Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qEjbrHq1CqOzbUrwFPL7w5BbsEw.roa
File: qEjbrHq1CqOzbUrwFPL7w5BbsEw.roa (raw, json)
Hash identifier: TOH8/tOlHTOEtM7MiLi+5N59N+Ud9WWkziCoUprHgyE=
Subject key identifier: A8:48:DB:AC:7A:B5:0A:A3:B3:6D:4A:F0:14:F2:FB:C3:90:5B:B0:4C
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018EFF7829E856F63AEF1EBD4B2C23311A19
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qEjbrHq1CqOzbUrwFPL7w5BbsEw.roa
Signing time: Sun 21 Apr 2024 07:04:08 +0000
ROA not before: Sun 21 Apr 2024 07:04:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.255.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
185.226.182.0/24 maxlen: 24
185.250.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ff:78:29:e8:56:f6:3a:ef:1e:bd:4b:2c:23:31:1a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 21 07:04:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a848dbac7ab50aa3b36d4af014f2fbc3905bb04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:e2:d4:c6:f9:d7:e4:fb:89:85:fc:a0:96:
44:c6:0c:2e:57:53:1b:94:f3:48:2c:e9:73:94:a1:
ce:c9:1a:80:93:35:63:4e:c4:55:07:c7:28:95:84:
17:b9:64:70:a7:42:1d:00:ec:72:8b:65:b4:90:5d:
55:22:0d:1f:c9:b5:34:2a:7e:dc:40:db:cd:18:dd:
cd:fb:2b:4f:11:ab:71:d9:9b:ce:48:da:90:95:67:
df:c8:8d:9c:e5:64:59:81:1d:ef:04:47:ae:96:8e:
77:fb:51:2c:60:67:5c:25:dd:ea:10:47:f0:2e:af:
e8:42:da:fc:07:82:99:ef:8d:6f:8c:66:9d:37:94:
66:5f:9a:66:6b:d0:07:bc:86:57:80:26:8e:47:99:
68:fc:f0:a0:4d:76:fc:b4:00:91:09:ca:43:fb:c4:
42:24:de:7a:aa:79:aa:70:23:82:f5:4e:21:50:39:
bc:02:13:79:be:3f:fb:c3:84:df:da:9d:09:b9:8a:
51:d2:5c:70:27:f9:5d:27:4e:ea:21:f3:ee:0c:01:
b1:90:e6:9f:63:19:c9:a5:45:77:95:21:67:10:c8:
80:31:cf:9e:66:f1:62:02:30:90:47:f1:50:48:2f:
0e:cf:e4:a2:db:b2:b4:f7:c5:a9:5b:d6:e0:05:d9:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:48:DB:AC:7A:B5:0A:A3:B3:6D:4A:F0:14:F2:FB:C3:90:5B:B0:4C
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qEjbrHq1CqOzbUrwFPL7w5BbsEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.255.0/24
176.125.251.0/24
185.199.151.0/24
185.199.213.0/24
185.226.181.0-185.226.182.255
185.250.27.0/24
Signature Algorithm: sha256WithRSAEncryption
36:9f:a7:81:7e:6e:3c:46:bf:d7:ca:b2:77:3c:e5:6c:79:19:
fb:2b:71:ed:da:6b:0d:bf:b8:5e:8d:ee:17:4d:11:57:28:b1:
34:29:4d:39:15:01:5e:32:24:da:11:41:e6:a1:ce:fb:42:aa:
b3:90:0d:7f:58:5c:02:7a:71:50:d6:7c:1f:fb:45:7d:ca:90:
71:d4:bc:49:dd:67:c4:4f:54:f0:47:9e:41:77:5a:9a:3a:81:
f2:80:60:61:0e:d8:03:26:7b:58:b8:04:47:49:13:52:8b:79:
55:a3:c1:ca:88:a0:64:c3:77:05:e9:5a:80:57:21:c1:15:80:
e0:b6:a1:1d:85:5b:b9:44:eb:2d:6a:4d:7e:0f:b0:ed:8b:45:
c2:ba:31:9c:51:4e:37:7e:77:70:e1:f1:94:89:d8:58:25:20:
74:05:ad:bf:87:75:7a:42:ac:ac:91:c5:6f:a6:5a:ed:c0:ae:
f7:06:08:dc:39:a4:3d:3d:f8:11:66:44:3b:b8:1b:d2:8e:f1:
1c:2f:e1:88:2a:36:e2:da:4a:a5:f8:11:ed:42:59:09:6a:8c:
d9:bf:ad:10:78:02:85:33:d9:4b:8f:58:84:60:d7:73:98:d0:
33:8a:a5:0f:24:f1:16:65:f6:80:3a:20:4d:9e:73:33:77:11:
e6:49:cd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:57:46 2024 by rpki-client on console-fra.rpki-client.org