Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/qB1AiMx_cSLDraUQy7ALLdASAEg.roa
File: qB1AiMx_cSLDraUQy7ALLdASAEg.roa (raw, json)
Hash identifier: aJy3Zgq/HnPCgrohDsCnyRmk5K9jdkomIRf26auFHd8=
Subject key identifier: A8:1D:40:88:CC:7F:71:22:C3:AD:A5:10:CB:B0:0B:2D:D0:12:00:48
Certificate issuer: /CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Certificate serial: 018CC348D09B306E16E813B439FF7C3426E7
Authority key identifier: 5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/qB1AiMx_cSLDraUQy7ALLdASAEg.roa
Signing time: Mon 01 Jan 2024 04:29:38 +0000
ROA not before: Mon 01 Jan 2024 04:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62173
IP address blocks: 185.75.196.0/24 maxlen: 24
185.75.198.0/23 maxlen: 23
185.75.196.0/23 maxlen: 23
185.75.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d0:9b:30:6e:16:e8:13:b4:39:ff:7c:34:26:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Validity
Not Before: Jan 1 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a81d4088cc7f7122c3ada510cbb00b2dd0120048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:eb:47:80:fc:ac:ed:80:15:3d:4a:67:7a:
4c:1c:85:63:dc:ce:96:c1:22:82:38:c6:d4:2d:ce:
77:21:9f:2b:e7:97:12:6e:66:cd:b3:bd:c4:01:cd:
35:55:c8:31:a7:f3:13:5b:39:11:88:f6:be:33:c1:
9c:46:f2:74:da:af:f6:52:ba:13:04:f4:74:1d:77:
9e:fe:7e:28:96:fb:41:97:ab:fb:56:65:f1:0b:f0:
a5:4e:f7:38:83:b7:d9:c5:2f:a7:2a:df:df:e9:0b:
f7:bc:71:ba:9c:f1:0d:59:93:68:54:b5:90:d2:8a:
b7:ae:2c:01:57:3c:62:95:80:35:08:c6:02:e5:20:
88:1e:51:58:f9:81:b3:af:ef:ab:bf:25:2a:da:79:
08:f0:c1:49:35:34:03:75:ce:19:a3:02:a7:3b:6e:
5f:55:0b:ea:32:94:b2:82:cf:29:c6:5f:e9:c2:7c:
68:8f:da:7f:a0:0d:c2:a2:48:87:a6:0e:f8:5d:c8:
a1:78:e4:b2:e0:15:0c:2a:18:2b:12:00:f4:2a:7d:
cb:0b:dc:18:f7:3a:f3:64:5a:08:36:d3:8a:af:4d:
59:6b:30:74:58:44:37:16:6f:67:b1:16:94:3b:71:
2a:f1:6c:95:d8:35:56:e3:20:91:db:93:04:83:8c:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1D:40:88:CC:7F:71:22:C3:AD:A5:10:CB:B0:0B:2D:D0:12:00:48
X509v3 Authority Key Identifier:
keyid:5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/qB1AiMx_cSLDraUQy7ALLdASAEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.196.0/22
Signature Algorithm: sha256WithRSAEncryption
23:76:e9:a9:93:d2:fa:15:ae:86:77:06:f2:c6:f1:57:85:8d:
7c:9e:a4:ea:72:a2:36:fc:c7:2b:bf:f0:13:a3:3a:b5:7c:82:
b0:0c:7b:1e:94:84:ef:31:fa:1e:86:4c:dc:ae:94:09:c7:f6:
d1:f5:f4:82:ad:02:0c:26:07:67:b5:ad:28:4f:1e:e1:dc:5c:
90:3f:48:8c:1a:07:36:0e:43:6f:e5:76:b5:28:d6:05:c1:7c:
3a:62:51:9e:7d:e2:79:6e:4a:15:3b:fa:32:1e:b6:33:0d:7a:
df:54:50:ce:1d:87:1a:db:61:7a:72:00:81:f3:66:45:28:ee:
42:f4:d4:90:25:2c:ab:96:50:e3:67:e6:1b:fb:62:5e:64:a6:
88:d2:8b:03:f0:fd:1d:15:b3:ac:4e:14:f9:11:4f:a1:3b:bb:
71:8b:75:5c:ff:25:54:b4:fd:df:39:0e:87:ec:59:1f:d4:c1:
4f:c4:9b:29:b5:12:84:b8:4a:3b:3b:f4:74:85:ae:e9:63:30:
b3:f1:d2:41:1d:6a:9f:09:d3:7a:4e:4f:37:08:43:a1:24:7e:
af:bb:4a:c8:32:65:49:ea:04:84:22:cc:5d:91:9a:55:ba:23:
81:01:bb:d7:33:22:2a:31:2a:a2:ad:b4:56:94:7c:c8:c4:5c:
8f:65:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:20:18 2024 by rpki-client on console-ams.rpki-client.org