Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/qvzPZ8nwo1buq-gZR-60vE1ZHR0.roa
File: qvzPZ8nwo1buq-gZR-60vE1ZHR0.roa (raw, json)
Hash identifier: sRQim/10PvjiUJ0D6Rfue+OurPqdjXx5DTab79DzmMo=
Subject key identifier: AA:FC:CF:67:C9:F0:A3:56:EE:AB:E8:19:47:EE:B4:BC:4D:59:1D:1D
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 018CC5DCEA6A29ED52EE333BDFF5CD8AEA41
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/qvzPZ8nwo1buq-gZR-60vE1ZHR0.roa
Signing time: Mon 01 Jan 2024 16:30:38 +0000
ROA not before: Mon 01 Jan 2024 16:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.214.23.0/24 maxlen: 24
185.214.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:ea:6a:29:ed:52:ee:33:3b:df:f5:cd:8a:ea:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Jan 1 16:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aafccf67c9f0a356eeabe81947eeb4bc4d591d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4f:57:f1:af:7a:08:01:c4:f2:1d:46:9f:56:
8a:68:a5:f0:ec:75:b3:0f:60:9a:ae:49:85:8c:69:
6f:78:25:66:08:36:20:76:53:90:8a:5d:40:54:aa:
5b:26:97:a3:58:1c:17:26:05:f7:52:76:b9:5e:49:
18:60:c4:36:fe:79:5a:11:9d:22:fd:de:cf:06:fa:
a7:bd:12:b9:38:8a:b1:60:cd:e9:c1:0e:3e:cc:84:
ca:37:b6:20:7e:b3:c6:aa:e7:5e:d7:e4:08:98:3b:
f3:14:ef:37:74:13:37:51:85:49:23:73:77:e1:1c:
42:23:d4:be:74:8f:10:a3:a6:9f:6b:09:29:31:a6:
99:8c:85:bf:82:d0:d9:dd:2a:a3:92:a7:b3:fc:3c:
c8:62:cb:5a:44:4b:38:1b:b7:04:a0:8a:f1:a0:d6:
79:72:ee:7e:52:f9:d9:13:43:57:0a:92:02:7f:8a:
f8:09:c2:d8:12:29:0c:a0:4d:2b:1e:69:45:65:23:
2f:93:66:4b:67:71:e3:84:dc:0a:5a:77:fe:2e:b9:
dd:db:ad:94:d3:6b:c1:ea:57:67:3a:a3:e8:ab:58:
bd:c6:74:a0:a9:e0:e8:2e:5d:de:62:92:b8:60:7d:
72:78:f6:ba:70:c6:e5:db:74:ca:76:b5:df:6a:23:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FC:CF:67:C9:F0:A3:56:EE:AB:E8:19:47:EE:B4:BC:4D:59:1D:1D
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/qvzPZ8nwo1buq-gZR-60vE1ZHR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.22.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:c5:95:18:6b:e0:a3:bd:b6:cb:3b:88:b3:45:90:e3:2a:8e:
63:9f:b1:5c:47:37:5a:98:34:89:85:94:0a:64:9a:f1:1c:1b:
d9:78:ac:e9:58:21:8a:6a:13:43:22:b7:d4:38:67:ff:a4:5e:
0b:cd:4f:9a:35:cc:26:96:2a:ae:60:a5:32:e3:7d:08:9e:67:
1e:98:d6:ce:10:53:ca:f5:28:d4:ac:b7:68:af:3c:1a:2b:6d:
25:dc:77:21:cc:1b:01:0f:c4:86:c5:76:c8:08:26:8d:77:75:
43:de:0a:a3:29:33:28:e9:74:2e:10:0a:c3:1e:60:80:72:5a:
4e:08:81:32:88:25:75:5f:07:13:6f:1b:ff:57:9d:3b:3b:77:
e4:d8:78:f2:9a:08:aa:df:ab:b3:07:db:07:ae:15:ff:cd:85:
c8:33:73:2b:9e:84:00:86:66:41:af:18:01:41:46:0e:22:97:
60:e1:9d:66:f7:08:94:ff:85:4b:68:1d:a1:bc:ff:89:d7:16:
0e:f6:b3:49:86:24:d0:1c:18:cc:6f:1a:6e:7f:68:94:6f:9f:
81:84:11:68:ac:06:d8:df:41:24:44:0f:2f:a6:fe:39:5d:b5:
c3:c4:91:92:a1:78:31:c3:e1:77:51:fd:dd:e6:33:64:83:12:
64:dd:bb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:49:28 2024 by rpki-client on console-fra.rpki-client.org