Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/Q2fEuECne768LtpbH4JYjhWQOTw.roa
File: Q2fEuECne768LtpbH4JYjhWQOTw.roa (raw, json)
Hash identifier: rJCkD4bNKnhF6CO8b03HrnAi7+vmbw+6bVRe73U+c9Q=
Subject key identifier: 43:67:C4:B8:40:A7:7B:BE:BC:2E:DA:5B:1F:82:58:8E:15:90:39:3C
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 018CC94CCE8B12ED10963D6274A82ED84AB0
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/Q2fEuECne768LtpbH4JYjhWQOTw.roa
Signing time: Tue 02 Jan 2024 08:31:43 +0000
ROA not before: Tue 02 Jan 2024 08:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47957
IP address blocks: 185.8.52.0/22 maxlen: 24
185.139.244.0/22 maxlen: 24
2a02:d940::/29 maxlen: 48
2a07:18c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:ce:8b:12:ed:10:96:3d:62:74:a8:2e:d8:4a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Jan 2 08:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4367c4b840a77bbebc2eda5b1f82588e1590393c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:97:83:ea:4e:97:04:39:d9:7b:c1:b0:c3:44:
6f:e6:d5:7c:8a:79:2a:b2:f0:6b:ab:5d:54:b3:37:
44:21:3d:ca:e9:69:5b:36:d5:a8:22:22:3b:f4:61:
01:0e:d5:d5:29:41:91:d9:e6:2c:1f:8f:df:8d:4d:
db:6f:bc:b4:f9:62:b3:3d:0f:de:dd:bc:28:de:ec:
a2:16:dc:67:4c:d5:19:03:ea:ce:6f:50:32:44:ba:
e7:d7:76:76:c9:61:8f:c8:2e:51:cc:0f:5c:a3:67:
af:32:f2:38:8d:bd:64:05:94:ce:0a:da:75:2b:60:
0b:65:34:83:50:1b:13:b3:6d:46:1b:2b:63:eb:44:
1b:ef:d4:90:d0:c0:fb:59:02:61:18:08:01:a7:9b:
3c:a9:23:95:b0:f3:2d:f8:d9:51:e1:79:54:a1:72:
af:5b:f5:39:ca:a4:27:94:00:dc:0b:20:17:fd:d6:
10:9a:2e:3f:c9:ac:d6:87:6a:45:91:f7:4d:ac:70:
18:1e:56:a2:41:6a:6b:9a:81:fc:fc:1e:2c:07:13:
0b:46:d2:13:11:89:6b:49:53:97:8a:7f:6e:c6:3d:
d2:af:8d:c3:61:86:a3:fd:d7:1b:9d:85:64:35:3b:
d0:ac:4c:ff:2e:8f:28:d7:be:d2:eb:f5:f7:ab:8a:
79:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:67:C4:B8:40:A7:7B:BE:BC:2E:DA:5B:1F:82:58:8E:15:90:39:3C
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/Q2fEuECne768LtpbH4JYjhWQOTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.52.0/22
185.139.244.0/22
IPv6:
2a02:d940::/29
2a07:18c0::/48
Signature Algorithm: sha256WithRSAEncryption
7c:6d:50:da:27:32:20:db:24:60:89:01:15:f9:84:ea:f8:c6:
04:50:8e:9c:8d:5b:9b:35:f3:ec:72:0a:91:ed:7b:64:25:ab:
c5:9b:b4:20:09:39:e8:3d:cb:88:de:0d:20:1f:3b:65:2e:58:
2b:6a:b4:88:de:2e:15:8b:b1:ae:35:a8:5e:2b:98:5f:d6:7f:
53:a8:17:9f:b8:10:73:03:dd:de:12:95:f1:e0:97:96:77:9b:
4c:6a:09:3f:ee:5c:ea:33:c2:53:2e:53:91:ed:6e:55:90:1f:
dc:06:e4:c5:ce:bf:8b:d5:fd:bf:25:42:cf:83:01:a8:e8:06:
5f:26:89:2b:23:24:bf:bb:59:bf:02:78:92:35:f5:54:c4:57:
82:89:b8:24:88:df:e8:21:99:86:c2:27:f9:68:da:2e:a8:47:
47:69:f1:51:1f:61:c4:f9:0d:1b:bc:a8:92:12:81:bb:0a:29:
6a:e7:69:b6:a8:95:76:b7:ac:db:79:81:d0:d9:86:4f:60:79:
e1:ab:8c:b0:f4:53:f0:8c:ee:8b:f9:05:64:28:d3:ef:1b:63:
55:15:42:73:bc:f8:36:c3:4e:bb:3e:07:f6:79:fe:8f:30:a9:
2b:41:2a:f3:61:7d:cf:f3:d2:a8:d2:a9:cd:9a:b8:87:5c:81:
c7:99:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:16:22 2024 by rpki-client on console-ams.rpki-client.org