Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/3qlGGoCNkdp5ZwLZojGDebwbHcM.roa
File: 3qlGGoCNkdp5ZwLZojGDebwbHcM.roa (raw, json)
Hash identifier: OFygbakWFiKAqj/cWffTnf5SCVZwfuE08URSjWM+92E=
Subject key identifier: DE:A9:46:1A:80:8D:91:DA:79:67:02:D9:A2:31:83:79:BC:1B:1D:C3
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 018E85460F91D8712B8379A497C2BE11DE05
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/3qlGGoCNkdp5ZwLZojGDebwbHcM.roa
Signing time: Thu 28 Mar 2024 13:35:44 +0000
ROA not before: Thu 28 Mar 2024 13:35:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205993
IP address blocks: 46.102.190.0/24 maxlen: 24
86.105.186.0/24 maxlen: 24
89.32.202.0/24 maxlen: 24
89.34.0.0/24 maxlen: 24
89.34.4.0/24 maxlen: 24
89.40.138.0/24 maxlen: 24
185.199.228.0/23 maxlen: 23
185.199.230.0/23 maxlen: 23
188.214.140.0/24 maxlen: 24
188.214.155.0/24 maxlen: 24
188.214.193.0/24 maxlen: 24
2a0a:a4c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:46:0f:91:d8:71:2b:83:79:a4:97:c2:be:11:de:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: Mar 28 13:35:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dea9461a808d91da796702d9a2318379bc1b1dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:73:8d:91:4d:94:b3:55:82:79:80:15:23:
48:2e:f4:73:32:a8:ea:0f:79:b2:9b:e4:09:15:32:
9f:f0:b6:62:54:13:51:ec:3c:6e:b8:65:87:32:1b:
f6:0a:e0:d3:28:a5:7d:16:68:36:2c:b8:a1:94:c0:
23:5f:62:6c:65:21:f1:e5:34:19:67:db:4b:14:8e:
01:2b:dd:75:37:77:b7:5f:48:0e:0e:bf:fa:c3:d1:
4f:c5:8b:cf:84:f2:f4:3b:5e:de:ba:0f:54:1e:ee:
f4:43:a5:ad:81:f8:e4:68:a1:18:76:6c:c7:7c:97:
47:5f:49:4a:af:e9:d7:cc:95:ac:af:23:4c:4b:f4:
93:9f:2e:5d:db:b6:9e:ab:f2:1d:28:0d:4e:28:cd:
08:e8:f6:38:e6:b1:39:7a:10:64:6e:de:74:84:71:
af:1e:ff:9e:df:46:ee:a1:91:a1:5c:26:66:68:15:
3c:0b:3b:16:18:cf:11:da:99:44:a5:31:ad:d0:ce:
f4:e3:7f:60:ed:33:ba:78:e2:de:1f:2d:86:05:79:
03:ce:35:56:56:28:11:cb:cc:0b:a1:02:70:99:a5:
77:a1:77:07:8b:af:92:7d:aa:ca:31:3a:7b:72:86:
a0:5c:b4:63:9a:8c:45:51:45:05:37:f1:11:20:6c:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A9:46:1A:80:8D:91:DA:79:67:02:D9:A2:31:83:79:BC:1B:1D:C3
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/3qlGGoCNkdp5ZwLZojGDebwbHcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.190.0/24
86.105.186.0/24
89.32.202.0/24
89.34.0.0/24
89.34.4.0/24
89.40.138.0/24
185.199.228.0/22
188.214.140.0/24
188.214.155.0/24
188.214.193.0/24
IPv6:
2a0a:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
87:87:b1:5c:83:1d:56:da:30:f0:11:46:67:87:a9:d5:95:e9:
3e:32:4c:c2:aa:e4:44:46:90:3a:72:8c:0e:a6:5c:5e:38:c5:
02:90:48:b7:f3:7b:bd:14:b5:df:33:ef:f2:c6:46:42:03:f8:
66:83:6f:56:15:cc:6b:37:48:fb:f9:01:16:da:90:e5:18:70:
a9:d9:8f:ea:4d:55:12:a1:4d:21:a0:6c:6c:f0:91:6d:6a:e6:
e7:f4:76:de:63:21:77:2a:10:f3:37:4e:84:23:f4:2d:b2:14:
ef:6e:2d:de:10:ef:47:af:43:fd:ae:eb:cd:59:09:f9:fd:ef:
9d:34:96:e2:46:c4:c9:b6:44:d7:ee:24:c2:fd:31:50:97:e4:
b9:36:53:bf:0a:09:d7:62:9f:a2:ca:2f:e7:69:3a:88:d4:72:
e0:de:56:d4:ce:6e:0c:f5:74:0e:64:39:b2:33:4e:e8:99:32:
25:31:02:f4:49:fd:42:14:70:d8:fa:95:4c:90:54:e2:2c:1e:
91:22:30:89:8d:18:81:ee:a9:ae:90:3d:16:4e:4b:68:ca:6b:
d0:80:38:e6:6b:8b:e5:ee:8d:65:ea:c4:99:ad:ba:d1:57:fe:
ff:b6:04:c7:06:a1:02:4c:d7:ea:5e:9e:d3:8e:7c:66:9c:cf:
b9:02:ec:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:58:18 2024 by rpki-client on console-fra.rpki-client.org