Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/QL-Y2HtK2O2CY2Tv1Q3K2tIKIPI.roa
File: QL-Y2HtK2O2CY2Tv1Q3K2tIKIPI.roa (raw, json)
Hash identifier: gT+fzUKMHj7vA3g+kCVUJtrJd3gullAS4Se7WlD5n0w=
Subject key identifier: 40:BF:98:D8:7B:4A:D8:ED:82:63:64:EF:D5:0D:CA:DA:D2:0A:20:F2
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 018CC6B7CFD932A0ABB56D4B97E043CA447A
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/QL-Y2HtK2O2CY2Tv1Q3K2tIKIPI.roa
Signing time: Mon 01 Jan 2024 20:29:44 +0000
ROA not before: Mon 01 Jan 2024 20:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 185.200.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:cf:d9:32:a0:ab:b5:6d:4b:97:e0:43:ca:44:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Jan 1 20:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40bf98d87b4ad8ed826364efd50dcadad20a20f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:b2:89:90:0a:c3:a9:9a:12:09:46:9e:dd:
8b:a0:20:3a:f4:44:5f:81:9c:10:66:5f:b1:5d:87:
6f:6d:17:c9:19:f8:28:0d:eb:46:da:c6:0c:b2:d2:
8d:86:f6:9b:31:6c:de:4b:0d:9d:fa:36:b8:17:fa:
47:ba:ab:36:03:4e:3a:1e:03:9c:71:de:99:21:a1:
21:c9:6a:42:ef:59:15:0d:cf:08:23:41:30:2e:dc:
b3:e4:15:a4:ae:9e:3b:bd:b6:32:c1:08:06:b5:38:
5e:57:c1:af:6d:3e:2e:b8:46:d9:c5:ae:b4:12:1c:
5d:34:77:ff:2e:48:0e:0c:18:eb:fb:2c:f1:99:24:
b5:16:6b:e4:c3:fa:d0:18:dd:8e:64:b9:ca:34:c1:
5f:1b:2b:c1:0f:df:0c:eb:9d:90:fd:24:11:81:ff:
a8:22:c4:aa:fe:18:df:92:c6:55:bf:c3:b6:4f:c3:
ed:1c:dd:de:77:ca:83:16:ac:c1:c4:84:84:84:78:
14:f6:9e:ef:5b:66:f5:06:0e:5c:c6:53:d7:9d:b2:
0e:81:12:5f:db:97:f2:5a:56:ef:ec:68:1c:fd:ba:
f0:2e:19:12:3b:7a:b7:32:b6:b4:bf:e8:18:52:59:
b0:b2:36:8a:93:a1:a5:c1:06:04:1d:22:d1:17:67:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BF:98:D8:7B:4A:D8:ED:82:63:64:EF:D5:0D:CA:DA:D2:0A:20:F2
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/QL-Y2HtK2O2CY2Tv1Q3K2tIKIPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.12.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e5:ac:4b:73:13:03:5a:40:b2:84:92:a8:6d:43:24:be:22:
e4:ec:18:ac:29:73:cf:22:0f:c5:94:07:a8:86:a5:7b:8f:ef:
f7:14:3d:af:40:54:00:49:c1:3b:4b:f4:89:da:fe:ac:aa:79:
b0:2a:02:04:a1:38:eb:3c:64:29:fe:d9:bb:b2:c9:48:c4:b5:
09:7d:44:44:f8:b4:ae:f1:5f:03:cc:f6:17:e8:7e:5f:bd:47:
90:80:e0:ca:ad:73:a5:89:4d:d5:15:f2:c2:ac:ca:44:ef:9d:
41:eb:3d:a2:49:d5:47:47:cf:43:3d:02:4e:53:b3:5a:64:8a:
21:d4:b5:56:33:dd:53:4f:3e:19:53:65:2a:ac:24:e9:b2:ea:
73:7c:78:23:91:ed:3e:50:7c:dd:2b:b4:17:b2:9c:13:93:93:
00:94:b8:9d:83:f2:a6:8a:b9:5d:12:32:c9:a4:65:b7:a7:e4:
68:f3:d7:2f:73:e4:31:25:b5:ba:a5:7c:be:fc:49:9e:4d:c3:
16:5a:c3:64:f5:44:18:c1:b3:74:01:8f:9b:ca:a3:00:3e:9a:
ce:1b:8d:1c:d4:d4:9f:09:6c:4b:cc:4c:9a:e4:ba:45:34:b2:
88:65:ed:d2:aa:1a:23:46:db:53:31:85:b5:47:45:5d:fd:d9:
bc:d0:fa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:08:05 2024 by rpki-client on console-ams.rpki-client.org