Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/Rq4gL0d4uO30OSAdJAF-DMtkaZM.roa
File: Rq4gL0d4uO30OSAdJAF-DMtkaZM.roa (raw, json)
Hash identifier: QZ/Kf2sJ/wqfWOz90DK8y0PP3PDhMYkqguG/KK2XfaI=
Subject key identifier: 46:AE:20:2F:47:78:B8:ED:F4:39:20:1D:24:01:7E:0C:CB:64:69:93
Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial: 018CC4937E3E09219DB0E3187A554E48D5C9
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/Rq4gL0d4uO30OSAdJAF-DMtkaZM.roa
Signing time: Mon 01 Jan 2024 10:30:49 +0000
ROA not before: Mon 01 Jan 2024 10:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57907
IP address blocks: 212.162.156.0/22 maxlen: 22
37.152.48.0/21 maxlen: 21
2a09:d800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:7e:3e:09:21:9d:b0:e3:18:7a:55:4e:48:d5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Validity
Not Before: Jan 1 10:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46ae202f4778b8edf439201d24017e0ccb646993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:ff:eb:bd:74:45:6c:c2:01:0d:03:1a:a4:
78:f2:9b:11:9a:e6:a7:51:0b:9d:a9:e0:3a:7e:af:
d3:c4:b4:c7:46:0a:0d:3b:85:07:47:be:f9:7c:69:
f8:82:05:67:fd:3c:c3:7e:20:8c:0a:a0:8c:aa:f3:
c1:ac:b5:3f:16:91:f9:ad:6d:16:cc:75:71:4a:46:
d9:5b:3a:a0:5a:95:7f:dd:2f:8b:c5:56:b8:5a:17:
39:1e:13:2b:68:46:9d:73:ae:55:56:91:d0:25:b1:
e4:9a:69:34:31:aa:b8:50:69:b7:e9:9e:38:02:6b:
7c:16:a4:c8:a4:f3:a3:39:c4:62:6c:c5:1d:75:d8:
29:5d:89:75:07:e4:b1:33:21:60:78:98:6b:89:76:
25:d0:c8:bf:d9:8d:f2:fc:5b:29:68:43:3e:cb:1a:
c6:84:c0:bc:af:0d:59:6a:dd:1e:6a:a4:2f:f9:f1:
4c:3e:05:52:36:a4:f6:d7:4a:2c:aa:dc:f2:01:a4:
d8:11:4c:c2:45:b5:8b:79:11:ea:d6:d1:3c:61:c6:
52:3c:cb:59:5b:90:d1:07:28:c5:d9:07:fc:0c:ac:
6b:08:85:fe:af:ee:a7:eb:70:d6:db:92:35:b4:4f:
33:a4:0d:2d:79:1c:7d:8c:b8:18:9e:43:b9:79:a7:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AE:20:2F:47:78:B8:ED:F4:39:20:1D:24:01:7E:0C:CB:64:69:93
X509v3 Authority Key Identifier:
keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/Rq4gL0d4uO30OSAdJAF-DMtkaZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.48.0/21
212.162.156.0/22
IPv6:
2a09:d800::/29
Signature Algorithm: sha256WithRSAEncryption
79:6f:ea:44:37:9d:1b:d8:ee:23:da:e0:9c:94:66:10:30:e5:
21:00:d6:c7:0a:5f:b1:23:9d:b9:b4:b3:ec:b8:38:4a:f5:47:
6c:c4:cc:47:ee:89:6d:83:93:4c:62:51:b6:2c:d7:8c:76:e3:
bb:db:1a:26:b0:bb:7d:45:c3:e0:2f:6a:b8:92:d4:7c:54:c5:
61:6e:e3:64:43:ba:d5:71:d4:87:1b:a7:76:91:67:67:bf:ee:
53:7a:9a:da:07:d9:39:80:9b:26:f0:ea:8a:a4:a6:61:99:b1:
f8:86:11:7e:93:4e:96:5a:68:b4:d5:8b:1f:03:8e:92:33:d8:
82:b4:87:78:1e:b0:28:27:49:58:db:7c:2e:08:58:0a:a6:fb:
4f:da:0b:f4:f3:72:a9:8b:1f:2e:bc:74:2d:45:c1:98:b1:66:
ae:57:44:df:66:e5:5b:03:36:30:6a:5d:47:c5:2f:26:d7:4b:
b6:c9:56:08:26:f8:af:36:08:33:31:0a:85:a9:bf:e6:62:b2:
10:c7:90:80:fa:3d:53:07:56:86:36:a3:73:0d:89:46:b4:6f:
10:2b:af:65:b5:87:a5:2e:8c:bf:9e:2e:b9:22:30:85:0b:01:
61:80:2a:f0:39:87:db:77:d9:d6:ea:db:43:36:de:27:28:a4:
8f:c6:64:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:24:15 2024 by rpki-client on console-ams.rpki-client.org