Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/Qy1bWVgviS4eQWxcGAm6JVQ2Io0.roa
File: Qy1bWVgviS4eQWxcGAm6JVQ2Io0.roa (raw, json)
Hash identifier: VHq/0m8M3tMEbvuNTJNcxXxyDqhSaUMdKtpfcJbpPs4=
Subject key identifier: 43:2D:5B:59:58:2F:89:2E:1E:41:6C:5C:18:09:BA:25:54:36:22:8D
Certificate issuer: /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Certificate serial: 018CC4253BBEA69F3315BF6D2DB6A269B0A1
Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/Qy1bWVgviS4eQWxcGAm6JVQ2Io0.roa
Signing time: Mon 01 Jan 2024 08:30:23 +0000
ROA not before: Mon 01 Jan 2024 08:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210806
IP address blocks: 185.37.11.0/24 maxlen: 24
2a11:da80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3b:be:a6:9f:33:15:bf:6d:2d:b6:a2:69:b0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Validity
Not Before: Jan 1 08:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=432d5b59582f892e1e416c5c1809ba255436228d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:02:da:6c:f8:4d:be:37:07:9f:7a:e1:93:
28:f1:61:a8:9c:24:d6:0c:f6:78:e3:bf:1b:91:3b:
d6:41:af:8b:4e:0e:50:82:03:99:22:fc:a4:c4:5e:
e1:88:22:dd:1c:db:a4:03:55:b4:17:89:44:63:76:
2c:83:2d:6e:a2:1d:3a:22:97:d9:d7:95:95:4b:cf:
d1:60:6b:21:46:54:62:72:ea:34:79:65:cd:a4:6f:
e7:c0:d9:83:86:01:03:0e:0b:46:96:18:fa:53:5c:
cf:f1:1b:d6:8a:5a:a3:d9:a6:a0:84:68:9f:b9:8b:
54:36:6e:51:8f:f6:74:38:a7:59:d0:83:33:e4:4e:
0a:da:e7:29:a0:7c:70:da:2d:0d:ed:36:41:50:50:
0f:0b:ca:73:c3:97:ec:22:eb:02:9f:6a:bf:78:dc:
16:e4:98:9e:dc:3f:49:7c:2d:6c:2b:1e:8e:c3:02:
7c:52:75:8e:07:ef:83:16:ad:6d:aa:8b:1b:16:04:
cc:f0:9d:38:65:66:69:e5:cc:f9:23:4b:92:77:30:
c6:8d:85:3d:65:97:e3:78:b1:8d:14:59:35:28:88:
cd:11:23:b7:d5:99:10:a6:76:66:cb:c8:bb:ba:24:
e9:58:38:51:79:1f:76:8f:f3:8b:96:38:1e:c2:be:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2D:5B:59:58:2F:89:2E:1E:41:6C:5C:18:09:BA:25:54:36:22:8D
X509v3 Authority Key Identifier:
keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/Qy1bWVgviS4eQWxcGAm6JVQ2Io0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.11.0/24
IPv6:
2a11:da80::/29
Signature Algorithm: sha256WithRSAEncryption
6c:0f:a9:86:31:67:2b:4f:a6:65:bf:6d:6e:e2:d5:a7:77:bf:
17:40:ed:d2:a6:03:71:e7:dc:26:87:ad:a8:34:73:a0:a8:db:
1d:80:b1:15:8b:7e:f5:65:ca:56:c6:ac:cd:90:ad:d3:a5:a9:
48:a9:42:d1:ba:ac:28:ea:f7:81:d5:85:37:53:36:71:a8:c9:
c6:73:26:3b:47:1a:37:5c:f3:c1:c9:7e:57:bb:b8:18:fd:80:
9d:ee:f5:25:03:8d:b9:36:38:75:24:05:3a:76:33:7d:eb:d9:
f4:20:bb:d5:4e:76:0a:e5:42:33:a9:29:2e:e5:0a:67:31:38:
74:8f:51:ce:1e:4c:39:f7:dc:93:86:12:08:b8:7c:6b:7c:76:
70:19:e4:42:f5:89:01:c0:22:b6:b5:e6:cd:df:dc:5b:e8:af:
9e:3f:81:f6:16:3e:0b:2f:fd:53:5d:8d:d4:1b:19:74:55:69:
a0:5f:d9:ce:5d:91:9c:b4:90:a3:13:92:fe:cd:6b:1f:5f:b2:
67:eb:58:ff:fe:09:34:16:7f:3f:fd:76:3c:c1:ac:47:f8:09:
7c:ee:18:16:fe:9c:50:2c:34:40:7d:10:2b:5b:60:e4:c2:20:
25:1b:2c:ec:93:74:d8:db:18:c7:6b:66:c7:51:1d:80:e7:fc:
3b:aa:c1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:28:04 2024 by rpki-client on console-ams.rpki-client.org