Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/pqNDUbD91OwfVOH0iq8TBqIv9Q0.roa
File: pqNDUbD91OwfVOH0iq8TBqIv9Q0.roa (raw, json)
Hash identifier: bHVwDjd/VTodxgJXmsGUMSiliJoU/0iu9WwX0LGD5+E=
Subject key identifier: A6:A3:43:51:B0:FD:D4:EC:1F:54:E1:F4:8A:AF:13:06:A2:2F:F5:0D
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 018CC2DAF8730A8F580245CBB58089BEE589
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/pqNDUbD91OwfVOH0iq8TBqIv9Q0.roa
Signing time: Mon 01 Jan 2024 02:29:39 +0000
ROA not before: Mon 01 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48253
IP address blocks: 185.142.38.0/24 maxlen: 24
185.142.37.0/24 maxlen: 24
185.142.36.0/24 maxlen: 24
185.142.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f8:73:0a:8f:58:02:45:cb:b5:80:89:be:e5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Jan 1 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6a34351b0fdd4ec1f54e1f48aaf1306a22ff50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:86:81:a4:17:5a:73:84:11:c2:5f:a3:78:
c0:ea:99:b0:0b:5e:f7:38:88:c8:b0:a1:2d:2b:87:
23:79:d5:c2:93:81:9a:9c:b5:91:7b:54:79:67:94:
74:b3:95:7d:df:57:c1:a8:5d:74:11:ff:24:d0:f4:
e6:c9:4e:73:18:ba:88:a9:87:d5:23:ca:d0:b8:69:
de:96:e9:14:50:42:b5:7c:96:8a:3a:61:d9:4f:95:
19:9f:a7:f0:d0:5d:85:d0:7e:f2:53:9e:35:c3:ac:
5b:96:97:9f:c5:b7:a0:86:14:cc:1e:2f:6e:a1:ac:
f4:95:8d:f5:91:39:a2:38:a1:a1:29:02:3a:e4:1c:
61:92:a6:aa:53:2d:b7:1e:3b:25:c4:2f:0f:3d:53:
99:a5:1c:61:a6:4b:65:53:c0:d8:52:91:61:96:e0:
43:7e:ce:a6:e0:fa:30:ae:e1:27:a0:d4:ac:12:79:
f3:c9:60:6f:5a:65:18:3e:a4:10:cd:72:3a:c6:da:
57:76:0c:6c:01:51:51:6c:26:30:8a:ae:b2:1b:7c:
7e:2f:30:2e:f1:17:45:79:84:a6:0d:7c:bd:f9:43:
ae:bd:84:ab:ff:b6:eb:01:b6:34:7d:49:f2:2b:62:
79:5b:57:55:07:a1:0e:2f:ea:2f:2c:0e:e9:2b:76:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A3:43:51:B0:FD:D4:EC:1F:54:E1:F4:8A:AF:13:06:A2:2F:F5:0D
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/pqNDUbD91OwfVOH0iq8TBqIv9Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.36.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:f5:aa:ec:1c:c2:6b:81:3a:b2:79:f5:6a:bd:6a:c9:53:f4:
d5:fa:eb:b4:f7:41:08:1c:c5:4e:77:99:a3:8c:93:fc:fc:86:
de:dc:34:7c:b8:25:78:aa:2a:8a:89:39:95:48:ba:97:35:b9:
70:39:3e:4d:96:a2:12:40:a1:99:12:f0:2d:b0:40:03:1b:fc:
b5:c2:a1:0b:fb:16:76:dd:14:06:ab:b5:79:70:b7:5f:46:3f:
99:5b:02:03:7b:2c:be:f5:56:22:09:92:1f:12:c8:02:fe:22:
b8:73:29:ad:56:2d:a2:47:1a:3a:39:ff:ec:91:56:c4:de:87:
ab:f3:8b:bd:bb:48:d8:06:43:97:eb:9c:7f:2f:06:19:b6:1c:
dd:3a:ee:bd:b8:29:52:c2:d6:2e:44:44:70:2e:42:9c:b4:59:
e1:1f:1c:89:7f:a2:c9:37:7c:c8:9e:72:92:9f:c4:bc:4a:6e:
13:82:0c:6b:5c:95:27:8b:da:14:ab:51:f8:2e:8e:82:27:92:
d9:02:97:08:2d:47:9c:dd:c6:d0:a3:7e:2e:07:b3:5a:b3:4e:
77:c3:15:a5:80:c2:e2:e2:6e:a9:69:6e:5e:86:94:71:a4:a8:
35:eb:7a:42:93:bd:fe:dc:bc:23:89:82:78:b6:59:b9:6e:7c:
df:5c:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:52:47 2024 by rpki-client on console-ams.rpki-client.org