Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/8QLwuhBETab8gUea0SL6McheOBQ.roa
File: 8QLwuhBETab8gUea0SL6McheOBQ.roa (raw, json)
Hash identifier: UZBQ2aDeSnxA0F/o89UvGFI51vFf8AypLG0x7a2hd3k=
Subject key identifier: F1:02:F0:BA:10:44:4D:A6:FC:81:47:9A:D1:22:FA:31:C8:5E:38:14
Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial: 01939826A65969684A838F324CA327236F29
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/8QLwuhBETab8gUea0SL6McheOBQ.roa
Signing time: Thu 05 Dec 2024 18:48:10 +0000
ROA not before: Thu 05 Dec 2024 18:48:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201661
IP address blocks: 185.234.88.0/24 maxlen: 24
185.234.89.0/24 maxlen: 24
185.234.90.0/24 maxlen: 24
185.234.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:98:26:a6:59:69:68:4a:83:8f:32:4c:a3:27:23:6f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Validity
Not Before: Dec 5 18:48:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f102f0ba10444da6fc81479ad122fa31c85e3814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:f5:5b:57:34:c0:39:3f:2f:f5:5c:c1:59:
52:88:4c:33:e6:91:35:8c:cc:46:a4:2b:d0:17:02:
a9:1d:c1:75:76:cd:29:75:f6:54:b5:a5:3d:be:98:
a4:77:61:cc:3e:c1:01:e8:d2:3e:7b:3f:72:b6:3a:
7d:b9:c8:6a:20:7c:82:db:96:7b:49:3a:95:0e:92:
91:a6:37:ec:f4:59:bd:8e:2f:04:94:14:41:00:42:
ee:2d:d4:dc:b1:79:60:4d:4a:03:e9:a0:1c:41:ca:
39:f6:c6:bb:34:94:c1:85:da:16:0b:4d:8e:3c:f0:
e6:f6:ac:70:3c:a8:98:8f:ab:b9:12:35:c5:30:f4:
dd:74:aa:7d:11:4a:98:a0:94:00:ba:f9:a6:fd:15:
17:c8:be:c8:28:50:7b:9b:ce:79:09:00:e5:f0:a9:
2f:4d:d4:db:37:48:16:7e:5f:a3:6c:4e:13:09:2f:
1a:c8:c9:d5:4e:b3:db:6e:b7:89:88:ef:39:44:68:
bd:12:41:6f:08:02:fc:50:56:76:e9:a8:18:ba:71:
38:06:29:cf:45:80:96:16:38:55:07:2a:e4:3b:8d:
d9:cf:aa:04:58:d2:da:84:24:96:c2:e9:44:72:3b:
9c:eb:6c:3c:a0:e2:c4:54:5a:82:d6:d6:97:fd:21:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:02:F0:BA:10:44:4D:A6:FC:81:47:9A:D1:22:FA:31:C8:5E:38:14
X509v3 Authority Key Identifier:
keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/8QLwuhBETab8gUea0SL6McheOBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.88.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:3d:b3:9e:b5:39:f1:3c:d2:9c:bb:d0:2d:dc:5a:96:03:ca:
f1:f7:7c:f3:cb:30:4e:6a:19:a5:09:69:81:18:c3:12:76:cc:
09:85:07:56:9c:e1:46:11:17:37:4a:04:78:31:81:02:43:bd:
08:16:bd:a7:20:17:27:de:75:9f:60:bc:f9:2a:e2:e6:c9:a9:
0d:da:5f:6f:c7:a1:9d:28:09:9a:61:25:46:24:a7:c3:7c:b8:
4f:da:51:5f:0f:11:6e:13:ab:c7:7d:d2:3d:d7:04:48:bf:12:
64:8b:aa:25:d7:7e:67:df:d9:be:a0:9d:47:11:34:f2:92:c1:
5c:2a:82:f2:fd:0e:68:87:93:5f:bc:fd:8f:57:a3:c1:9a:2a:
1a:69:34:f0:c1:25:13:b9:c5:9b:23:36:f1:81:4e:4b:93:3f:
42:3c:90:4b:73:b9:ac:74:12:c6:df:b3:75:4b:27:e1:68:23:
56:bc:9a:dd:2e:6d:90:5c:7a:f9:f1:6f:19:74:e6:1d:ef:e9:
2f:b4:74:ba:12:5b:61:df:c3:95:45:a4:be:8d:ed:57:b9:e7:
e8:0c:90:1f:21:0e:d5:f0:7b:8f:2f:19:7c:f9:2b:06:5e:db:
24:c0:03:2e:df:a3:31:f4:db:96:c8:07:e5:10:a8:9e:68:ab:
48:a5:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:07:06 2024 by rpki-client on console-ams.rpki-client.org