Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/APQAiTFP955bNS-1iufjEXZacS8.roa
File: APQAiTFP955bNS-1iufjEXZacS8.roa (raw, json)
Hash identifier: tj194S/+Hh9hQSnS5I6wOpyNNqZ3qAVpTxO6jGq/S8A=
Subject key identifier: 00:F4:00:89:31:4F:F7:9E:5B:35:2F:B5:8A:E7:E3:11:76:5A:71:2F
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0190EF2345D2EB8E60FDCB0210C4794FCEF3
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/APQAiTFP955bNS-1iufjEXZacS8.roa
Signing time: Fri 26 Jul 2024 13:03:04 +0000
ROA not before: Fri 26 Jul 2024 13:03:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 46.173.240.0/21 maxlen: 21
64.43.104.0/22 maxlen: 22
64.43.112.0/22 maxlen: 22
64.43.124.0/22 maxlen: 22
77.36.120.0/22 maxlen: 22
91.233.0.0/23 maxlen: 23
91.245.184.0/22 maxlen: 22
176.102.120.0/21 maxlen: 21
176.102.120.0/22 maxlen: 22
176.102.124.0/22 maxlen: 22
176.103.240.0/21 maxlen: 21
176.103.240.0/22 maxlen: 22
176.103.244.0/22 maxlen: 22
176.116.232.0/22 maxlen: 22
178.212.184.0/21 maxlen: 21
178.212.184.0/22 maxlen: 22
178.212.188.0/22 maxlen: 22
185.55.4.0/22 maxlen: 22
185.55.4.0/23 maxlen: 23
185.55.6.0/23 maxlen: 23
185.55.140.0/22 maxlen: 22
185.55.140.0/23 maxlen: 23
185.55.142.0/23 maxlen: 23
193.36.204.0/22 maxlen: 22
193.36.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:23:45:d2:eb:8e:60:fd:cb:02:10:c4:79:4f:ce:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jul 26 13:03:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00f40089314ff79e5b352fb58ae7e311765a712f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:db:93:53:9e:4c:1b:6c:7d:c0:1a:ba:ee:7e:
2f:81:86:f2:e0:56:e1:43:4a:d9:77:99:5f:ed:21:
54:9d:e6:3a:8f:60:55:7a:d1:90:51:e7:cf:8b:3e:
39:2f:75:48:b5:a7:fc:b6:c8:35:55:26:af:e7:4e:
d2:85:5b:4a:2c:12:4b:5c:02:41:85:ee:f0:a9:68:
23:76:bf:af:31:d1:c9:03:50:75:ff:64:d9:26:20:
90:81:47:3f:db:72:c0:91:6f:05:e2:5c:ae:e0:14:
0e:70:d0:6d:1a:8c:b4:1a:62:6a:b0:f7:7b:14:3f:
c9:db:de:d0:66:74:5c:43:86:41:26:2c:bc:ee:e1:
a0:3a:b6:9b:b9:01:ac:21:28:41:9b:68:34:e7:c8:
3d:17:d6:6c:e5:11:d5:e3:26:f7:93:43:89:08:27:
32:db:da:b0:f4:72:e9:f2:2d:84:d6:91:97:82:d6:
90:57:3e:81:4b:ca:22:b5:87:a0:78:7e:c1:c4:8a:
2a:c0:93:de:5b:92:97:54:43:fc:01:c9:84:58:a9:
3a:b8:68:b7:e4:75:1a:8a:d1:db:99:2e:99:60:e8:
dd:0c:92:c0:81:3b:a0:c0:ce:59:89:05:1d:4e:31:
41:43:ca:21:5d:aa:a1:cb:33:8e:b1:2c:c3:b2:b1:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F4:00:89:31:4F:F7:9E:5B:35:2F:B5:8A:E7:E3:11:76:5A:71:2F
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/APQAiTFP955bNS-1iufjEXZacS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.240.0/21
64.43.104.0/22
64.43.112.0/22
64.43.124.0/22
77.36.120.0/22
91.233.0.0/23
91.245.184.0/22
176.102.120.0/21
176.103.240.0/21
176.116.232.0/22
178.212.184.0/21
185.55.4.0/22
185.55.140.0/22
193.36.204.0-193.36.215.255
Signature Algorithm: sha256WithRSAEncryption
7c:97:c4:5f:54:67:b0:c4:95:98:f1:0c:04:a0:99:a4:d0:bb:
54:3c:d5:60:2d:07:eb:d0:54:8c:34:c2:e5:6d:2a:d4:52:14:
6d:9d:96:b8:6b:3d:0e:93:7b:4e:e2:88:b6:38:61:3a:1c:e9:
b4:b8:d7:99:21:98:92:01:c6:19:70:01:73:d9:56:6f:80:c7:
91:d6:5a:47:99:8b:b7:84:d1:7a:11:fa:cc:c6:b4:a0:5b:b4:
ca:c1:7f:50:14:5f:22:fd:08:00:6c:93:2d:3b:17:9b:9a:3b:
61:4d:60:f5:ba:04:51:0f:56:aa:6f:48:bd:ee:81:cd:c0:b2:
db:de:58:a9:10:96:05:e0:bc:e3:ca:41:7a:23:5a:09:cb:24:
7a:36:e5:b0:e0:96:c1:4f:6b:8e:2f:ae:2d:34:e3:03:86:33:
e4:51:6b:75:1b:22:18:91:8f:72:c1:54:fb:5e:92:de:27:04:
94:d5:08:1f:53:e5:c6:8e:bd:82:39:8b:f8:6d:d0:4f:d4:ad:
d3:1c:44:5c:64:dc:32:08:ef:4f:b6:d4:eb:c3:e5:38:8f:7a:
e4:3e:40:73:ec:43:90:d3:58:97:30:31:fb:df:16:c4:15:1b:
8b:80:f6:0e:00:26:a7:0a:6f:39:de:3c:05:67:15:a8:ae:f4:
9e:57:6c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:53:14 2024 by rpki-client on console-ams.rpki-client.org