Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/t-KQX53Vrw9N2XSMBOWV_AdnH0k.roa
File: t-KQX53Vrw9N2XSMBOWV_AdnH0k.roa (raw, json)
Hash identifier: gF0s/Z5aXH2ukPS2u+WGBv5QtgEIuNy4yeKAwTVt6YU=
Subject key identifier: B7:E2:90:5F:9D:D5:AF:0F:4D:D9:74:8C:04:E5:95:FC:07:67:1F:49
Certificate issuer: /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial: 018D9E45F98FEC164DC8796086B28DB72852
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/t-KQX53Vrw9N2XSMBOWV_AdnH0k.roa
Signing time: Mon 12 Feb 2024 17:03:22 +0000
ROA not before: Mon 12 Feb 2024 17:03:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60729
IP address blocks: 185.220.101.0/24 maxlen: 24
185.220.102.0/24 maxlen: 24
2a0b:f4c1:2::/48 maxlen: 48
2a0b:f4c2::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9e:45:f9:8f:ec:16:4d:c8:79:60:86:b2:8d:b7:28:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Validity
Not Before: Feb 12 17:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7e2905f9dd5af0f4dd9748c04e595fc07671f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:4a:79:6e:98:2e:1c:ae:1f:61:d2:1d:fc:
3d:98:db:9c:f4:f4:15:c8:87:11:51:11:6d:ec:8d:
8f:49:8c:2e:71:68:08:0e:99:76:02:28:dd:d8:66:
3f:f4:6d:db:e1:8f:bd:1c:38:7c:b8:e1:f0:4c:29:
05:93:42:72:1f:35:7e:99:4b:87:fb:d0:11:4a:09:
7e:94:6d:5b:90:3c:78:c8:b5:d0:a3:db:61:24:6f:
e4:5f:b1:9a:f5:6b:99:06:14:94:01:6b:49:b0:f4:
bf:0b:c1:ff:b9:28:8c:40:39:94:97:9b:cd:c1:fb:
bc:7a:70:74:5c:61:eb:06:4b:cc:f7:0b:1a:64:fa:
97:1a:b6:1a:6a:24:d0:10:f8:e0:c5:9d:07:99:00:
76:33:f7:89:d4:bd:b9:f5:d3:16:1e:f7:cd:ba:93:
cf:79:0b:cb:21:44:74:c2:2b:90:93:51:fc:24:5c:
fe:ee:22:92:2c:d7:a6:1e:00:9d:b9:e2:c9:d3:7e:
cf:0d:25:47:8b:7e:32:72:2c:3e:72:94:be:68:ed:
81:1b:9c:37:1b:31:c4:b5:fa:a3:91:44:36:e1:b9:
d0:0d:36:76:a0:e8:f8:12:b8:a4:b8:3a:15:0b:a1:
a2:fa:ee:a6:a6:e5:ea:74:c1:f1:a2:da:ec:20:4d:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E2:90:5F:9D:D5:AF:0F:4D:D9:74:8C:04:E5:95:FC:07:67:1F:49
X509v3 Authority Key Identifier:
keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/t-KQX53Vrw9N2XSMBOWV_AdnH0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.101.0-185.220.102.255
IPv6:
2a0b:f4c1:2::/48
2a0b:f4c2::/40
Signature Algorithm: sha256WithRSAEncryption
23:46:99:b7:d6:52:7a:36:5d:7e:2e:c1:3d:05:0a:de:9d:68:
e1:c5:4a:f9:c5:92:ba:fe:99:24:36:dc:90:67:e1:1a:d7:d3:
9a:35:3d:1c:c8:35:3e:f0:5f:9e:e4:cc:6e:5f:16:0e:82:88:
98:c0:15:c1:80:b7:1e:3d:58:ff:f4:fb:0b:2b:4f:64:a1:19:
e8:f1:43:59:d5:8d:07:ba:26:71:33:75:49:79:2c:c6:5b:eb:
71:a8:a4:1b:14:da:69:e5:bd:06:dd:55:3a:74:73:a1:46:03:
f1:fc:7b:b0:f4:63:64:33:6c:56:ef:b7:38:5f:ff:e3:95:31:
9e:97:86:d3:b4:d1:bf:39:21:cf:ee:ba:ec:65:97:ea:2c:85:
7e:d0:c5:dc:ac:a9:db:94:5a:07:44:8c:e0:68:95:fc:42:c0:
18:4d:af:b6:3b:f8:61:bb:86:bc:6d:fa:5b:78:38:fb:e1:e6:
f3:cd:4c:fb:53:cb:be:82:2d:08:b0:50:7c:30:a5:ab:d9:ad:
02:55:75:20:82:84:d0:31:f0:c5:db:64:0b:77:96:be:ab:3b:
85:d1:bf:e6:e4:eb:7c:61:2c:9d:fa:67:84:44:bf:66:e0:a8:
68:5f:8f:a9:07:be:56:15:bf:fb:b8:c1:d6:68:17:8c:93:d1:
92:bf:af:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:07:55 2024 by rpki-client on console-fra.rpki-client.org