Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/QqW7SMdGMFu_5bIXPUJUPSvu1dU.roa
File: QqW7SMdGMFu_5bIXPUJUPSvu1dU.roa (raw, json)
Hash identifier: Ppii4MECwmpIoPoG1l1kTZZc2JGVbCajQiFvktkxQ4k=
Subject key identifier: 42:A5:BB:48:C7:46:30:5B:BF:E5:B2:17:3D:42:54:3D:2B:EE:D5:D5
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018CC56E35638C0987EC74C64D95C4FA4B4B
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/QqW7SMdGMFu_5bIXPUJUPSvu1dU.roa
Signing time: Mon 01 Jan 2024 14:29:43 +0000
ROA not before: Mon 01 Jan 2024 14:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22781
IP address blocks: 85.237.72.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:35:63:8c:09:87:ec:74:c6:4d:95:c4:fa:4b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 1 14:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42a5bb48c746305bbfe5b2173d42543d2beed5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:b8:21:5e:b3:d2:9f:e3:60:e6:6b:66:14:
69:50:93:57:d5:ec:37:b0:bd:05:dd:78:0e:f9:78:
f5:94:72:68:d7:c7:65:35:45:2a:a8:b7:3f:ab:4a:
c6:54:f7:75:cd:85:e8:67:92:11:53:14:27:32:8c:
d2:1f:d6:42:40:71:5e:12:c5:88:75:43:02:4c:92:
df:74:0c:82:39:71:01:fe:dc:9e:6d:5e:ff:bc:fe:
59:66:67:a7:80:24:fa:6c:6c:ec:38:fc:ce:2b:5b:
98:7b:eb:81:33:fd:a7:e2:88:d4:dd:75:66:d7:bb:
ce:6e:0b:32:75:0a:df:86:7d:3f:7f:da:52:9f:d2:
2e:ce:a5:ed:ba:a0:b8:42:cd:d4:a9:72:bc:40:21:
7c:4b:05:76:84:86:4f:cc:b3:10:fb:26:7e:74:96:
ca:24:5c:a2:bd:f1:f1:97:d1:e4:91:92:a1:0a:66:
b5:08:42:5b:05:16:09:f0:49:64:d3:2f:8f:99:00:
20:74:80:f7:78:f0:b7:e9:94:c3:f1:1e:d8:be:56:
44:7f:7d:78:01:ae:3a:84:1a:7e:33:54:d6:09:24:
33:ea:5b:e8:32:41:a3:c3:9c:24:52:79:ed:b4:7a:
fe:ed:8e:1c:29:bd:d4:7d:8d:d6:20:61:0b:9b:d2:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A5:BB:48:C7:46:30:5B:BF:E5:B2:17:3D:42:54:3D:2B:EE:D5:D5
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/QqW7SMdGMFu_5bIXPUJUPSvu1dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.72.0/22
Signature Algorithm: sha256WithRSAEncryption
31:54:37:6f:6e:0b:49:a4:ed:97:1e:cf:05:f7:e4:ac:4e:91:
8f:fd:38:83:13:be:18:34:33:99:79:65:cf:a7:88:bf:1a:43:
99:15:9e:5e:78:79:17:07:bb:d8:f0:85:67:c7:c7:0a:62:69:
65:48:59:e3:2f:f3:d0:5f:ab:74:4f:0c:da:64:9e:f1:8d:98:
4a:f8:6d:fa:f0:0a:cf:96:49:8e:aa:cb:32:82:2e:35:2f:41:
4e:8d:f6:c4:4f:85:13:1d:54:0b:99:87:bc:2f:65:55:fa:2f:
31:71:da:f6:05:28:ae:c3:4d:3a:d7:e3:82:cc:0a:85:78:8c:
ad:7a:c2:1d:ee:cf:f5:48:87:95:fb:ac:30:38:46:ae:01:39:
07:bc:e1:a1:f5:99:18:1d:e5:0f:31:2f:35:2b:47:e3:56:ba:
7a:01:e8:aa:44:fc:09:b8:43:db:18:fe:c0:64:3f:3c:ee:a0:
65:88:db:fd:3e:76:e0:7e:12:62:ce:28:89:0f:9a:4f:78:a1:
73:68:5d:77:62:ce:53:ac:45:32:9c:bd:7b:0f:2f:5f:14:f2:
2d:13:81:b3:67:25:17:7f:fd:74:c1:6d:cb:52:48:41:39:40:
8a:e2:70:7c:12:6e:5b:8f:c7:d8:15:0d:3d:5d:21:c0:23:04:
86:e1:b5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:56:49 2024 by rpki-client on console-fra.rpki-client.org