Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/qHzUgADKGEkwJlAz53szPYAqlO4.roa
File: qHzUgADKGEkwJlAz53szPYAqlO4.roa (raw, json)
Hash identifier: sAD4+fm4JXvKo1Kz9KEwZgIAz6Re5WsL0M9WBzjsGwM=
Subject key identifier: A8:7C:D4:80:00:CA:18:49:30:26:50:33:E7:7B:33:3D:80:2A:94:EE
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 018CC2DAE8F0BE8769082F41EB7F13531B73
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/qHzUgADKGEkwJlAz53szPYAqlO4.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 185.85.76.0/22 maxlen: 22
5.63.24.0/21 maxlen: 21
91.190.168.0/21 maxlen: 21
2a02:798::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e8:f0:be:87:69:08:2f:41:eb:7f:13:53:1b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a87cd48000ca184930265033e77b333d802a94ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:eb:ea:9c:98:05:84:1b:93:11:3c:22:3f:
84:24:50:3e:4f:ad:5f:a7:a1:fd:7b:16:a1:19:b5:
e5:5f:85:6f:a5:42:b3:c3:b4:bc:18:8e:35:e5:0f:
3b:94:b8:73:10:bb:43:21:7c:99:55:db:d4:85:4d:
9f:a7:0a:f4:de:89:28:d3:f8:83:a2:e5:b9:c7:1f:
60:d7:a1:9c:65:7d:e7:2d:cd:d0:4a:e9:b1:4d:d8:
e7:d6:0c:ce:41:48:e8:ce:67:3f:b7:c7:b7:8f:f7:
26:48:10:47:1d:a2:5c:3d:97:27:78:fb:fb:63:d5:
47:ae:6c:0b:f4:b3:5f:cb:59:59:b1:93:7e:76:a8:
27:54:3a:4a:17:30:9d:1c:15:0d:c5:eb:0b:9d:64:
dc:52:5c:bb:d0:1e:42:ea:e5:41:28:9f:1f:ff:14:
1e:c3:63:7d:04:5f:59:36:53:12:52:b3:93:be:2d:
80:93:8f:45:c5:81:5d:e0:72:c9:14:03:5a:05:a5:
da:b2:85:9b:ef:62:3e:e9:e5:22:69:06:68:4f:8e:
35:3c:85:13:30:bd:15:59:0b:4c:04:3f:f8:d0:b1:
04:6d:9e:f6:3f:cc:9f:26:de:61:79:91:81:1e:20:
90:43:6a:8d:ea:b7:05:9b:73:27:37:f2:b5:91:20:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7C:D4:80:00:CA:18:49:30:26:50:33:E7:7B:33:3D:80:2A:94:EE
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/qHzUgADKGEkwJlAz53szPYAqlO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.24.0/21
91.190.168.0/21
185.85.76.0/22
IPv6:
2a02:798::/32
Signature Algorithm: sha256WithRSAEncryption
0f:21:ba:19:ac:2d:ee:50:b4:ba:6c:ab:e6:ae:46:38:2e:58:
40:89:40:0c:0c:33:5e:54:42:40:44:3b:46:90:23:47:54:eb:
d9:6a:f5:74:f3:e3:05:a3:7f:06:2e:de:ec:2f:d3:eb:db:ed:
6a:0e:f2:32:da:e2:73:74:83:0b:f0:10:23:f6:95:1a:56:f3:
26:74:4d:13:f5:c5:19:f5:f8:3e:cf:8a:54:71:df:05:e7:8e:
30:7c:ff:2d:d4:ad:dc:ae:35:7b:d0:ae:58:c1:26:08:e8:df:
59:cd:0b:c2:01:f7:7b:24:8c:d2:22:30:4e:ac:3d:9a:74:62:
cd:1b:29:d2:be:fe:aa:23:4c:dc:78:c0:d0:f4:b7:e6:66:c7:
7c:b7:dc:7d:15:14:9a:24:c5:cb:8d:af:f1:51:22:99:8e:1b:
03:ef:67:49:cd:41:ab:47:55:38:e7:82:29:65:fe:68:ea:43:
4d:eb:37:5b:fa:a1:81:5b:e3:17:43:8c:15:5c:da:be:47:87:
0e:e3:05:88:2c:7f:1f:13:1d:3e:36:0c:7b:3c:ac:08:e2:ef:
0f:77:b2:02:67:6d:36:77:d2:d9:5f:09:81:f4:01:fa:49:8f:
b7:a3:06:d7:66:32:ff:57:26:e9:e7:ac:0c:44:14:dd:a2:f9:
98:ce:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:12:46 2024 by rpki-client on console-ams.rpki-client.org