Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/quKEa3n6qZ9cNum1H5tRidkA9HM.roa
File: quKEa3n6qZ9cNum1H5tRidkA9HM.roa (raw, json)
Hash identifier: wh3iB6d5WHmkKlmxjCUTqzIPRDdMO4w8t/HBxroQo0k=
Subject key identifier: AA:E2:84:6B:79:FA:A9:9F:5C:36:E9:B5:1F:9B:51:89:D9:00:F4:73
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 018CC26D646909A063EA1E31BA9B1229D39F
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/quKEa3n6qZ9cNum1H5tRidkA9HM.roa
Signing time: Mon 01 Jan 2024 00:29:58 +0000
ROA not before: Mon 01 Jan 2024 00:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50377
IP address blocks: 185.184.64.0/22 maxlen: 22
109.234.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:64:69:09:a0:63:ea:1e:31:ba:9b:12:29:d3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: Jan 1 00:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aae2846b79faa99f5c36e9b51f9b5189d900f473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0c:02:57:bf:7a:b8:b3:5a:80:f5:e8:32:69:
89:f3:21:ba:b0:1b:a5:e1:ff:ea:82:ff:f0:ca:16:
95:e7:d5:db:c6:ce:1d:f5:bb:cb:40:6c:e1:e7:cb:
e4:55:d0:0a:f9:21:3a:84:2a:d8:24:7a:f2:b5:0f:
d9:ee:ad:d3:fb:ea:d4:80:65:91:9d:50:3f:26:0c:
27:96:d7:ef:42:44:0b:5c:78:bc:0c:c5:7a:f0:7b:
23:12:4f:cc:52:62:68:0c:70:96:55:b0:2a:84:59:
f0:dc:c5:23:94:37:d3:01:d5:55:c9:df:f9:23:a6:
27:f8:8d:20:e3:9e:c6:d0:ba:0e:c2:8f:33:a0:6b:
03:40:16:56:98:7e:96:8d:77:91:f0:69:60:9b:ae:
25:01:7d:48:de:60:7d:ef:24:99:3f:c5:2f:f8:12:
19:12:9b:c8:70:4f:aa:64:97:03:9d:d4:86:fe:02:
27:7f:69:d3:df:8e:71:d1:1d:3d:26:0a:f8:f5:e8:
65:55:4c:c6:3a:e8:a1:eb:65:9d:5b:b5:5e:52:a0:
68:92:79:07:95:ce:55:03:b1:57:25:c2:27:2c:62:
0d:b4:84:e8:b3:6b:30:5c:81:96:f6:16:17:90:fa:
53:99:3c:f5:84:b3:30:d8:be:4b:92:0c:f2:17:41:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E2:84:6B:79:FA:A9:9F:5C:36:E9:B5:1F:9B:51:89:D9:00:F4:73
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/quKEa3n6qZ9cNum1H5tRidkA9HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.244.0/24
185.184.64.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:07:0e:e0:11:da:72:2c:71:e5:6d:f8:f2:51:3a:a3:ac:de:
df:5f:7f:ee:c9:c8:94:3a:15:18:27:8e:5b:3c:aa:84:1f:a4:
87:b1:28:50:ac:25:a9:04:b6:da:3d:cf:2f:23:38:a4:5f:cf:
89:96:a0:ff:7f:e0:c4:2f:05:83:f6:ee:1e:13:89:a6:f9:65:
da:b2:21:11:86:a2:44:d2:0a:df:c7:87:07:b1:2d:8d:04:8e:
8d:1e:61:76:27:9e:61:d3:97:0e:99:ed:51:e4:c4:20:29:4e:
64:31:2d:f4:55:d0:d0:36:d7:79:d8:a9:93:13:ef:15:0c:ff:
d8:28:1f:63:f7:f5:57:65:30:ce:fc:a2:4f:a9:b9:7b:56:48:
aa:f9:6b:cd:ca:22:2e:16:bb:b2:57:c8:21:0e:de:81:b5:c2:
9f:56:4d:30:48:3b:2e:02:f2:13:9c:98:cc:ce:52:09:e1:d3:
2a:f9:e0:c8:82:41:3a:79:fd:7e:54:13:ae:40:47:ca:c3:87:
9d:2b:da:0c:ef:00:cd:14:16:3f:50:20:1c:3b:d0:d1:4c:b1:
34:eb:19:55:b5:7a:9a:38:ac:bf:51:b6:a3:36:c7:b2:10:67:
10:ae:73:d0:cf:f5:cc:46:ad:e6:af:55:41:ff:26:79:0e:ea:
f4:41:72:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:47:04 2024 by rpki-client on console-ams.rpki-client.org