Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/qkhla3UHmcmsuKeuVlshezm1hP8.roa
File: qkhla3UHmcmsuKeuVlshezm1hP8.roa (raw, json)
Hash identifier: 0tEJeJA0dnc1xlIRaQAq7mnjEy2BZViICFNoFTvu2mc=
Subject key identifier: AA:48:65:6B:75:07:99:C9:AC:B8:A7:AE:56:5B:21:7B:39:B5:84:FF
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649DE387E69C2D6E07608A8718B16ED
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/qkhla3UHmcmsuKeuVlshezm1hP8.roa
Signing time: Mon 01 Jan 2024 18:29:38 +0000
ROA not before: Mon 01 Jan 2024 18:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48917
IP address blocks: 92.247.160.0/22 maxlen: 22
78.83.129.0/24 maxlen: 24
78.83.132.0/24 maxlen: 24
78.83.130.0/24 maxlen: 24
78.83.128.0/24 maxlen: 24
78.83.131.0/24 maxlen: 24
78.83.134.0/24 maxlen: 24
78.83.135.0/24 maxlen: 24
78.83.133.0/24 maxlen: 24
88.203.156.0/24 maxlen: 24
62.204.158.0/24 maxlen: 24
92.247.73.0/24 maxlen: 24
92.247.76.0/24 maxlen: 24
92.247.74.0/24 maxlen: 24
92.247.75.0/24 maxlen: 24
92.247.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:de:38:7e:69:c2:d6:e0:76:08:a8:71:8b:16:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa48656b750799c9acb8a7ae565b217b39b584ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:92:f1:be:6e:ff:f3:8c:5a:0b:70:b3:de:
72:c1:a2:39:96:9c:83:fd:e4:ab:d2:5d:45:c4:06:
e4:64:68:1a:60:8c:70:a0:72:9d:64:96:5b:24:65:
01:f0:19:79:c5:7d:61:de:97:8b:cb:70:87:6c:6d:
ab:d3:0e:5f:a1:d8:be:f7:bc:1a:b7:f9:c9:da:87:
95:58:da:22:8e:c0:ea:9d:c1:33:22:58:3a:7a:58:
37:f8:e5:2e:b6:50:b0:b9:92:cb:ed:92:0e:71:0d:
6c:ab:f3:60:12:35:0f:b8:92:c2:e0:93:de:1a:d2:
c6:c3:dd:0a:11:56:6d:c7:f6:bc:f4:29:f4:ff:ca:
f9:9d:f9:65:37:90:8f:94:d6:e0:4c:06:85:6b:8a:
6e:92:b6:e1:7b:3f:9b:26:06:5b:4e:e4:92:bd:a5:
13:ac:72:75:8a:e5:c2:f5:34:7b:c4:6b:81:99:77:
d3:e0:64:de:9d:5f:6b:a9:21:d5:7e:ac:6a:c7:e2:
1c:1f:03:df:d0:15:26:09:be:62:03:0e:f2:7a:a0:
75:06:d1:ab:0c:14:da:0f:69:0c:6f:3d:1f:a9:e6:
8f:10:4c:35:8f:48:e4:c3:8b:a2:6e:da:48:33:78:
e6:0b:88:33:29:45:8a:8c:19:91:0a:12:9b:2d:e3:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:48:65:6B:75:07:99:C9:AC:B8:A7:AE:56:5B:21:7B:39:B5:84:FF
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/qkhla3UHmcmsuKeuVlshezm1hP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.158.0/24
78.83.128.0/21
88.203.156.0/24
92.247.72.0-92.247.76.255
92.247.160.0/22
Signature Algorithm: sha256WithRSAEncryption
57:33:03:5d:aa:a1:30:7b:90:b8:83:13:69:8f:38:c0:01:13:
48:5c:fd:38:e1:95:ac:9b:40:b3:60:20:5c:68:cb:7b:74:f8:
89:84:e9:95:38:58:66:1e:51:07:72:68:f6:a9:d2:44:4c:a9:
94:bb:3c:ad:a4:93:9e:d8:dc:c0:9c:84:76:5c:00:8c:4c:dc:
3a:cd:79:a5:d5:1b:d4:c1:14:49:cb:71:84:3e:9c:e5:1e:59:
4a:e1:fc:40:a3:66:86:b4:40:99:8a:9b:d6:e2:75:3f:1d:26:
4e:10:d2:8c:d9:4a:b9:12:8e:82:cc:34:49:8a:ea:67:50:cf:
2c:e0:8e:2e:f0:91:91:03:c9:90:89:f7:4d:04:76:f6:06:0b:
75:60:51:19:e2:10:c6:b1:1a:52:b4:8c:20:81:ae:16:04:a7:
39:7a:c9:fa:f7:c3:07:d5:36:a3:e6:76:cd:c8:5b:70:b5:a1:
e8:9a:54:cc:77:a4:d3:cc:eb:51:ef:be:c0:53:4b:f0:80:f9:
00:d2:08:29:a8:81:67:f3:8b:e0:8a:da:cf:e4:94:67:09:96:
37:9f:20:e3:5b:c7:55:b9:32:b9:de:87:fc:a9:bc:29:ae:09:
3f:6c:97:bb:11:f1:b9:73:25:75:79:c6:5b:57:2d:88:9c:3d:
2d:ea:cf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:42:14 2024 by rpki-client on console-fra.rpki-client.org