:12:d3:65:96:e5:55:0a:
99:75:aa:66:8d:fe:00:75:49:ef:d4:09:a5:f7:92:b6:1e:e5:
e9:22:e4:53:e4:9d:19:6b:a5:c5:8d:db:a1:d3:36:ce:7a:dc:
bb:f0:25:ed:29:25:23:18:3b:b6:fb:f0:9b:e7:21:37:2b:bf:
e9:51:19:85:88:79:a0:fb:cf:38:3f:5b:2f:1b:3b:8a:45:03:
f2:a4:4d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:52:09 2024 by rpki-client on console-fra.rpki-client.org