Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/dAxElF4IRLeA1pcA7elrUTARKnU.roa
File: dAxElF4IRLeA1pcA7elrUTARKnU.roa (raw, json)
Hash identifier: qG1Uyi6hW1Z25IMfmLN420E7w3J6L7lEGkpDMOtGal0=
Subject key identifier: 74:0C:44:94:5E:08:44:B7:80:D6:97:00:ED:E9:6B:51:30:11:2A:75
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56F080181C469FA452E264B1B8F6B1C
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/dAxElF4IRLeA1pcA7elrUTARKnU.roa
Signing time: Mon 01 Jan 2024 14:30:37 +0000
ROA not before: Mon 01 Jan 2024 14:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206645
IP address blocks: 85.14.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:08:01:81:c4:69:fa:45:2e:26:4b:1b:8f:6b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=740c44945e0844b780d69700ede96b5130112a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:61:2b:3b:81:e9:d7:b5:35:a6:b0:6a:82:
2d:8f:f3:7a:5a:fc:4b:88:ba:da:76:14:7e:02:0c:
ee:75:21:6b:0b:b7:8e:65:0a:2f:be:50:16:ae:70:
40:04:9a:da:58:14:6a:dd:46:94:aa:df:fc:f2:ee:
e4:a8:90:2a:8a:c6:4f:85:48:36:8c:c3:6e:63:00:
ab:ee:ec:c5:e7:b0:ea:d1:81:f5:c1:5d:42:c0:e4:
fe:3f:fe:97:71:af:15:a2:6a:27:bc:60:fe:4e:7f:
92:8a:1d:29:8b:4f:72:f3:e1:01:38:48:c1:cf:a8:
54:7a:7f:8b:60:ba:f5:27:3b:ea:ec:43:38:02:91:
2c:55:52:8b:eb:8e:01:89:05:86:bd:4c:b4:98:74:
ff:cf:4e:51:52:30:5a:a7:93:3b:7b:20:5b:8c:40:
1c:6b:78:9a:4e:6d:f5:b6:12:b2:5e:f1:5c:b0:34:
f2:c1:3f:f2:49:ff:42:30:1a:04:8e:c7:d4:12:c0:
b9:a5:11:02:85:bb:00:4f:7d:69:99:48:de:3a:37:
3f:e4:d0:d7:ec:d2:99:33:87:96:aa:b5:14:25:63:
e8:8d:1f:26:4d:65:92:bf:d9:61:a7:a2:f5:b3:1d:
c6:16:ef:52:4a:75:37:18:37:49:06:8a:fd:94:7d:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0C:44:94:5E:08:44:B7:80:D6:97:00:ED:E9:6B:51:30:11:2A:75
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/dAxElF4IRLeA1pcA7elrUTARKnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.37.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:74:b0:ac:d7:a4:de:c1:a3:9b:7f:9c:cc:86:84:bc:97:23:
37:81:46:53:02:6e:35:5a:9c:15:af:2f:f4:59:73:49:c3:84:
44:5a:5c:21:e0:bd:2d:29:1f:b6:39:52:6b:5d:f2:bb:ee:bb:
29:3e:5b:77:1f:1c:1b:b3:e2:15:b2:59:72:01:82:13:45:0f:
af:35:1a:b4:f0:a9:15:e8:48:de:e8:12:7e:0f:49:7a:af:0c:
fd:26:89:2a:82:df:ee:bb:03:7b:ff:c9:7e:a9:d1:2a:6a:bb:
b4:02:53:08:97:3d:96:b5:44:c0:48:5b:8c:fc:8d:19:a5:d8:
26:2e:d6:88:ed:84:e6:c3:4c:0d:89:44:01:5f:e6:ce:9c:46:
46:6c:84:35:02:8e:cd:1f:57:3a:92:7b:70:ef:20:2f:9e:d4:
57:65:e8:09:d3:48:ba:68:8a:84:9a:5a:6e:cd:36:a1:e7:a1:
f1:da:25:45:e0:ac:48:b8:14:63:49:34:14:c7:ea:d1:b6:dd:
a9:79:bd:2d:ab:b0:b5:6d:44:d8:ff:1d:8e:82:35:12:de:32:
41:7a:fc:88:33:fb:54:db:0e:f8:4b:68:92:9e:c7:40:09:0b:
d6:65:04:6e:60:07:c8:78:b6:15:51:d9:63:2e:6c:7d:29:b2:
7f:37:e9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:39:29 2024 by rpki-client on console-fra.rpki-client.org