Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/Qkotll6LdHtOkiN5ozuBoKjuIfA.roa
File: Qkotll6LdHtOkiN5ozuBoKjuIfA.roa (raw, json)
Hash identifier: UpiTpXC/5DKzJoemLQl6l25ktepoS5POj16WRCUMZ3k=
Subject key identifier: 42:4A:2D:96:5E:8B:74:7B:4E:92:23:79:A3:3B:81:A0:A8:EE:21:F0
Certificate issuer: /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial: 018CC94E4FEC4F4A9B24625EAC6B1E02631E
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/Qkotll6LdHtOkiN5ozuBoKjuIfA.roa
Signing time: Tue 02 Jan 2024 08:33:21 +0000
ROA not before: Tue 02 Jan 2024 08:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205594
IP address blocks: 185.81.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:4f:ec:4f:4a:9b:24:62:5e:ac:6b:1e:02:63:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Validity
Not Before: Jan 2 08:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=424a2d965e8b747b4e922379a33b81a0a8ee21f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:1d:b2:37:9d:83:f1:1a:e4:a0:fe:a6:5f:
9c:e4:6e:ff:24:07:a1:54:14:04:5e:bc:56:f3:a8:
53:13:df:75:fa:d2:49:fe:6c:cd:7d:fb:59:5d:37:
ad:20:47:18:48:a1:b7:6b:a3:dd:b7:c6:d9:6a:d4:
7f:33:98:80:48:60:a2:74:ac:96:0e:0a:93:6f:f2:
66:21:52:bc:98:b1:80:b5:86:9f:a7:e7:8f:8f:37:
b2:ff:e8:fd:9c:fd:d5:66:60:80:d1:7b:ce:d8:05:
64:da:19:ce:37:2d:83:c8:15:ee:a2:48:e5:36:88:
23:65:36:24:cf:d3:e1:59:9c:65:d7:46:da:d7:cf:
ad:cc:64:a4:e7:61:87:5b:90:21:a8:4a:b9:97:0b:
17:7f:b3:10:92:7a:3a:1a:ee:71:35:c6:fa:51:ea:
80:0b:a0:a4:fa:da:b2:70:8f:a4:e0:cb:e8:bb:30:
3f:82:bc:de:f6:44:92:a8:a7:a9:f1:16:0f:02:56:
be:8c:0f:52:aa:15:ba:55:96:74:b5:7f:72:62:1a:
5d:4c:c1:73:5b:41:7e:16:2c:45:1a:a5:fe:1c:82:
55:d0:24:a7:8a:de:b7:eb:68:ab:12:09:db:e9:35:
eb:c4:b8:47:63:7c:4f:6e:b6:ce:f4:f0:08:f6:52:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4A:2D:96:5E:8B:74:7B:4E:92:23:79:A3:3B:81:A0:A8:EE:21:F0
X509v3 Authority Key Identifier:
keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/Qkotll6LdHtOkiN5ozuBoKjuIfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.105.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a9:97:78:ec:46:53:cc:d7:2c:cd:54:45:c5:fa:a3:7d:20:
f7:ac:b4:d2:17:fc:db:0c:93:52:e6:b2:c4:26:28:dd:ec:37:
7d:c7:a6:b1:36:32:30:67:5a:d9:d9:55:12:fe:a5:5f:8c:d7:
f4:ee:3a:0f:93:49:e1:e0:4b:6d:9f:d3:c3:ae:49:7c:28:56:
82:45:ce:46:00:a1:f2:4f:e3:d0:e4:cd:c1:1f:74:7a:66:c3:
f6:98:1a:22:b6:68:a5:6f:13:c5:b9:f3:ce:de:a4:a4:0b:da:
35:9c:fa:bd:7f:19:b6:0e:24:b3:7b:83:20:57:de:82:94:00:
f9:9c:e9:cf:66:cd:26:87:55:2d:03:7d:c4:86:a0:7d:2c:6d:
78:76:94:a4:86:f7:36:2d:58:bc:86:fb:9e:ac:91:4d:67:5a:
89:5e:45:c1:82:7c:87:05:d5:ad:cc:fc:f5:60:15:25:1f:3c:
08:cc:6e:a8:d8:b3:0e:bf:ca:eb:1a:1c:b3:4b:8c:64:62:79:
63:8c:25:c7:c6:69:10:0f:33:e5:f2:f9:c3:13:f2:60:97:4e:
7c:34:f2:69:95:07:dc:b0:6b:0f:8a:c2:f9:39:21:17:15:80:
27:c4:22:4c:60:4c:78:6a:71:cb:93:7f:36:cf:2c:92:fb:6c:
c4:79:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:23:03 2024 by rpki-client on console-fra.rpki-client.org