Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/QXmvJo6-tOzIkusbW4ikLtcGRNA.roa
File: QXmvJo6-tOzIkusbW4ikLtcGRNA.roa (raw, json)
Hash identifier: vNHIwg5S8DKIvFrO7yhmpJZ1EYpnraJs705PwTgYbQs=
Subject key identifier: 41:79:AF:26:8E:BE:B4:EC:C8:92:EB:1B:5B:88:A4:2E:D7:06:44:D0
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 018CC3B6DEE495575935FFBEE1E2462FC0DF
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/QXmvJo6-tOzIkusbW4ikLtcGRNA.roa
Signing time: Mon 01 Jan 2024 06:29:50 +0000
ROA not before: Mon 01 Jan 2024 06:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34549
IP address blocks: 194.50.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:de:e4:95:57:59:35:ff:be:e1:e2:46:2f:c0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 06:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4179af268ebeb4ecc892eb1b5b88a42ed70644d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:88:fe:1b:34:6b:8a:73:3d:3a:31:2a:07:
1f:ab:1f:77:19:a5:97:58:ab:f9:08:ed:a0:f8:86:
ba:b9:90:95:3d:48:01:c3:bd:db:37:e6:aa:2b:dc:
8c:fa:95:6c:b7:7a:d0:98:02:99:c6:82:53:e8:37:
e5:99:6d:b2:52:c0:03:5d:1a:46:9d:5f:c8:3c:de:
b8:df:b7:fa:fc:22:91:7b:21:84:ac:50:af:d1:dc:
ee:26:88:64:06:83:17:9d:98:e5:c1:84:a1:76:3e:
a4:66:61:25:3b:ad:dd:eb:dc:82:d6:1b:b3:a3:7d:
e4:ec:c3:a5:b8:28:cd:87:02:93:1b:0f:9c:d6:e6:
a9:15:41:43:96:bd:01:9b:57:c9:46:86:9a:75:4d:
df:83:4e:de:e8:20:a9:4f:b6:46:85:57:a7:e4:ee:
5c:cc:35:ff:b4:2b:5d:5f:71:a2:39:a8:cc:e3:3b:
75:4e:e0:59:d6:09:73:55:8b:95:5e:d2:32:be:ac:
3b:7a:e4:c8:bb:d5:4d:c1:07:2b:0e:85:6c:e6:b8:
f2:8a:15:07:ca:27:a0:3b:7e:4d:5d:05:3c:1a:71:
e3:c2:c6:d2:bc:52:2d:16:b8:39:c9:f6:cd:37:8e:
31:41:b1:93:3f:cb:44:49:88:19:ca:74:b4:79:22:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:79:AF:26:8E:BE:B4:EC:C8:92:EB:1B:5B:88:A4:2E:D7:06:44:D0
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/QXmvJo6-tOzIkusbW4ikLtcGRNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.52.0/24
Signature Algorithm: sha256WithRSAEncryption
90:38:b4:4d:16:48:0f:33:ba:cd:dc:34:38:24:db:a6:3f:54:
90:95:cd:d7:5f:7a:44:5b:e9:01:1a:76:40:f6:10:28:d4:17:
98:fa:ee:a8:f9:13:d5:31:d5:8b:8e:48:c5:8b:bc:f0:83:01:
0b:1f:f6:f0:87:86:63:3e:d0:dd:d2:de:85:1d:bf:16:ca:65:
3e:7d:8a:6a:38:1a:a5:2d:43:6d:6d:25:25:b8:e1:a1:00:1a:
2d:0d:f8:78:5d:66:11:78:81:3b:74:58:97:48:c0:0f:8b:74:
70:67:ef:83:3f:29:e1:f2:e4:a7:8c:de:ae:33:13:c0:48:3d:
7f:20:c8:e2:b8:55:16:82:ee:bd:ef:41:46:85:5c:41:0f:af:
36:d7:63:7c:ea:96:a9:f6:7d:ec:4f:d4:61:1f:9d:8b:3b:a7:
b9:c0:aa:f4:33:8c:14:54:76:0b:26:c2:46:9e:4a:69:a6:3a:
88:bd:5e:b2:c7:71:f8:c1:e3:35:95:67:ba:f2:ff:fd:4c:50:
f5:59:dc:67:1d:e7:4d:45:3d:37:7a:a1:9a:fd:d6:7c:89:04:
bd:06:be:29:16:ef:cb:e1:a7:87:ba:0a:22:0c:45:b2:60:c8:
68:ff:6e:46:03:ea:ec:47:5b:a3:7d:fd:f9:a8:78:74:4a:3b:
65:ca:eb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:01:12 2024 by rpki-client on console-fra.rpki-client.org