Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/Q12l_FKSqCZ3jSAka9iTQkPNP3g.roa
File: Q12l_FKSqCZ3jSAka9iTQkPNP3g.roa (raw, json)
Hash identifier: cIOs052A1wlVGA1vbrfV/kcldAnFPHgZftY0uuBdHX4=
Subject key identifier: 43:5D:A5:FC:52:92:A8:26:77:8D:20:24:6B:D8:93:42:43:CD:3F:78
Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial: 018CC793EC764E7727620AA734EA8454EC0C
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/Q12l_FKSqCZ3jSAka9iTQkPNP3g.roa
Signing time: Tue 02 Jan 2024 00:30:09 +0000
ROA not before: Tue 02 Jan 2024 00:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61369
IP address blocks: 88.202.208.0/22 maxlen: 24
88.212.156.0/22 maxlen: 24
185.8.132.0/22 maxlen: 24
83.151.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:ec:76:4e:77:27:62:0a:a7:34:ea:84:54:ec:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Validity
Not Before: Jan 2 00:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=435da5fc5292a826778d20246bd8934243cd3f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b4:c3:bf:b6:4b:dd:00:e3:ed:06:5d:43:78:
95:26:8e:74:72:c5:52:a4:5c:6f:3e:68:55:00:42:
db:e2:60:44:5c:7e:6e:f9:13:6c:84:97:29:78:30:
aa:c5:ff:ef:2e:e2:b7:b6:c4:33:a7:f5:1b:56:de:
14:a2:e4:06:d5:93:b5:fd:bc:09:a5:b1:d1:4f:e8:
b3:bf:34:bd:46:8c:bd:17:ff:ab:b0:b8:2d:00:c6:
20:9d:21:c4:9f:3c:84:c2:a7:76:33:4a:c3:0b:fe:
ce:52:02:07:7f:55:54:e9:20:32:c1:78:9f:4d:30:
7a:05:52:fd:66:a4:62:b0:7d:f9:52:14:85:6c:2f:
f8:09:ba:76:5c:98:5a:e3:06:e9:ac:79:a4:8c:88:
7d:c5:e4:7e:0c:b4:59:9d:f2:6c:70:c4:98:d6:d5:
f6:d4:3e:89:0a:5a:b8:f6:54:53:6f:b0:ab:d0:2e:
44:e4:17:9e:97:e7:fc:e1:11:4d:37:f4:b9:d9:3f:
55:57:13:4b:0e:63:5b:c9:78:83:45:5f:48:fa:0d:
fc:77:dc:fb:4c:68:04:5e:c2:c1:a5:ea:a2:44:1b:
72:98:3d:88:d3:80:21:8a:8b:31:19:47:a2:1e:04:
b8:7e:0d:4d:c1:0d:83:d8:11:cf:b2:89:af:9b:c5:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5D:A5:FC:52:92:A8:26:77:8D:20:24:6B:D8:93:42:43:CD:3F:78
X509v3 Authority Key Identifier:
keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/Q12l_FKSqCZ3jSAka9iTQkPNP3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.151.192.0/22
88.202.208.0/22
88.212.156.0/22
185.8.132.0/22
Signature Algorithm: sha256WithRSAEncryption
51:14:61:c5:67:b2:14:53:b7:29:2c:69:b0:a4:e8:3e:8d:29:
37:77:7e:2f:36:da:6b:09:77:07:cb:3e:da:d9:42:47:e6:e1:
d5:3e:2d:0c:71:26:39:58:ec:8f:86:7a:87:80:63:14:16:c3:
ab:f5:b5:e5:9b:8c:85:a1:ac:fe:b1:ff:b9:62:0f:86:12:ca:
75:13:55:4f:fc:4f:27:9b:30:00:0a:f4:bb:f3:e2:22:67:aa:
e3:9d:03:52:6c:88:a4:99:e1:09:5d:d1:72:62:e3:c1:ee:90:
d4:0c:c0:8a:75:c8:8c:e3:7e:5c:80:15:f2:6e:30:cd:c7:ad:
f5:d4:64:81:3c:d2:00:fd:75:35:23:a7:02:ea:06:82:28:37:
ce:75:ad:a5:11:58:10:f9:61:12:ec:e5:eb:6c:dc:79:da:f0:
20:f4:7e:87:7e:9e:9a:25:ff:db:31:d9:22:dd:a1:9e:5b:04:
b3:f6:16:8f:e2:8a:a4:8f:00:f4:08:24:b7:f5:82:86:59:ab:
7f:c2:b5:39:5f:bc:fd:90:6b:d9:22:f9:c5:4c:f9:0b:6d:a7:
6c:f9:d9:09:98:4f:3e:a1:6e:2d:7d:3a:29:39:79:6a:f3:2a:
27:96:63:dc:d3:d4:cc:18:9e:21:26:3e:cc:47:08:73:a6:ac:
8e:1e:e3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:48:25 2024 by rpki-client on console-ams.rpki-client.org