Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/NqOE2XBO_soFPqz1tCdiMpZSg70.roa
File: NqOE2XBO_soFPqz1tCdiMpZSg70.roa (raw, json)
Hash identifier: fl+GkLZbN/yniqfilp3plBTqHxfYrVVFlTgimDqpdK0=
Subject key identifier: 36:A3:84:D9:70:4E:FE:CA:05:3E:AC:F5:B4:27:62:32:96:52:83:BD
Certificate issuer: /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial: 01900CD8D184CDDA0758AD8D1E6475D16F5A
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/NqOE2XBO_soFPqz1tCdiMpZSg70.roa
Signing time: Wed 12 Jun 2024 14:27:34 +0000
ROA not before: Wed 12 Jun 2024 14:27:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 151.186.144.0/20 maxlen: 24
151.186.144.0/24 maxlen: 24
151.186.145.0/24 maxlen: 24
151.186.146.0/24 maxlen: 24
151.186.147.0/24 maxlen: 24
151.186.148.0/24 maxlen: 24
151.186.149.0/24 maxlen: 24
151.186.150.0/24 maxlen: 24
151.186.151.0/24 maxlen: 24
151.186.152.0/24 maxlen: 24
151.186.153.0/24 maxlen: 24
151.186.154.0/24 maxlen: 24
151.186.155.0/24 maxlen: 24
151.186.156.0/24 maxlen: 24
151.186.157.0/24 maxlen: 24
151.186.158.0/24 maxlen: 24
151.186.159.0/24 maxlen: 24
151.186.160.0/21 maxlen: 24
151.186.160.0/24 maxlen: 24
151.186.161.0/24 maxlen: 24
151.186.162.0/24 maxlen: 24
151.186.163.0/24 maxlen: 24
151.186.164.0/24 maxlen: 24
151.186.165.0/24 maxlen: 24
151.186.166.0/24 maxlen: 24
151.186.167.0/24 maxlen: 24
151.186.168.0/22 maxlen: 24
151.186.168.0/24 maxlen: 24
151.186.169.0/24 maxlen: 24
151.186.170.0/24 maxlen: 24
151.186.171.0/24 maxlen: 24
151.186.172.0/22 maxlen: 24
151.186.172.0/24 maxlen: 24
151.186.173.0/24 maxlen: 24
151.186.174.0/24 maxlen: 24
151.186.175.0/24 maxlen: 24
151.186.176.0/20 maxlen: 24
151.186.176.0/24 maxlen: 24
151.186.177.0/24 maxlen: 24
151.186.178.0/24 maxlen: 24
151.186.179.0/24 maxlen: 24
151.186.180.0/24 maxlen: 24
151.186.181.0/24 maxlen: 24
151.186.182.0/24 maxlen: 24
151.186.183.0/24 maxlen: 24
151.186.184.0/24 maxlen: 24
151.186.185.0/24 maxlen: 24
151.186.186.0/24 maxlen: 24
151.186.187.0/24 maxlen: 24
151.186.188.0/24 maxlen: 24
151.186.189.0/24 maxlen: 24
151.186.190.0/24 maxlen: 24
151.186.191.0/24 maxlen: 24
151.186.192.0/20 maxlen: 24
151.186.192.0/24 maxlen: 24
151.186.193.0/24 maxlen: 24
151.186.194.0/24 maxlen: 24
151.186.195.0/24 maxlen: 24
151.186.196.0/24 maxlen: 24
151.186.197.0/24 maxlen: 24
151.186.198.0/24 maxlen: 24
151.186.199.0/24 maxlen: 24
151.186.200.0/24 maxlen: 24
151.186.201.0/24 maxlen: 24
151.186.202.0/24 maxlen: 24
151.186.203.0/24 maxlen: 24
151.186.204.0/24 maxlen: 24
151.186.205.0/24 maxlen: 24
151.186.206.0/24 maxlen: 24
151.186.207.0/24 maxlen: 24
2a04:e4c4:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:d8:d1:84:cd:da:07:58:ad:8d:1e:64:75:d1:6f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Validity
Not Before: Jun 12 14:27:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36a384d9704efeca053eacf5b4276232965283bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:86:a8:f3:75:3a:50:2c:4e:d7:99:c8:6f:47:
ad:58:a1:37:16:5f:b5:58:9c:ff:c4:1e:df:bf:76:
49:29:87:c3:d6:c1:d1:0f:d0:3d:26:e1:20:b7:52:
e4:4b:18:3d:98:15:7d:50:1b:16:40:53:2f:16:db:
22:b1:01:df:5a:a0:b3:d9:46:cc:2b:d8:90:b2:55:
9d:9a:1c:aa:25:89:f1:0f:a9:f1:32:b9:3f:25:ac:
c3:9d:6c:56:13:a7:cd:f2:0d:96:06:d8:29:48:f3:
e8:fd:6b:27:fb:c7:b2:94:33:a7:2f:f5:4d:24:c4:
ea:1c:fd:5b:9b:dc:41:c8:0c:85:a4:db:45:30:47:
40:b4:cb:be:27:f6:6e:5a:a4:9b:f5:0b:60:2c:08:
66:11:6e:bf:da:a0:42:1f:62:d3:58:d6:49:30:49:
91:bd:c6:f0:cf:a1:80:3d:58:bc:24:28:d6:e2:7d:
aa:82:67:fd:4e:87:15:9c:92:1d:0c:1c:fb:11:48:
c8:d7:a3:49:35:a5:36:0e:a1:92:9a:6f:23:20:e0:
fb:50:8a:ff:01:c8:87:f6:7c:00:10:56:89:fe:56:
63:50:5e:6f:68:c0:f2:22:6b:02:0b:20:13:26:8d:
23:37:0d:28:0b:3c:f9:87:01:b6:d8:17:0e:51:f2:
51:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A3:84:D9:70:4E:FE:CA:05:3E:AC:F5:B4:27:62:32:96:52:83:BD
X509v3 Authority Key Identifier:
keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/NqOE2XBO_soFPqz1tCdiMpZSg70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.186.144.0-151.186.207.255
IPv6:
2a04:e4c4:5::/48
Signature Algorithm: sha256WithRSAEncryption
ac:08:2f:c2:de:7d:14:b2:87:89:e4:b5:10:9c:28:2f:03:db:
a6:55:db:a8:8c:ca:93:24:37:d2:2c:63:3c:ff:dd:57:17:36:
96:93:0c:09:89:a0:85:bb:b4:c1:a3:b6:81:47:01:f9:19:e1:
0a:fb:89:59:c6:9b:ca:d9:b6:a0:b3:ed:32:0c:1b:b3:8a:93:
4c:7a:f1:83:a0:4b:83:f6:21:c6:c5:c5:9e:36:a5:8f:fe:43:
69:da:c5:65:e5:d7:ce:2c:7b:3a:d0:de:23:22:75:ca:8d:12:
4c:4f:60:aa:dc:ba:80:f0:39:d5:d3:a6:4d:2f:aa:59:f5:4c:
b2:8a:0a:75:fc:59:f4:2d:4c:4d:6e:bb:f6:ab:a9:77:8a:7d:
25:c9:0e:53:f9:0b:c5:3f:8e:b4:dd:c3:4b:8b:fd:b8:f1:a0:
90:4b:ad:f7:11:94:ec:f2:50:8d:c7:c3:2f:7c:fb:c8:00:16:
9e:ac:56:27:5d:b8:9c:ba:35:39:87:4f:98:04:bf:ac:9d:28:
cc:ef:53:b1:2b:fa:03:4b:40:35:d8:dd:ed:00:06:6b:04:f4:
1f:37:48:7e:c1:3f:4c:ce:f2:17:45:63:c1:9a:52:df:a9:fe:
5b:37:d2:15:ee:7d:7a:58:91:56:cd:a0:7d:d1:d5:27:27:8c:
25:4b:3d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:52:42 2024 by rpki-client on console-fra.rpki-client.org