Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/KQJn8KIT8Z5-atZt3Cnh0W5Bos8.roa
File: KQJn8KIT8Z5-atZt3Cnh0W5Bos8.roa (raw, json)
Hash identifier: iIMdSyu+bdpcoDqu5BB0segcOdsG8c9S9fTCO9BNRxE=
Subject key identifier: 29:02:67:F0:A2:13:F1:9E:7E:6A:D6:6D:DC:29:E1:D1:6E:41:A2:CF
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 018EA536A2D1E67DFA96E7395E14CE9C51AE
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/KQJn8KIT8Z5-atZt3Cnh0W5Bos8.roa
Signing time: Wed 03 Apr 2024 18:26:45 +0000
ROA not before: Wed 03 Apr 2024 18:26:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202813
IP address blocks: 185.14.60.0/22 maxlen: 24
185.14.60.0/23 maxlen: 23
185.14.60.0/24 maxlen: 24
185.14.61.0/24 maxlen: 24
185.14.62.0/23 maxlen: 23
185.14.62.0/24 maxlen: 24
185.14.63.0/24 maxlen: 24
185.153.224.0/22 maxlen: 24
185.153.224.0/23 maxlen: 23
185.153.224.0/24 maxlen: 24
185.153.225.0/24 maxlen: 24
185.153.226.0/23 maxlen: 23
185.153.226.0/24 maxlen: 24
185.153.227.0/24 maxlen: 24
185.178.16.0/22 maxlen: 24
185.178.16.0/23 maxlen: 23
185.178.16.0/24 maxlen: 24
185.178.17.0/24 maxlen: 24
185.178.18.0/23 maxlen: 23
185.178.18.0/24 maxlen: 24
185.178.19.0/24 maxlen: 24
2a09:74c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a5:36:a2:d1:e6:7d:fa:96:e7:39:5e:14:ce:9c:51:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: Apr 3 18:26:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=290267f0a213f19e7e6ad66ddc29e1d16e41a2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8f:2e:31:04:a2:6f:06:79:22:40:ca:3d:2e:
a7:6b:34:ca:17:77:d4:8a:b0:8f:a3:87:ec:24:09:
0e:2e:c2:70:5b:ec:bc:2e:23:59:2e:8d:a3:84:8a:
f4:81:a3:52:87:17:e7:8b:20:93:a4:ad:46:e8:ff:
05:b9:ce:2d:32:12:66:a3:88:d6:a7:e6:f1:2b:b1:
2a:1e:5f:8f:28:7b:67:e4:4a:37:9f:73:3d:8f:df:
d6:c0:69:7b:1b:09:01:f6:1f:a3:8a:8e:69:11:81:
24:a8:ba:6e:1f:da:01:6e:e2:11:69:16:51:d2:f2:
79:9d:d0:0a:88:cc:07:4b:bc:c5:fb:a4:ff:bd:4a:
7d:53:aa:72:0d:9a:6c:73:ca:84:7a:eb:9b:a8:e0:
eb:c1:b6:a8:bf:e2:de:b2:c3:d5:c4:d0:a6:e0:e6:
2d:bd:d2:a0:07:d5:27:34:16:cb:69:cf:c4:b6:14:
61:4e:a7:79:e5:39:57:0f:be:e5:e0:0b:8b:f0:de:
58:a2:5b:74:a3:d4:64:19:b4:a8:ef:36:f4:4f:ad:
cb:9d:a9:1a:06:09:45:47:3c:97:e0:c6:c7:e1:b5:
fe:4a:0b:39:03:8c:ac:69:45:b4:01:70:c2:43:4b:
8f:8a:93:04:ad:c7:fe:6f:51:a2:9b:05:c4:41:31:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:02:67:F0:A2:13:F1:9E:7E:6A:D6:6D:DC:29:E1:D1:6E:41:A2:CF
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/KQJn8KIT8Z5-atZt3Cnh0W5Bos8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.60.0/22
185.153.224.0/22
185.178.16.0/22
IPv6:
2a09:74c0::/29
Signature Algorithm: sha256WithRSAEncryption
41:4b:14:7b:ad:a8:16:1a:c9:54:2a:ad:0b:69:07:26:84:aa:
9e:47:4d:b2:0e:3e:e9:e7:e1:a4:e5:0c:5f:d2:d3:10:db:1f:
7e:a0:fb:13:3e:c9:1d:d7:f8:1e:dd:7a:14:fb:99:aa:6c:52:
df:b2:62:3f:2a:3b:5e:1b:fd:14:04:62:47:20:d7:83:56:8f:
bd:00:aa:1d:8b:b1:56:a1:11:92:49:89:16:9e:72:76:29:1c:
25:55:9c:30:2e:2d:96:8a:df:c2:bb:5f:ea:17:53:8b:a8:0f:
1f:b0:0b:1b:8f:1a:fa:4a:ae:f6:e6:d3:ae:ab:74:1e:70:ed:
22:de:be:d5:b8:6f:db:bc:3f:bd:40:6a:43:45:cf:01:df:4d:
04:e1:fe:ab:8b:94:d9:1b:d4:ab:9e:81:88:a1:01:17:12:76:
26:8b:fd:53:8f:43:0f:d0:a0:71:d2:29:fc:2c:38:b2:d1:c1:
f9:1d:50:8f:5e:f7:85:3d:0d:ef:5c:25:56:de:ab:4a:97:5e:
e1:7e:22:93:ca:8b:e1:6d:45:a3:8a:7e:a7:a5:1a:43:70:ff:
b2:9c:dc:5b:2e:b8:46:6b:9d:34:11:d3:8b:50:01:51:2e:79:
43:ba:88:3c:18:a4:51:2a:96:4c:54:41:4c:13:64:d1:e0:9a:
cb:ed:49:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:06:12 2024 by rpki-client on console-fra.rpki-client.org