Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C0qCh3-s7RVCVogphIPBN2JhfyA.roa
File: C0qCh3-s7RVCVogphIPBN2JhfyA.roa (raw, json)
Hash identifier: RryR0Cs21qQUV1kWbDNC4ciJtRZB4iO75FH7TMpZQFs=
Subject key identifier: 0B:4A:82:87:7F:AC:ED:15:42:56:88:29:84:83:C1:37:62:61:7F:20
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018E7723E65A2FCB149067F9892BDCAC473C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C0qCh3-s7RVCVogphIPBN2JhfyA.roa
Signing time: Mon 25 Mar 2024 19:43:45 +0000
ROA not before: Mon 25 Mar 2024 19:43:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199558
IP address blocks: 85.254.144.0/24 maxlen: 24
159.148.27.0/24 maxlen: 24
159.148.89.0/24 maxlen: 24
159.148.218.0/24 maxlen: 24
159.148.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:77:23:e6:5a:2f:cb:14:90:67:f9:89:2b:dc:ac:47:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 25 19:43:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b4a82877faced15425688298483c13762617f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:0e:27:58:52:31:4e:4e:41:e9:fa:a2:c5:
b2:3f:05:0c:0b:de:5a:b7:13:81:56:99:b0:e9:e7:
9a:e1:ec:ca:fa:13:d6:a1:6a:a4:f2:a3:93:ea:03:
21:b6:c4:02:d4:db:73:ef:ab:06:eb:f7:9d:c6:f5:
13:56:02:49:7c:59:d3:0a:9a:03:e8:f7:63:fa:19:
ad:91:04:e7:b9:26:b4:38:fa:bb:d6:86:7a:c4:00:
d4:37:8e:df:7a:f7:9e:37:90:cc:cf:c0:8b:fc:4a:
df:db:aa:1f:e7:d2:51:e6:0f:80:27:f6:50:fd:de:
90:1c:91:d9:b0:42:aa:22:0e:e7:83:76:ce:99:76:
af:c7:4c:27:fc:e8:38:ba:4a:a0:58:41:e1:37:2a:
2a:17:37:ab:f5:4a:47:61:ae:57:77:2a:7d:bb:ce:
e5:e4:b5:9f:a7:12:d5:c8:43:6c:4c:eb:8d:98:7c:
9c:8e:64:0b:ce:8f:e9:01:c8:db:3f:75:28:b8:dd:
d5:5b:97:dd:0c:24:e3:f8:4f:93:c7:41:11:60:4f:
2b:2b:aa:9d:4b:7a:93:cb:fc:74:54:f4:7b:6b:6c:
d0:5e:8b:38:e7:8a:37:e2:f1:7d:2f:70:3c:9d:28:
91:09:1b:0b:fb:fc:ee:33:0b:6f:58:a3:7b:29:3e:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4A:82:87:7F:AC:ED:15:42:56:88:29:84:83:C1:37:62:61:7F:20
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C0qCh3-s7RVCVogphIPBN2JhfyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.144.0/24
159.148.27.0/24
159.148.89.0/24
159.148.218.0/24
159.148.233.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:46:36:e8:7a:63:f9:fd:d0:d1:86:92:b2:39:08:99:c2:03:
ca:ed:ae:fb:9a:c6:f6:fc:a7:ec:e4:de:f6:9c:65:35:5d:fc:
17:62:d1:42:44:ef:9e:7b:66:92:cb:3c:68:c2:4a:ba:b8:cf:
d2:b5:bb:71:53:af:5d:f7:e6:b5:54:a7:e8:22:7a:e5:fc:d0:
7c:c9:04:b8:d2:fd:88:bb:01:9e:e7:17:0a:aa:5a:ed:23:91:
56:4d:d0:d5:4c:e7:d4:9c:d4:e1:6a:b4:5d:5d:b2:8b:5f:7d:
d7:13:ce:c0:ce:8e:3c:1b:d2:29:e3:34:e3:f4:df:0f:1e:8f:
a8:d6:a1:8f:29:82:ec:10:1d:0b:5f:bd:b9:d5:a7:35:9e:ed:
d0:26:66:66:e0:58:28:dd:58:b5:9e:63:80:60:ab:d4:12:43:
a5:ae:f0:de:a4:fe:ac:25:96:34:19:c5:59:6c:2d:c3:b3:c0:
be:5e:c2:a4:6e:cc:da:72:9a:9f:d7:7f:1f:f3:b1:8b:16:69:
5c:43:53:23:5b:8b:24:b7:86:76:df:c8:64:9d:7e:27:85:29:
e1:59:65:47:25:c2:08:01:61:ef:82:6b:12:09:b3:7f:a0:f1:
78:2d:4e:05:59:c4:61:7c:be:6e:06:73:06:cc:4a:78:20:02:
4c:8a:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:30:38 2024 by rpki-client on console-ams.rpki-client.org