Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/QOlb6PU5BSs2U-o6O8UXmH0bvfI.roa
File: QOlb6PU5BSs2U-o6O8UXmH0bvfI.roa (raw, json)
Hash identifier: lQG7kNAk76/JJvcvb67cRu+IyIh4VvzaDVLnvWzo+Ug=
Subject key identifier: 40:E9:5B:E8:F5:39:05:2B:36:53:EA:3A:3B:C5:17:98:7D:1B:BD:F2
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DEBD9CFF56776B1A12FF440DAE970C2D4
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/QOlb6PU5BSs2U-o6O8UXmH0bvfI.roa
Signing time: Tue 27 Feb 2024 18:35:36 +0000
ROA not before: Tue 27 Feb 2024 18:35:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207027
IP address blocks: 2.59.176.0/22 maxlen: 22
45.147.168.0/22 maxlen: 22
193.36.228.0/24 maxlen: 24
193.37.34.0/24 maxlen: 24
193.176.220.0/24 maxlen: 24
193.193.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:d9:cf:f5:67:76:b1:a1:2f:f4:40:da:e9:70:c2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 27 18:35:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40e95be8f539052b3653ea3a3bc517987d1bbdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:4b:c5:2d:27:c4:25:97:24:18:7c:a4:c3:
50:44:ae:55:1e:bb:8d:82:00:ab:25:e1:2e:f1:eb:
68:35:ac:5f:7a:95:49:9b:78:86:67:12:41:45:62:
d4:f5:d4:ae:3f:f6:41:f4:b6:f7:f3:ef:26:81:93:
c8:2f:b2:bc:ef:a4:1e:a1:37:25:3d:7c:81:f1:8a:
fe:e9:03:51:66:95:84:fe:af:8a:2a:bb:84:73:75:
03:e9:3a:31:1c:40:7d:57:a1:ea:f7:91:5d:2d:ab:
b5:e2:77:34:51:f6:b0:83:b2:9a:5a:8c:5f:5f:cb:
6c:6c:af:7c:0d:68:98:5e:33:ea:57:44:b4:3a:59:
25:d1:9a:98:f9:b3:9a:88:67:5f:d9:5e:02:99:fb:
b4:8e:be:8b:51:ff:5c:23:85:52:94:93:77:7d:a5:
b6:bb:55:74:a8:03:80:06:29:57:84:ed:92:8c:3a:
6c:9b:43:0a:47:1f:ff:02:4c:98:1b:46:05:51:d9:
ec:99:8b:7f:98:46:a2:44:7a:70:71:43:b0:11:e9:
9e:41:4c:f6:80:bc:8f:b8:8f:37:f0:b8:b0:d1:c2:
0a:32:38:59:a2:c6:2d:06:7f:38:10:03:95:c8:72:
28:c0:d6:20:81:ad:a8:85:59:d8:99:13:d1:a2:dc:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:5B:E8:F5:39:05:2B:36:53:EA:3A:3B:C5:17:98:7D:1B:BD:F2
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/QOlb6PU5BSs2U-o6O8UXmH0bvfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.176.0/22
45.147.168.0/22
193.36.228.0/24
193.37.34.0/24
193.176.220.0/24
193.193.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d7:87:36:66:bd:c7:89:92:06:0d:02:17:ec:aa:9c:64:4c:
78:5d:70:07:90:61:16:d5:f7:d4:2b:cb:2e:d7:1f:b5:12:12:
a6:14:cc:51:96:bd:cb:ac:86:d5:77:00:94:7b:75:c7:06:6b:
e8:c0:e2:6f:38:18:f3:da:ec:8e:bf:61:11:fd:8f:8d:e7:c7:
1d:7b:ee:b5:49:ec:7c:fc:fb:cf:a4:80:e7:94:47:e5:3b:23:
de:98:e7:5c:89:d7:84:6c:25:f3:b2:11:35:05:d5:6e:3c:40:
c5:2f:ee:3b:44:22:01:8a:4c:ee:6c:b4:86:cb:df:80:e0:64:
a5:45:63:83:a5:10:db:f2:ad:88:3d:82:d3:68:c9:20:97:06:
ff:97:4e:8a:28:61:f8:c5:f1:ce:6e:c0:1d:9e:c4:bc:11:de:
ce:20:c0:12:90:4f:f9:ae:66:c7:00:b7:35:31:e8:2c:91:d0:
32:20:53:51:9e:55:43:5a:bb:74:aa:5f:eb:f2:80:a1:7e:8c:
e4:92:e8:46:7a:38:4c:d5:f3:be:70:9b:92:d3:cb:db:64:7e:
17:f9:da:fc:1d:9c:b0:19:24:a5:2c:31:fa:ee:18:36:0b:30:
f7:f8:58:18:af:e3:66:3f:99:1b:19:53:5f:a3:4e:da:19:50:
c8:8c:bd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:42:50 2024 by rpki-client on console-ams.rpki-client.org