Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/qI5P-YHRugxDVMXrqCYsQ0UM1UU.roa
File: qI5P-YHRugxDVMXrqCYsQ0UM1UU.roa (raw, json)
Hash identifier: MKTtJoZblyxIHUHeB94f6dI7dqMVaGTmtPOEVOaiM4A=
Subject key identifier: A8:8E:4F:F9:81:D1:BA:0C:43:54:C5:EB:A8:26:2C:43:45:0C:D5:45
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 018CCA2A0809A6F79B817E6FEC3DB9342D8F
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/qI5P-YHRugxDVMXrqCYsQ0UM1UU.roa
Signing time: Tue 02 Jan 2024 12:33:21 +0000
ROA not before: Tue 02 Jan 2024 12:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46562
IP address blocks: 84.239.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:08:09:a6:f7:9b:81:7e:6f:ec:3d:b9:34:2d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Jan 2 12:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a88e4ff981d1ba0c4354c5eba8262c43450cd545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b5:34:6c:8f:28:3f:b4:e7:80:59:f3:73:70:
27:6d:97:39:8c:7b:00:ef:49:ea:2e:17:23:8a:42:
f6:0e:fa:f9:f7:85:3c:55:fd:ae:ae:3a:01:5b:0a:
92:20:fa:c5:e0:78:d0:14:48:dd:07:63:89:c9:00:
77:1c:21:5d:a3:4c:27:bf:04:49:ac:3b:b8:3d:b9:
d1:ff:31:f2:89:01:60:fa:0e:76:75:05:5a:2f:06:
42:26:3d:2f:e4:80:80:39:7a:58:28:47:d9:3f:42:
24:ab:67:bc:29:cf:0b:b6:45:0c:eb:eb:0e:5f:a2:
5a:0f:9f:fe:5b:59:91:cd:c0:ca:d1:df:82:84:d5:
a0:bf:51:79:a8:cb:c6:a7:e3:90:59:67:03:27:9f:
76:0d:8c:00:55:8c:45:15:c9:d2:7e:3d:11:99:37:
44:ed:97:c2:63:cb:b9:9a:8b:36:02:69:ae:36:f4:
4e:60:89:40:29:5f:3c:bd:38:71:b9:41:61:dd:98:
11:c0:64:c2:d1:64:85:64:1b:09:4f:f6:14:c9:83:
ca:51:53:90:ea:4c:21:d2:75:85:0c:bd:dc:1d:3a:
98:00:8a:50:9a:41:18:55:00:61:45:3e:61:f6:f1:
63:e4:32:6d:24:06:48:5b:10:74:68:65:f0:b7:ef:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8E:4F:F9:81:D1:BA:0C:43:54:C5:EB:A8:26:2C:43:45:0C:D5:45
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/qI5P-YHRugxDVMXrqCYsQ0UM1UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.63.0/24
Signature Algorithm: sha256WithRSAEncryption
36:39:4f:f3:ec:c4:c9:dd:77:a2:71:ab:81:80:a4:7d:37:e3:
5c:ef:0b:93:7f:b5:1f:62:1c:08:7c:7c:4b:83:a1:b2:d9:16:
55:01:0b:f2:8f:ec:19:cc:35:0a:b7:53:8e:86:7f:7b:c7:4b:
e5:42:93:af:33:58:c7:4a:bb:93:ab:f5:1b:a5:8e:da:78:b0:
cd:54:6b:d4:43:52:07:3f:a3:da:21:51:24:11:30:8d:73:dc:
78:00:13:f6:b1:62:07:2f:34:55:ef:43:08:83:d9:11:52:6c:
db:09:28:64:ca:02:a1:73:81:ff:13:b8:ca:2c:46:10:3d:f8:
df:12:0a:65:b2:eb:55:3f:94:94:5e:a4:eb:b5:ee:e3:04:d0:
50:06:a8:60:64:0c:89:2b:42:6a:7a:36:64:78:1e:80:84:08:
24:e2:95:9c:85:e5:78:b7:28:cb:99:fb:5b:68:ac:aa:39:a4:
10:25:9c:36:3f:1a:1a:b7:02:79:c4:dd:70:32:0f:d3:97:e4:
03:93:ba:d7:7a:10:49:e7:a8:b4:96:ad:5a:d6:3f:b9:01:50:
91:e8:08:34:78:43:b6:3f:4f:33:ef:70:70:ba:b4:c2:91:c0:
a1:7d:9d:25:24:cd:2b:cf:4e:be:a8:46:64:95:6b:ad:a8:ff:
eb:9c:42:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:50:01 2024 by rpki-client on console-ams.rpki-client.org