Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/DQNsGCcHr_AQfmNxblcXRtveWaY.roa
File: DQNsGCcHr_AQfmNxblcXRtveWaY.roa (raw, json)
Hash identifier: dI/xWoChzgNKCDt8Rq62zYD5EFkYLDhOnWJDRXIPjbM=
Subject key identifier: 0D:03:6C:18:27:07:AF:F0:10:7E:63:71:6E:57:17:46:DB:DE:59:A6
Certificate issuer: /CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Certificate serial: 018CC6B7DE23F8783BFB2C9B14A45F78B9B5
Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/DQNsGCcHr_AQfmNxblcXRtveWaY.roa
Signing time: Mon 01 Jan 2024 20:29:47 +0000
ROA not before: Mon 01 Jan 2024 20:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203021
IP address blocks: 185.147.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:de:23:f8:78:3b:fb:2c:9b:14:a4:5f:78:b9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Validity
Not Before: Jan 1 20:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d036c182707aff0107e63716e571746dbde59a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:53:ee:65:f9:4a:1b:da:64:86:51:44:20:cc:
c5:0c:d2:b9:15:40:f5:94:67:00:b3:fe:e9:42:fc:
5f:cb:b2:11:49:ad:5d:63:66:c8:0b:ee:10:ad:98:
2e:f6:ab:4c:46:79:0c:f0:9e:f7:46:f0:a9:12:a4:
17:3c:38:d3:1f:34:5a:df:28:2c:30:4b:b0:c2:47:
dc:39:47:d4:b3:db:89:61:6d:3d:66:79:7f:c7:c0:
c9:8c:9b:12:f8:c9:6c:39:c2:52:7e:94:2d:e3:8f:
51:69:85:72:1f:59:02:22:67:8c:cb:14:f8:9c:5d:
24:f3:e4:42:fe:c9:cb:ab:bb:5f:18:f3:ae:c1:93:
67:6c:e2:15:68:97:0b:a5:ca:27:d6:47:82:86:0c:
9a:e2:a3:57:de:49:b2:ec:b5:c1:6d:5c:66:f1:98:
fa:e8:88:66:51:a8:ca:05:4f:09:97:bd:2b:a4:7e:
69:f0:ac:d5:c1:97:60:f9:d9:fe:6e:51:39:a0:89:
65:96:94:72:8a:c8:fb:b5:a8:88:c4:a1:1a:6f:30:
48:0a:31:b7:17:70:bc:69:90:93:8f:e7:6d:0e:2d:
43:bc:19:f7:87:dd:d3:a5:02:f1:9e:21:48:ca:ff:
f0:42:b8:37:2a:fc:da:05:15:f0:b5:17:c1:62:a7:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:03:6C:18:27:07:AF:F0:10:7E:63:71:6E:57:17:46:DB:DE:59:A6
X509v3 Authority Key Identifier:
keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/DQNsGCcHr_AQfmNxblcXRtveWaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.120.0/22
Signature Algorithm: sha256WithRSAEncryption
73:80:c8:71:5d:22:1c:b6:ec:96:ce:78:f9:08:40:34:76:34:
4d:1f:e5:5d:b7:ac:9e:ca:e3:b2:ff:c7:59:1c:2c:71:2d:cd:
fb:20:40:dd:ac:a2:9d:ee:af:05:9b:da:5b:1d:9a:09:ff:d6:
e4:d3:79:74:a6:c6:96:29:36:eb:04:f0:dd:4e:af:8c:eb:87:
69:53:07:88:f6:80:24:44:d7:2e:14:8f:86:d7:ba:6b:68:cf:
63:08:81:a5:60:36:d7:53:a8:bd:7c:3c:8e:72:0b:4d:1b:92:
01:bd:b1:ae:d9:42:bf:94:4f:8d:cc:98:be:7c:6a:f0:e8:d4:
92:3c:fc:86:63:20:46:91:2f:b4:4e:17:63:c7:8b:f6:ff:e7:
30:aa:98:52:6b:49:04:86:c0:34:5f:ee:0b:e5:40:8e:d9:0d:
f2:7d:a0:fd:4b:83:6a:bb:96:48:4e:1f:a3:10:88:03:82:73:
8a:6c:b8:15:b2:9c:43:20:63:8d:ea:cc:53:b4:79:41:c4:e0:
b9:cf:59:57:79:b8:bf:9a:c6:16:be:a0:fd:c9:2c:8f:3a:d7:
e3:51:a1:31:2d:84:2c:bb:1a:df:cb:d4:1e:6d:42:1f:4a:cf:
6e:70:72:95:73:9a:f1:4f:0c:5b:24:12:d4:bf:e2:fe:e0:d2:
de:17:a9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 07:46:14 2024 by rpki-client on console-fra.rpki-client.org