Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/fqmuvzgdBudOqW6R9vAAwFWhbIk.roa
File: fqmuvzgdBudOqW6R9vAAwFWhbIk.roa (raw, json)
Hash identifier: D2p03KOZECuZ1ieXm+G7hWelSxIwv8qj5uB04t0dDyw=
Subject key identifier: 7E:A9:AE:BF:38:1D:06:E7:4E:A9:6E:91:F6:F0:00:C0:55:A1:6C:89
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 018CCA998E54F7B8D11C5A797F1A4A626592
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/fqmuvzgdBudOqW6R9vAAwFWhbIk.roa
Signing time: Tue 02 Jan 2024 14:35:10 +0000
ROA not before: Tue 02 Jan 2024 14:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43949
IP address blocks: 168.168.80.0/20 maxlen: 20
168.168.96.0/19 maxlen: 19
168.168.0.0/21 maxlen: 21
168.168.8.0/22 maxlen: 22
168.168.12.0/23 maxlen: 23
168.168.15.0/24 maxlen: 24
168.168.14.0/24 maxlen: 24
168.168.32.0/22 maxlen: 22
2.58.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:8e:54:f7:b8:d1:1c:5a:79:7f:1a:4a:62:65:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Jan 2 14:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ea9aebf381d06e74ea96e91f6f000c055a16c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:34:cc:ba:34:bc:9a:2c:b8:78:97:72:23:
46:28:16:c0:c9:13:d1:59:7c:13:8e:82:5b:e3:9d:
ae:2d:f1:06:3c:c6:0d:75:af:ae:e6:d5:22:65:a4:
95:92:11:96:97:5a:a7:65:61:e7:83:c3:81:77:38:
e3:ed:0b:1b:ef:0e:d1:1e:95:45:43:f4:b0:5a:9b:
61:e3:d0:52:ef:e1:6d:f7:5f:4e:74:94:15:64:22:
a7:94:66:01:d7:81:53:29:9e:33:52:5e:47:f3:31:
ce:69:78:bb:c2:2d:95:ad:12:38:cb:4e:b3:75:3f:
70:3b:40:cc:b1:00:a7:8c:08:d0:95:1c:fb:22:b4:
17:5d:d2:f7:52:64:a6:1b:ba:3f:da:1f:d6:72:82:
af:35:aa:af:e5:92:55:f8:15:2b:8e:8a:bd:b8:91:
14:64:5d:1b:75:30:43:43:0e:0a:49:f6:a4:fe:6c:
8b:8f:fc:4c:d4:0d:36:41:aa:62:9e:b9:73:3f:01:
67:54:3e:c4:e2:f1:c0:bc:9f:58:3a:c8:81:26:f3:
98:0d:f5:4f:4d:3e:70:62:00:50:3b:5f:52:3b:27:
2b:7b:12:a1:fc:39:82:ad:8f:22:5f:c2:6e:72:53:
c6:5d:19:bf:9c:e7:20:4e:49:f9:53:aa:7a:1b:ac:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A9:AE:BF:38:1D:06:E7:4E:A9:6E:91:F6:F0:00:C0:55:A1:6C:89
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/fqmuvzgdBudOqW6R9vAAwFWhbIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.180.0/22
168.168.0.0/20
168.168.32.0/22
168.168.80.0-168.168.127.255
Signature Algorithm: sha256WithRSAEncryption
28:b6:7c:30:3d:78:d6:c6:a2:30:8b:08:9e:64:fd:b9:f0:95:
26:15:ff:5c:0d:17:a1:11:f0:cd:02:1a:92:81:f2:5e:a4:61:
09:1f:e9:c8:a6:10:40:7e:14:ff:4a:31:b9:3d:0c:83:5d:5c:
f3:4d:31:be:17:87:02:30:db:59:9c:0a:9f:25:87:0b:6e:29:
04:83:81:13:0a:ea:1f:84:ad:d4:9a:cd:a5:44:77:61:71:b5:
17:7f:98:50:b7:e5:03:38:e5:74:75:9e:66:f4:5b:b9:dd:53:
23:3f:c9:48:c6:e6:74:cc:92:35:66:ed:60:a4:cd:b2:b0:19:
42:b9:ca:3b:6d:57:88:81:43:c7:88:02:94:57:1f:c6:2c:62:
a4:02:c0:c0:e7:64:68:94:49:01:00:90:0d:22:25:4c:f5:4b:
5f:54:b3:9d:ce:e2:e5:73:35:3d:8f:c5:d0:cc:54:81:ea:b5:
18:ca:99:aa:39:df:24:69:36:6d:c9:92:4b:a9:8a:76:9b:d5:
54:e9:e3:c7:2d:a2:1b:76:8b:1a:c2:26:0a:b8:cb:51:5e:12:
68:12:28:c7:57:77:6f:8d:33:13:fc:03:ed:e5:05:3c:29:dd:
35:69:d1:ea:5d:a0:f0:15:c2:b0:34:0d:f1:13:35:23:3d:5f:
0a:8c:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:31:27 2024 by rpki-client on console-ams.rpki-client.org