Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/vQngG1WBdPpaiLWBU1hfcYq6apY.roa
File: vQngG1WBdPpaiLWBU1hfcYq6apY.roa (raw, json)
Hash identifier: S6Dkj/loVeFzYSqZeqkGuUu7L7l1vb9yfMMrLuhgPA0=
Subject key identifier: BD:09:E0:1B:55:81:74:FA:5A:88:B5:81:53:58:5F:71:8A:BA:6A:96
Certificate issuer: /CN=40b9cac935311e78034b4073830a81a3cf7b45d9
Certificate serial: 018CC6B789567677D418DF20A246DD36C259
Authority key identifier: 40:B9:CA:C9:35:31:1E:78:03:4B:40:73:83:0A:81:A3:CF:7B:45:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLnKyTUxHngDS0BzgwqBo897Rdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/vQngG1WBdPpaiLWBU1hfcYq6apY.roa
Signing time: Mon 01 Jan 2024 20:29:26 +0000
ROA not before: Mon 01 Jan 2024 20:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60723
IP address blocks: 185.23.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLnKyTUxHngDS0BzgwqBo897Rdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:89:56:76:77:d4:18:df:20:a2:46:dd:36:c2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b9cac935311e78034b4073830a81a3cf7b45d9
Validity
Not Before: Jan 1 20:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd09e01b558174fa5a88b58153585f718aba6a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:dc:02:1f:e8:47:22:b4:3d:f9:3b:46:2b:
30:ae:b1:2c:d8:b0:6e:74:e8:51:0e:4d:47:9e:9b:
ec:04:29:73:a5:74:44:82:52:91:28:0d:6e:4d:5d:
23:8f:95:d7:82:d3:68:6b:0a:9a:56:07:2c:0f:00:
50:dc:19:be:78:58:50:ad:4b:1e:c4:ec:8f:64:8d:
b0:9d:a6:03:c5:4a:df:5e:f6:96:12:b8:42:29:6a:
85:f3:f0:67:21:53:35:dd:32:59:38:b2:12:00:e1:
d8:2d:b1:87:dc:97:59:d2:1e:b0:75:db:99:e5:9a:
c8:d8:8c:d4:15:35:5a:78:6b:6c:7a:c1:fb:49:6e:
13:7e:ab:61:10:15:7a:fb:25:fb:95:95:f8:37:2f:
a8:bf:76:84:2e:45:4f:5b:b9:25:fc:3e:a9:a1:0f:
50:eb:66:99:9e:70:76:1f:e0:59:67:37:ab:37:b9:
71:2f:3a:11:0c:c0:72:df:0c:f9:fc:0b:9c:5e:6c:
3a:aa:60:75:42:c5:6f:6c:bc:d3:0e:3b:3e:fc:64:
2c:1c:f5:80:c2:68:32:2c:df:84:9c:d3:ca:b5:db:
1e:9c:ec:e6:d4:9d:7e:2c:92:89:ac:6d:a2:90:3d:
b5:fd:44:e1:4f:83:66:e8:aa:da:89:3c:78:12:1b:
4e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:09:E0:1B:55:81:74:FA:5A:88:B5:81:53:58:5F:71:8A:BA:6A:96
X509v3 Authority Key Identifier:
keyid:40:B9:CA:C9:35:31:1E:78:03:4B:40:73:83:0A:81:A3:CF:7B:45:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLnKyTUxHngDS0BzgwqBo897Rdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/vQngG1WBdPpaiLWBU1hfcYq6apY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:06:99:ed:ea:bc:f7:5d:bb:0d:c5:6a:72:f9:0f:a2:64:5d:
d3:98:39:92:a6:54:e3:9c:71:b7:f6:b6:37:ae:59:18:32:fd:
dc:8c:f1:58:58:04:a7:1f:c9:1c:54:9f:f5:40:08:72:97:f1:
ee:bf:fd:69:b4:c9:0d:db:c6:10:5b:0c:cb:8a:bc:cc:ce:f2:
73:21:6c:33:61:f0:7b:19:e9:d0:4e:46:5b:83:f9:34:c5:b2:
0f:a3:8e:87:87:64:3b:f8:41:68:72:ec:e5:11:0a:3f:2f:11:
9b:57:5a:ff:15:5e:14:50:23:66:b0:d6:d6:bd:ee:ed:48:29:
94:ac:ab:f5:d5:60:c6:8b:ab:84:6e:b1:05:55:f0:e4:4e:71:
84:da:83:e1:14:be:dd:97:c9:a7:91:4f:eb:9a:59:e2:75:94:
7c:55:d3:c4:02:e2:19:62:11:db:83:30:0f:ac:99:40:c4:b2:
ab:25:bd:22:c9:df:85:8f:84:b4:82:82:c9:b7:8f:46:75:ac:
95:77:2c:fc:b9:e2:a2:8d:c5:84:ed:f6:30:0f:a5:7a:ff:bd:
8a:43:26:be:7e:2b:85:7c:0b:8a:f9:39:af:1f:da:5b:ce:9e:
9a:34:f2:06:08:5e:43:17:57:30:dd:1d:32:a4:51:a5:42:d2:
c3:da:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:35:46 2024 by rpki-client on console-ams.rpki-client.org