Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/sqcQoTUU_ab4IcxVpprTeK7xCJA.roa
File: sqcQoTUU_ab4IcxVpprTeK7xCJA.roa (raw, json)
Hash identifier: sALrTTPdDVsBfO54ImYytesqq+mRpR6Cp9BM9d+3qS8=
Subject key identifier: B2:A7:10:A1:35:14:FD:A6:F8:21:CC:55:A6:9A:D3:78:AE:F1:08:90
Certificate issuer: /CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Certificate serial: 018D40AC30BC796032FFD661364A890D320E
Authority key identifier: 85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/sqcQoTUU_ab4IcxVpprTeK7xCJA.roa
Signing time: Thu 25 Jan 2024 12:50:42 +0000
ROA not before: Thu 25 Jan 2024 12:50:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208397
IP address blocks: 185.135.180.0/23 maxlen: 23
185.135.182.0/23 maxlen: 23
185.135.183.0/24 maxlen: 24
185.138.200.0/23 maxlen: 23
185.138.202.0/23 maxlen: 23
185.141.40.0/23 maxlen: 23
185.141.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:ac:30:bc:79:60:32:ff:d6:61:36:4a:89:0d:32:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Validity
Not Before: Jan 25 12:50:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2a710a13514fda6f821cc55a69ad378aef10890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f0:a5:39:e5:1f:41:7d:15:f7:13:16:ec:b8:
7e:3b:74:ce:10:35:9a:07:ba:57:10:ef:cf:d6:00:
d5:d4:79:2e:80:1a:7e:13:d9:b7:1d:bf:91:53:3e:
96:3c:e4:db:a1:f2:65:61:68:7f:b3:58:b9:e8:76:
d3:cf:e7:67:df:6c:eb:88:eb:a6:b9:3f:65:01:c4:
f1:7f:9f:b2:c6:4c:99:ab:1f:cf:fd:20:37:60:95:
ef:a4:e9:da:65:09:e0:7c:d2:37:cd:03:d2:a4:5c:
5d:ad:39:71:66:2f:3e:bb:8f:69:28:26:6d:ba:3a:
bb:b4:41:89:9d:b2:45:d4:a5:16:9a:c2:8b:4b:71:
5b:4a:06:ad:82:9d:3c:de:59:3b:58:a6:07:49:2d:
a0:7b:ad:9b:72:2b:2c:ca:61:ef:8b:7f:61:d8:0c:
e7:84:37:7f:1b:e8:5b:90:42:80:61:55:8a:cf:7d:
94:82:dc:3a:13:0a:31:c4:15:9c:bc:2d:7d:6e:23:
19:e9:4c:13:f8:d8:a6:aa:07:0a:eb:c3:e8:86:75:
46:a6:92:b7:b5:05:98:fa:f7:99:f8:00:8e:1e:36:
ca:d9:56:ed:a0:b0:7a:2c:8b:8c:16:f3:9b:8b:21:
3b:2f:70:b4:44:18:35:2c:e2:5d:c4:d0:a9:37:e8:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A7:10:A1:35:14:FD:A6:F8:21:CC:55:A6:9A:D3:78:AE:F1:08:90
X509v3 Authority Key Identifier:
keyid:85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/sqcQoTUU_ab4IcxVpprTeK7xCJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.180.0/22
185.138.200.0/22
185.141.40.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:3b:e4:5d:39:fb:3a:95:35:d6:01:58:fc:20:8d:f3:89:ad:
7c:7b:b6:99:0b:b3:fe:ed:22:ad:77:b2:81:db:d9:7a:34:e3:
d4:48:91:06:5b:a0:cc:3a:51:5a:ec:4e:5f:dd:53:de:b1:e5:
38:4a:c5:ff:e9:da:c2:f4:b4:22:88:b7:d0:6e:ba:cd:77:11:
67:02:ff:69:10:3a:6d:55:8f:bc:89:c2:da:a9:8b:0f:84:2f:
2e:3d:f9:ce:88:46:fc:ba:fd:09:5a:fe:da:b7:8f:57:e1:32:
c1:3a:62:61:ad:d8:d9:72:93:32:8e:57:b3:19:2a:46:ea:ec:
28:a6:f2:7f:76:47:40:fc:e7:79:88:10:3b:b7:60:1e:e1:f0:
f7:d7:0e:7b:09:06:00:8c:4e:50:b0:a3:3b:08:8e:20:54:70:
df:0f:67:16:05:cb:dd:ad:c1:b4:73:33:dc:73:cd:51:e3:c5:
1e:5a:bc:04:6e:51:bd:bd:e1:0f:6f:41:8f:82:b5:89:29:02:
17:ef:d1:23:7e:e9:bb:72:62:da:50:9f:73:c8:63:4a:18:5a:
24:97:f8:e9:76:22:cb:8c:7f:63:dd:0e:fa:72:78:26:8b:10:
41:21:b8:1c:da:6c:59:ec:10:db:70:0d:d3:16:12:11:dd:a2:
b2:8f:d4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:28 2024 by rpki-client on console-ams.rpki-client.org