Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/QVWDb2FrY-E4yaw_4RQEp-CgVtU.roa
File: QVWDb2FrY-E4yaw_4RQEp-CgVtU.roa (raw, json)
Hash identifier: lhLLK/BdN2ApARN+aIE8HeDSS/pwJImZbI0Eo4Zp390=
Subject key identifier: 41:55:83:6F:61:6B:63:E1:38:C9:AC:3F:E1:14:04:A7:E0:A0:56:D5
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F90F61D8D9971C9B8126A779860FF
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/QVWDb2FrY-E4yaw_4RQEp-CgVtU.roa
Signing time: Tue 02 Jan 2024 04:30:03 +0000
ROA not before: Tue 02 Jan 2024 04:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43956
IP address blocks: 80.233.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:90:f6:1d:8d:99:71:c9:b8:12:6a:77:98:60:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4155836f616b63e138c9ac3fe11404a7e0a056d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e1:b4:84:32:7c:7c:1f:37:25:0f:a2:d0:17:
32:db:af:22:35:91:d7:ea:b1:09:13:99:62:fb:88:
16:27:9c:20:27:ce:b7:f1:fd:33:38:38:65:5e:e8:
a4:c7:f6:9e:8e:a2:f0:80:ca:d1:1c:79:82:55:c2:
0e:a5:2f:af:88:8a:b5:62:65:41:20:83:94:bf:56:
53:5b:9f:d9:9a:d7:f6:77:ff:fd:38:52:f2:84:0c:
5b:66:f3:32:2a:82:8e:51:09:11:d2:55:a3:38:ae:
e6:82:58:df:e4:9f:5c:10:67:f3:da:3c:5e:1d:00:
dc:d9:d4:98:53:86:d7:19:47:2b:fe:4d:f0:cd:b3:
23:17:1d:44:61:ff:75:f3:95:24:b5:95:d9:c9:54:
e6:a5:a6:e3:3a:f5:32:a0:ae:f0:c3:98:f3:ad:94:
67:0b:30:2d:a8:6b:8a:2b:19:b4:5d:62:de:22:f9:
99:9b:ac:4a:b3:a0:28:c0:cd:90:bb:95:4c:16:72:
a1:a9:fa:a8:c8:8d:4a:9c:1b:d0:66:9a:67:a1:4f:
c7:5a:59:4b:9b:2e:4d:fb:af:3c:b8:a7:eb:ac:91:
9c:dc:5b:1b:c1:43:6f:63:10:b0:8b:9a:df:97:a4:
0d:3d:f2:e7:1f:e2:97:f1:92:d7:0d:79:7b:a5:16:
b4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:55:83:6F:61:6B:63:E1:38:C9:AC:3F:E1:14:04:A7:E0:A0:56:D5
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/QVWDb2FrY-E4yaw_4RQEp-CgVtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.249.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:62:1f:dd:d8:f6:6d:e4:4b:d2:7b:74:52:30:a3:14:65:c6:
97:4c:a6:4c:25:7e:36:d6:a2:6b:54:b7:21:0a:43:2f:ab:0b:
1d:67:cf:60:e4:67:3e:55:b0:b6:be:f4:4d:9a:51:cc:c6:3b:
bd:27:ea:1a:d7:b1:c9:6e:50:11:92:c7:7a:6f:64:fd:93:53:
80:23:dd:a3:90:8a:08:9b:03:e7:4e:e8:de:46:cb:70:11:76:
7a:a0:72:47:4c:e9:e8:29:cf:d7:e1:49:24:5a:34:61:6f:b4:
3a:60:f2:9d:69:f2:61:69:0a:8b:b3:dc:fb:0c:22:28:2b:14:
33:79:7f:ff:59:14:c9:12:09:72:60:99:13:52:05:44:95:a9:
13:63:be:ec:08:ab:f2:9d:99:94:68:09:74:20:c7:4c:0a:ab:
d0:bc:40:8f:0b:fa:70:0c:81:67:7d:62:65:0a:7b:5e:58:00:
53:28:d2:e4:ac:04:11:10:dc:9d:94:33:11:1c:1e:b6:e0:1e:
d6:76:19:cc:70:b5:8d:bb:d7:96:5f:5b:b6:10:dd:be:99:2e:
04:83:04:14:e7:4e:4a:ad:ae:5d:f1:7b:92:42:f6:db:21:b0:
03:02:90:8a:09:d4:c6:32:5d:ee:f0:30:22:56:9f:27:b0:e4:
40:7e:10:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:23:24 2024 by rpki-client on console-fra.rpki-client.org