Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QBSxd01WbU8_B5JyvEHiPPZbOCE.roa
File: QBSxd01WbU8_B5JyvEHiPPZbOCE.roa (raw, json)
Hash identifier: Yq1EGnLQZCU6c21kXsNbZdO4ggg4ngbIsiJ2Y7sd570=
Subject key identifier: 40:14:B1:77:4D:56:6D:4F:3F:07:92:72:BC:41:E2:3C:F6:5B:38:21
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018FA4D719FEBCEACE80AA4CD77E1D297397
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QBSxd01WbU8_B5JyvEHiPPZbOCE.roa
Signing time: Thu 23 May 2024 09:45:11 +0000
ROA not before: Thu 23 May 2024 09:45:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56655
IP address blocks: 45.89.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a4:d7:19:fe:bc:ea:ce:80:aa:4c:d7:7e:1d:29:73:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 23 09:45:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4014b1774d566d4f3f079272bc41e23cf65b3821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:2b:4a:eb:ea:48:c9:32:c6:d6:7f:e7:72:
1d:36:5b:b7:c6:3b:85:5a:8c:d4:38:29:00:5c:81:
2f:e0:2f:df:87:4d:85:47:ce:57:29:7b:f6:bd:05:
68:99:62:f4:54:92:fa:16:c5:6b:95:45:d8:e8:b1:
53:41:c1:47:27:d6:11:ee:b4:78:8c:d3:2f:f7:b5:
1e:63:b3:ee:e3:c3:c0:77:1f:52:30:ba:71:aa:10:
af:5c:df:f7:f9:f0:9f:68:dc:7a:99:7f:07:99:a7:
b0:4b:b1:d3:2a:db:fb:50:0c:b0:e5:b7:9d:3d:9b:
1d:33:3c:2b:38:a2:c8:5d:86:c3:0d:90:6a:3b:2d:
0d:ed:bf:86:6c:72:0e:b2:71:fd:42:2e:ac:ce:81:
e2:a3:04:5b:31:fe:c8:21:e0:8f:ed:0d:5d:c5:8b:
dc:3a:23:58:0e:ed:9d:2c:e1:90:d9:1c:b9:dd:89:
1b:26:54:8d:18:bd:71:91:cf:28:9c:ec:fb:7d:a6:
7c:b5:30:13:da:e9:e3:e2:6c:13:6f:9f:0e:31:63:
e2:dd:cd:a3:39:62:f5:f7:58:08:30:66:f0:73:dc:
52:de:93:87:ec:ac:65:32:82:6b:80:69:6d:78:e0:
47:bc:61:04:b6:f4:de:8d:08:54:b3:e6:74:65:56:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:14:B1:77:4D:56:6D:4F:3F:07:92:72:BC:41:E2:3C:F6:5B:38:21
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QBSxd01WbU8_B5JyvEHiPPZbOCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f1:30:4c:93:1a:4f:0d:78:36:c9:d4:e9:f3:c9:28:9e:21:
35:ec:ae:53:fd:42:da:1c:88:d8:a1:e1:b5:7d:a7:6a:b8:df:
bf:55:72:a3:56:44:30:cd:7b:50:2d:de:94:97:1f:4a:a3:71:
29:68:b0:73:5c:cf:f0:fe:72:a5:62:90:45:ef:1e:42:8b:7b:
47:d5:7a:85:24:25:cf:01:0a:e8:de:33:60:7b:ad:03:3c:82:
0c:c1:88:04:81:17:39:65:a7:08:f9:71:56:eb:34:94:55:1a:
a8:84:24:8f:02:ff:f6:d6:df:12:0d:cc:0b:d5:70:c8:14:a5:
ad:cc:26:c0:dd:a3:db:e4:68:63:56:df:b3:ad:71:26:9e:3c:
86:41:d7:47:67:1d:78:6b:ab:76:e8:82:f9:d8:7f:b6:da:42:
3c:26:f2:91:83:22:3c:2d:a6:bc:38:14:39:43:fb:59:bb:26:
e1:18:52:bb:8d:d4:33:22:d4:a0:22:1b:75:db:7c:cc:27:fa:
85:d0:5e:44:f2:0b:b9:88:e7:33:c6:bb:18:1b:9a:ae:3f:a9:
f3:0d:27:5c:84:a5:c1:d5:b8:98:a2:f1:1e:ec:a9:95:73:30:
d5:7c:14:8b:87:f1:b6:e1:b7:5a:11:2a:5e:b3:88:5a:87:df:
53:1e:da:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:28:19 2024 by rpki-client on console-ams.rpki-client.org