Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/cqQ75lxNDlqlPsFH1wIazoj0ZfE.roa
File: cqQ75lxNDlqlPsFH1wIazoj0ZfE.roa (raw, json)
Hash identifier: uJZe3ham8ed1F/n3EUQIwY7hA+nhMWZP/wwlj7FESlY=
Subject key identifier: 72:A4:3B:E6:5C:4D:0E:5A:A5:3E:C1:47:D7:02:1A:CE:88:F4:65:F1
Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial: 018CC348CA266A51B81D10D8F495E263C9C9
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/cqQ75lxNDlqlPsFH1wIazoj0ZfE.roa
Signing time: Mon 01 Jan 2024 04:29:36 +0000
ROA not before: Mon 01 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207777
IP address blocks: 195.182.29.0/24 maxlen: 24
195.182.27.0/24 maxlen: 24
195.182.37.0/24 maxlen: 24
195.182.24.0/24 maxlen: 24
2a13:7c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ca:26:6a:51:b8:1d:10:d8:f4:95:e2:63:c9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Validity
Not Before: Jan 1 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72a43be65c4d0e5aa53ec147d7021ace88f465f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:73:b6:7d:76:f6:30:fc:f0:62:68:c7:99:
32:73:38:29:ce:3a:76:d8:80:5e:41:d3:d2:52:53:
92:a1:78:2e:8b:40:ad:8f:9c:fa:87:53:97:2f:bd:
97:2b:4b:ff:d8:05:d6:b7:fd:69:e4:c4:0d:ec:21:
8a:c4:6e:7d:cd:e2:e4:ed:bd:20:11:b6:cb:8d:02:
96:47:25:d0:f8:57:cd:85:52:8e:60:bb:7b:91:02:
41:25:e6:5f:05:ce:1c:6c:ae:6b:9b:b0:da:e7:b3:
b9:c5:e6:5a:ab:7a:c7:e0:c6:d0:ee:af:5c:a6:7d:
71:06:e6:32:08:d6:22:8c:e5:1c:01:6f:ea:56:82:
bc:c2:9a:be:b0:56:8d:22:87:1b:b4:c9:4e:f9:25:
c3:1c:6d:6c:6b:8e:41:38:19:b9:90:f6:e0:2c:02:
a4:65:5d:b5:94:d5:4b:53:78:b2:9c:08:8c:f1:40:
15:2f:fa:65:77:f8:32:ea:92:8f:16:e1:47:2f:bd:
35:03:c8:b6:5d:15:9a:3d:8f:bb:53:3a:08:ea:22:
37:0d:33:5e:e3:b9:d2:3b:56:a5:c6:38:f1:5c:b4:
93:af:27:23:22:66:3d:e8:f3:b4:ef:b7:d4:af:0e:
fd:84:eb:b9:86:f7:bb:52:18:ab:4b:8c:e9:a5:ad:
b5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A4:3B:E6:5C:4D:0E:5A:A5:3E:C1:47:D7:02:1A:CE:88:F4:65:F1
X509v3 Authority Key Identifier:
keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/cqQ75lxNDlqlPsFH1wIazoj0ZfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.24.0/24
195.182.27.0/24
195.182.29.0/24
195.182.37.0/24
IPv6:
2a13:7c0::/29
Signature Algorithm: sha256WithRSAEncryption
cf:fa:0b:47:ae:3b:bf:e5:08:ad:61:0d:a8:79:b6:1f:23:73:
8a:74:47:f1:c0:73:be:b6:69:96:1d:5c:b3:5d:a2:7a:c4:60:
b9:92:9b:cb:9f:e9:60:12:0a:bd:76:d7:ca:e1:70:a4:23:6b:
07:bf:24:9b:eb:64:3f:c1:a8:93:b1:59:7d:63:c3:59:8a:1d:
6f:1b:fa:1b:a9:8c:46:10:54:ab:f5:c4:ea:be:c2:db:fa:09:
be:57:30:f6:b7:6a:b8:bb:c9:05:76:b4:78:eb:3d:9f:1b:21:
09:00:df:4f:e8:2e:f1:f7:51:46:0f:44:a2:09:b4:e6:55:f9:
d1:3f:dd:14:22:0b:e8:51:81:96:39:64:12:c9:7d:d8:01:cf:
d1:f5:75:87:d4:ba:3c:6c:47:f0:6e:5c:9d:24:32:82:d2:b4:
7b:b7:6f:09:e5:35:06:74:10:df:a6:4c:92:fd:3d:a9:b5:30:
7b:1d:50:45:a4:49:8c:31:dc:6c:44:59:8e:98:03:55:92:be:
55:24:d2:71:37:74:f6:ec:32:07:14:ff:57:b1:0c:07:e0:cc:
92:96:f1:e8:45:98:82:c6:c9:15:71:b9:a5:16:c7:21:1f:55:
48:20:e4:2a:c2:80:8f:0a:c0:84:d5:93:21:e4:94:8d:64:16:
63:65:0f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:11:14 2024 by rpki-client on console-ams.rpki-client.org