Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/kQmCOx_7PnqCEbV6y_mYXrekXbw.roa
File: kQmCOx_7PnqCEbV6y_mYXrekXbw.roa (raw, json)
Hash identifier: v2Pf8yDtppfQLNrE+6fFbrSFK6q9P3T4matULj94Jf8=
Subject key identifier: 91:09:82:3B:1F:FB:3E:7A:82:11:B5:7A:CB:F9:98:5E:B7:A4:5D:BC
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: 018CC801E18EFFB4B7DAC3111E108851DB1B
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/kQmCOx_7PnqCEbV6y_mYXrekXbw.roa
Signing time: Tue 02 Jan 2024 02:30:15 +0000
ROA not before: Tue 02 Jan 2024 02:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43366
IP address blocks: 185.54.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:e1:8e:ff:b4:b7:da:c3:11:1e:10:88:51:db:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: Jan 2 02:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9109823b1ffb3e7a8211b57acbf9985eb7a45dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f4:ed:13:a4:91:e3:1f:bb:13:56:fd:9e:f1:
17:76:51:68:6b:b6:e3:f4:70:34:a5:da:fc:57:b7:
a0:90:9a:77:76:f9:37:28:7b:f7:cf:18:77:18:57:
fd:1a:94:93:88:17:6c:e5:44:37:6f:8b:18:c1:05:
d9:9f:24:70:d0:ce:5c:d5:57:de:97:ff:99:b8:3f:
f6:5c:cb:75:e8:01:40:06:f5:40:82:11:df:57:54:
2b:0a:45:cd:b4:94:0d:0e:1b:a0:95:88:b9:a4:77:
22:59:46:70:47:0d:9e:47:ec:43:1a:8d:67:8f:2f:
c4:5a:bb:ae:4b:17:fd:e1:ac:76:ee:81:59:a7:93:
fa:67:45:28:f5:14:ee:77:36:49:63:5c:f9:a0:1b:
10:7e:f2:76:25:cc:76:78:f5:62:11:26:a3:c3:8a:
75:19:5d:9e:82:32:87:fc:c6:67:f5:30:9a:a5:50:
b3:01:d0:b5:0e:5b:f0:10:d5:39:20:93:46:cf:79:
86:f9:28:5b:fc:e9:82:bd:4a:3f:2c:70:e0:4c:d3:
8a:65:b5:83:fc:3a:4d:0d:bb:01:35:e8:bc:da:de:
dc:96:c2:09:78:88:77:e6:3a:83:61:36:1a:f2:30:
96:4f:b5:31:07:fc:86:42:5e:a6:52:9f:fb:cb:5d:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:09:82:3B:1F:FB:3E:7A:82:11:B5:7A:CB:F9:98:5E:B7:A4:5D:BC
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/kQmCOx_7PnqCEbV6y_mYXrekXbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.216.0/23
Signature Algorithm: sha256WithRSAEncryption
21:8e:6a:df:a9:e5:77:f7:1e:2c:70:d4:90:0f:30:eb:0e:46:
1d:81:a9:2d:93:0a:75:2c:38:a4:45:b9:73:45:1b:af:1e:f3:
13:3a:9a:e3:31:b7:95:37:28:ba:e2:d1:06:fe:27:e0:68:41:
d6:9b:91:11:2d:8d:53:41:6f:14:0e:96:d7:99:b7:bd:4c:1a:
ff:2d:14:c2:fb:57:e3:34:22:d4:a3:f1:20:9e:d5:93:6f:66:
83:d1:f3:e7:88:43:02:b6:98:ba:56:41:a3:ce:5b:ef:fc:49:
8f:0d:97:5d:a5:f5:c6:e6:1a:86:5f:18:f4:bf:88:37:a1:80:
e9:cc:6f:7c:7e:32:78:e7:0c:63:63:f3:8b:3a:cb:9b:e6:ae:
1d:03:9d:f8:3e:3d:17:7f:ed:4c:7d:bf:ba:75:7f:5b:f2:03:
f4:2d:f1:a4:0c:9d:43:a3:b6:7e:7a:57:43:a6:41:aa:27:26:
9e:5c:d3:59:d9:09:92:4f:14:94:fd:9f:1a:59:97:76:10:ab:
a8:d3:06:86:bb:e8:cc:21:6a:5f:5d:86:f4:51:47:d2:60:1e:
3f:a6:d9:bd:e0:e6:2d:6f:f6:64:44:85:87:d8:f1:be:52:d0:
e3:02:88:ba:d0:b6:d0:81:fe:b1:98:c3:88:f2:4f:24:03:f9:
fd:06:3a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:54:29 2024 by rpki-client on console-fra.rpki-client.org