Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/0Hj2wUTeV6Q8fKMbH0CZqqmFJO8.roa
File: 0Hj2wUTeV6Q8fKMbH0CZqqmFJO8.roa (raw, json)
Hash identifier: VYk1xKDv0m0v6jascWNn7mgxF92OvuQ1TwwrZ2HlFpE=
Subject key identifier: D0:78:F6:C1:44:DE:57:A4:3C:7C:A3:1B:1F:40:99:AA:A9:85:24:EF
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0192AE050513D424E133EC2A601E4D3AE0FF
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/0Hj2wUTeV6Q8fKMbH0CZqqmFJO8.roa
Signing time: Mon 21 Oct 2024 07:40:17 +0000
ROA not before: Mon 21 Oct 2024 07:40:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20910
IP address blocks: 62.84.0.0/20 maxlen: 32
62.205.192.0/18 maxlen: 32
77.38.128.0/17 maxlen: 32
85.115.96.0/19 maxlen: 32
85.254.120.0/23 maxlen: 23
87.226.0.0/17 maxlen: 32
89.18.192.0/19 maxlen: 32
89.201.0.0/17 maxlen: 32
91.142.0.0/20 maxlen: 32
91.188.32.0/19 maxlen: 32
93.177.192.0/18 maxlen: 32
94.30.128.0/17 maxlen: 32
109.110.0.0/19 maxlen: 32
136.169.0.0/17 maxlen: 32
185.144.184.0/22 maxlen: 32
188.112.128.0/18 maxlen: 32
195.62.128.0/19 maxlen: 32
195.244.128.0/20 maxlen: 32
213.180.96.0/19 maxlen: 32
217.198.224.0/20 maxlen: 32
217.199.96.0/19 maxlen: 32
2a00:9000::/29 maxlen: 32
2a00:f4a0::/29 maxlen: 32
2a03:6740::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:05:05:13:d4:24:e1:33:ec:2a:60:1e:4d:3a:e0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 21 07:40:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d078f6c144de57a43c7ca31b1f4099aaa98524ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:3f:d8:67:38:13:6b:d3:f6:13:20:64:d8:
6a:5e:6d:5c:fc:97:5e:03:25:db:40:77:9c:a8:8c:
45:f5:d7:fa:f9:92:44:99:28:cf:09:54:9c:11:b1:
63:59:2e:ed:37:22:86:4c:75:c2:0b:e7:4f:c0:f0:
8b:22:d8:ef:8a:73:bf:6f:47:6a:d1:eb:58:6e:7c:
07:76:1a:d8:ea:49:50:c0:38:fd:50:7b:c6:5e:cb:
b1:9d:87:dc:24:61:ec:79:b5:bb:ba:e7:b2:06:b9:
9c:35:eb:57:18:8d:9f:ec:d0:2e:69:9c:99:a9:6f:
e9:c3:cf:06:09:75:2d:b1:18:bf:1a:1f:8c:50:5b:
ce:97:2f:d2:44:c6:c5:3c:81:5e:79:df:e4:5c:d7:
72:a2:3c:fd:96:b0:5c:a9:9c:3d:11:4b:17:77:b4:
44:8e:14:8e:85:7d:32:2d:63:1b:68:f6:68:c1:2d:
fe:59:ce:cc:18:60:1c:11:86:54:c0:69:92:97:32:
79:dd:38:74:0d:f6:33:26:3b:e3:87:a7:7f:09:25:
98:d2:99:db:13:f0:8b:6b:3f:5a:64:c4:e2:e1:08:
62:a5:f7:4f:19:27:53:24:ad:27:a4:70:aa:ef:1c:
dc:4c:ef:c9:9d:94:36:8a:67:3b:7c:c5:ea:d2:d5:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:78:F6:C1:44:DE:57:A4:3C:7C:A3:1B:1F:40:99:AA:A9:85:24:EF
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/0Hj2wUTeV6Q8fKMbH0CZqqmFJO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.0.0/20
62.205.192.0/18
77.38.128.0/17
85.115.96.0/19
85.254.120.0/23
87.226.0.0/17
89.18.192.0/19
89.201.0.0/17
91.142.0.0/20
91.188.32.0/19
93.177.192.0/18
94.30.128.0/17
109.110.0.0/19
136.169.0.0/17
185.144.184.0/22
188.112.128.0/18
195.62.128.0/19
195.244.128.0/20
213.180.96.0/19
217.198.224.0/20
217.199.96.0/19
IPv6:
2a00:9000::/29
2a00:f4a0::/29
2a03:6740::/29
Signature Algorithm: sha256WithRSAEncryption
73:50:b4:9f:d8:05:f8:df:73:68:08:14:98:7c:97:7f:32:a4:
ad:34:98:20:69:84:0b:36:31:92:74:e1:90:3a:98:8f:e4:79:
a7:90:a1:f8:be:09:c4:c8:a6:20:a2:ab:4b:8f:e6:ad:10:c2:
3b:a5:48:c5:71:25:90:fc:32:3a:3d:df:09:56:16:71:8e:a1:
cf:33:eb:9f:61:97:ea:97:da:ad:b7:1e:12:26:14:0c:0d:93:
cd:98:58:ce:a9:53:a7:00:62:af:3d:a8:d9:14:e4:62:9f:93:
49:34:ec:de:19:ff:39:61:11:f9:52:90:c7:05:ad:86:fd:55:
8b:6a:fd:75:46:8f:34:1e:f5:12:6c:08:a4:33:9e:b2:fe:60:
ec:4d:d4:4e:a6:ce:30:76:f2:74:41:0f:28:8d:af:8e:db:39:
fb:8a:cf:b8:2c:b0:a8:8b:a2:20:0b:1b:c1:88:e9:a5:ca:d2:
72:74:37:22:d6:e4:76:4a:90:8f:a8:e0:25:9e:cb:f3:45:9b:
f9:22:5f:c3:81:0f:ce:0c:9c:1e:12:e1:9a:32:dc:f9:7e:a7:
78:f0:75:d2:b5:bc:c2:34:df:4e:c0:f8:e9:ed:a4:71:8d:0d:
22:16:c8:80:0a:0a:25:b3:d5:6e:b8:8e:ca:02:4e:18:7b:6d:
40:08:63:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:22:55 2024 by rpki-client on console-ams.rpki-client.org