Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/QJhPAhgsuXGAe2hb9wPyLXTuDIw.roa
File: QJhPAhgsuXGAe2hb9wPyLXTuDIw.roa (raw, json)
Hash identifier: qYLehTJqmftHMsZ4PH/QmVBneLI6tNl/qNgl10fslEQ=
Subject key identifier: 40:98:4F:02:18:2C:B9:71:80:7B:68:5B:F7:03:F2:2D:74:EE:0C:8C
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 019030B127E931390899FD054C651C2D1B1F
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/QJhPAhgsuXGAe2hb9wPyLXTuDIw.roa
Signing time: Wed 19 Jun 2024 13:30:34 +0000
ROA not before: Wed 19 Jun 2024 13:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207094
IP address blocks: 185.165.220.0/22 maxlen: 24
185.165.220.0/24 maxlen: 24
185.165.221.0/24 maxlen: 24
185.165.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:30:b1:27:e9:31:39:08:99:fd:05:4c:65:1c:2d:1b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Jun 19 13:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40984f02182cb971807b685bf703f22d74ee0c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:df:f9:b0:c7:aa:65:3d:45:90:22:c9:21:80:
2c:0e:39:30:41:e4:c7:eb:87:03:a6:f7:ef:16:79:
a0:b9:b7:49:db:45:e1:1f:b6:03:d9:34:6f:58:21:
53:d1:9c:7f:94:89:ab:23:16:09:b0:9d:a8:e1:e3:
7f:39:55:39:2d:21:63:54:19:15:26:fc:6d:36:65:
bc:57:cb:ef:cb:5f:33:28:73:05:b0:7f:aa:2c:25:
ee:32:ae:41:d9:52:ef:8c:aa:ca:46:ab:55:b6:b7:
9e:e9:5d:82:4a:aa:34:6f:e5:6a:61:bd:a2:9a:49:
72:07:de:29:66:d7:53:49:a8:3b:95:fd:87:bf:23:
a0:dc:00:d2:2b:b8:88:16:1d:85:bc:5e:ab:80:4e:
d7:73:f9:02:9d:fa:13:4d:15:90:95:5b:1e:01:a4:
f0:c7:bc:3a:e3:a0:cc:94:bb:69:34:3c:0b:6b:0d:
6a:c3:09:62:74:d0:60:97:d9:b2:db:05:f4:08:52:
15:54:f0:a2:9c:a1:1d:28:f2:72:5a:12:fb:cd:bd:
4e:01:d5:a4:9d:8f:32:23:0e:4f:96:cb:8b:74:78:
9e:36:fe:e8:0e:d6:13:cb:1c:7b:a9:c7:23:f0:84:
a0:de:1b:6e:69:48:a3:38:3b:57:e4:18:a7:fc:67:
3f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:98:4F:02:18:2C:B9:71:80:7B:68:5B:F7:03:F2:2D:74:EE:0C:8C
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/QJhPAhgsuXGAe2hb9wPyLXTuDIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:27:dc:9a:fe:ab:4a:41:cb:87:bf:47:bf:f5:80:ff:f5:db:
6f:00:f1:f7:c9:42:4c:6f:d1:04:99:06:79:89:fc:98:f6:30:
a3:9d:02:78:f7:29:18:ae:14:79:8d:c7:7f:f1:c4:e2:bf:80:
e4:d0:3c:7b:e2:00:d6:67:78:be:b3:b7:d3:3d:fb:99:a2:f6:
fa:ad:f0:cb:84:09:ba:12:65:1b:f5:57:6f:5c:e0:fb:7d:c7:
b4:20:d2:be:ec:b8:a9:48:ff:4e:3f:ec:54:dd:81:15:f5:a0:
2e:2c:b4:6a:76:26:88:1d:e5:7b:d1:b6:94:3f:cb:69:70:a7:
08:93:60:30:d4:ae:27:ca:10:46:4e:b7:55:ab:4a:34:f8:aa:
cb:1e:e6:02:fd:e0:bb:8e:eb:ba:01:21:33:36:b7:dc:3e:fb:
b5:5d:8a:c9:f5:b1:7f:17:26:de:d2:4e:14:bc:59:a8:48:52:
ed:13:25:c3:79:0b:aa:02:2e:b0:bf:4a:ce:98:18:ee:fa:f9:
26:c8:f6:7e:45:9a:4c:73:ba:ff:b8:3b:08:0d:c4:65:38:56:
c2:90:b5:86:38:cd:ec:ff:e9:b5:c4:91:ba:97:f3:5b:6b:f3:
16:7a:63:0c:a2:b4:24:96:43:4b:d9:ea:8c:cd:20:42:ec:5e:
6f:61:23:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:22 2024 by rpki-client on console-fra.rpki-client.org