Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/QOZdchbBUKPTBGgnxeSpS8nHW3M.roa
File: QOZdchbBUKPTBGgnxeSpS8nHW3M.roa (raw, json)
Hash identifier: xlimrmykJstkTlLBysdhzLFTWzmkAlxTnRffMhd3Z3o=
Subject key identifier: 40:E6:5D:72:16:C1:50:A3:D3:04:68:27:C5:E4:A9:4B:C9:C7:5B:73
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 018CC64B69592A5E0909974678E9D0AA0966
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/QOZdchbBUKPTBGgnxeSpS8nHW3M.roa
Signing time: Mon 01 Jan 2024 18:31:20 +0000
ROA not before: Mon 01 Jan 2024 18:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56347
IP address blocks: 89.21.74.0/23 maxlen: 23
89.21.72.0/23 maxlen: 23
89.21.72.0/22 maxlen: 22
185.95.64.0/24 maxlen: 24
2a10:b200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:69:59:2a:5e:09:09:97:46:78:e9:d0:aa:09:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Jan 1 18:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40e65d7216c150a3d3046827c5e4a94bc9c75b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:d5:23:80:6f:b2:47:da:55:ed:70:89:c0:
bb:ad:3e:00:62:07:81:bc:84:fc:4d:0f:e9:ea:26:
4e:2c:c7:0a:fc:ab:82:82:87:18:82:1b:17:12:4a:
89:29:5d:48:b5:f6:2a:14:6a:be:7e:56:f0:be:8b:
b3:af:28:af:f6:46:52:ec:96:9b:72:60:8b:a1:12:
e1:60:6c:24:ab:08:15:7d:8a:f3:af:8d:2d:53:ae:
ff:1a:e6:de:47:c9:c0:a9:05:17:be:99:44:65:0f:
b8:d5:89:af:36:8c:65:6b:ab:6e:fc:7a:c1:7d:ad:
0d:2f:04:da:b1:c3:d5:fc:e3:8c:de:ae:95:0c:c2:
89:a3:24:35:b0:fb:fa:80:e1:5a:5e:f2:16:72:90:
d4:d9:0b:63:4a:52:44:26:8e:31:5f:92:97:f6:21:
d1:60:2d:25:7b:75:ce:3f:3d:15:35:ea:d6:24:eb:
b5:3c:2f:38:27:6e:25:ff:fd:4d:0b:23:ff:0d:8d:
ad:ff:73:13:64:33:23:99:55:92:a4:1f:1c:7c:de:
a5:6e:31:de:0a:7d:7c:0c:d2:7b:e5:4c:84:17:ee:
2c:4f:bb:b8:2d:a8:c0:2b:48:b2:19:92:4e:0d:f0:
66:8d:34:45:5c:61:01:92:8f:b1:44:68:37:34:67:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E6:5D:72:16:C1:50:A3:D3:04:68:27:C5:E4:A9:4B:C9:C7:5B:73
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/QOZdchbBUKPTBGgnxeSpS8nHW3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.72.0/22
185.95.64.0/24
IPv6:
2a10:b200::/32
Signature Algorithm: sha256WithRSAEncryption
63:59:e7:cf:84:9f:ed:7f:9c:41:7c:72:47:a6:ae:2a:60:3d:
3c:bc:d4:cd:b3:de:3f:99:8f:46:41:9d:8c:22:71:b0:49:a1:
ec:68:6c:cf:4c:5d:cc:8c:86:0e:39:da:d5:8e:71:ad:52:6e:
9e:5a:21:11:40:f7:00:1a:26:37:01:ad:aa:fe:15:2a:70:cc:
cd:ce:e3:50:6b:cf:d2:82:14:5f:bb:e8:02:93:1f:79:68:0d:
72:e4:04:eb:1b:72:41:e8:16:15:0c:f9:53:85:78:73:0e:72:
49:13:9d:28:11:a5:69:09:8e:af:4d:19:10:f2:8b:88:6e:da:
fd:49:5d:ad:9d:14:29:db:c3:40:f2:98:6c:a5:32:d4:f2:48:
0a:78:7d:94:45:36:d9:f2:1e:6a:ae:f8:33:5b:ac:48:91:f6:
b8:c6:6a:8e:74:31:09:6d:c8:53:dc:f0:c9:d0:07:8b:e4:b0:
ac:89:2d:da:35:66:ba:05:97:80:47:5b:75:e6:ce:62:91:fd:
45:f8:31:58:7a:e5:75:86:54:42:e0:02:3e:dc:4c:9f:05:a3:
58:86:3f:45:1d:91:99:37:77:d2:3f:e4:e4:cf:ab:19:d4:55:
52:8c:2e:e4:a9:00:54:13:db:ec:c6:cd:5e:fb:30:d2:0f:cb:
10:90:fa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:39 2024 by rpki-client on console-fra.rpki-client.org