Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/qEt2NasBEmy5I3_U0Tqhyp_GRi0.roa
File: qEt2NasBEmy5I3_U0Tqhyp_GRi0.roa (raw, json)
Hash identifier: 5tJo6wx0v1zsGQqNeVwXYRKbBk9j6lgU2vmvS3QlzFg=
Subject key identifier: A8:4B:76:35:AB:01:12:6C:B9:23:7F:D4:D1:3A:A1:CA:9F:C6:46:2D
Certificate issuer: /CN=6386dde35c148f897e9c275d80627e092ea3c0c7
Certificate serial: 018CC6B850A754B3C994877678677EDC02B9
Authority key identifier: 63:86:DD:E3:5C:14:8F:89:7E:9C:27:5D:80:62:7E:09:2E:A3:C0:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4bd41wUj4l-nCddgGJ-CS6jwMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/qEt2NasBEmy5I3_U0Tqhyp_GRi0.roa
Signing time: Mon 01 Jan 2024 20:30:17 +0000
ROA not before: Mon 01 Jan 2024 20:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50599
IP address blocks: 193.105.125.0/24 maxlen: 24
128.0.54.0/24 maxlen: 24
185.170.104.0/22 maxlen: 22
188.210.220.0/22 maxlen: 22
185.72.196.0/22 maxlen: 22
91.204.162.0/24 maxlen: 24
91.204.160.0/23 maxlen: 23
89.40.144.0/22 maxlen: 22
195.177.217.0/24 maxlen: 24
195.177.216.0/24 maxlen: 24
91.236.52.0/24 maxlen: 24
91.236.54.0/23 maxlen: 23
185.11.128.0/22 maxlen: 22
2a0b:5480::/29 maxlen: 29
2a02:e7c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/Y4bd41wUj4l-nCddgGJ-CS6jwMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/Y4bd41wUj4l-nCddgGJ-CS6jwMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4bd41wUj4l-nCddgGJ-CS6jwMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:50:a7:54:b3:c9:94:87:76:78:67:7e:dc:02:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6386dde35c148f897e9c275d80627e092ea3c0c7
Validity
Not Before: Jan 1 20:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a84b7635ab01126cb9237fd4d13aa1ca9fc6462d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:86:bb:3a:d2:04:59:d6:f7:17:60:0f:63:
d0:3f:6e:d5:31:bb:86:33:b6:0f:38:69:ef:17:31:
75:71:bd:81:33:b8:8f:14:34:69:4e:60:f8:dd:4c:
c9:e7:3a:f3:b0:31:98:b5:2a:34:87:5e:57:ee:6e:
8d:18:12:b1:63:11:a9:ff:ab:de:3c:7e:df:06:13:
d0:8c:e8:b9:b3:bf:c0:4a:88:b9:41:72:35:82:19:
e2:e3:10:22:a7:7c:c5:98:86:53:dd:fc:a7:56:98:
b2:a8:b3:f2:c1:9b:1e:90:17:5f:ff:c7:5f:10:73:
a8:77:40:c0:75:36:d7:5f:64:67:2c:f2:69:56:9a:
fa:fc:a8:db:9d:23:37:f9:66:56:15:80:9f:9f:21:
cc:e3:4d:92:52:47:05:ea:20:15:d3:db:0f:22:7c:
02:3f:17:3f:7c:fd:8e:04:18:77:99:e4:2e:5f:20:
45:11:3f:79:f3:d2:f3:a1:3a:61:9f:ae:da:1d:26:
fa:37:67:24:05:33:dd:8a:f7:0d:16:39:d7:bb:64:
27:d9:b1:58:5c:d5:c0:a4:f7:20:a3:b1:a2:3d:fb:
4a:de:db:e5:d7:33:80:1b:2d:7c:72:04:98:7f:36:
a4:ed:cb:aa:7b:df:cb:db:f5:0e:d7:a5:55:2b:9a:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4B:76:35:AB:01:12:6C:B9:23:7F:D4:D1:3A:A1:CA:9F:C6:46:2D
X509v3 Authority Key Identifier:
keyid:63:86:DD:E3:5C:14:8F:89:7E:9C:27:5D:80:62:7E:09:2E:A3:C0:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4bd41wUj4l-nCddgGJ-CS6jwMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/qEt2NasBEmy5I3_U0Tqhyp_GRi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/Y4bd41wUj4l-nCddgGJ-CS6jwMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.144.0/22
91.204.160.0-91.204.162.255
91.236.52.0/24
91.236.54.0/23
128.0.54.0/24
185.11.128.0/22
185.72.196.0/22
185.170.104.0/22
188.210.220.0/22
193.105.125.0/24
195.177.216.0/23
IPv6:
2a02:e7c0::/29
2a0b:5480::/29
Signature Algorithm: sha256WithRSAEncryption
60:8c:03:83:a2:da:96:87:96:80:f2:07:94:db:be:a7:41:55:
69:2d:1e:1b:b6:7f:ef:84:e4:af:41:4f:74:9e:90:dd:3a:2f:
bd:37:ee:de:95:a6:a0:82:aa:fc:aa:c1:ea:1b:74:cb:f8:7d:
31:27:ad:72:9b:7a:e3:dc:7d:2e:ae:7b:71:96:ee:12:85:da:
07:be:99:26:df:3e:80:7c:9e:8b:7f:38:1b:f3:3f:e0:0d:2a:
53:4a:ff:d1:9f:0e:91:17:9a:73:be:c1:73:8a:81:3c:24:24:
c3:3d:31:66:0d:f9:e7:bf:6a:d8:cd:f4:12:0f:e3:77:6d:a4:
bc:93:90:b8:ad:32:f7:ea:5d:c2:78:8a:40:bd:15:87:76:94:
1b:72:5f:0b:06:65:d4:79:22:d2:60:13:5f:df:1a:98:42:93:
b5:01:13:1b:9c:ab:2b:c4:2c:3c:d0:ea:50:c1:1a:23:57:ff:
ac:88:10:fe:dd:2f:6b:ab:74:2c:ef:5a:79:b5:9f:f1:42:16:
87:08:b0:28:51:d4:11:b4:74:a7:ad:52:b3:d4:e5:b4:bb:70:
89:b5:68:88:47:7a:9c:a9:5b:2d:f1:91:97:03:e8:93:c1:8a:
d1:f1:5d:47:bd:5e:55:78:49:a5:f8:d0:ba:90:bd:36:b6:53:
ce:f8:ce:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:13:31 2024 by rpki-client on console-fra.rpki-client.org