Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/qHJhQX00DCexAJgh51CwXiuV1D0.roa
File: qHJhQX00DCexAJgh51CwXiuV1D0.roa (raw, json)
Hash identifier: QuQmR/ibNnLrhks9MpVHJo/nws866QMbxYy6FLeZ+lM=
Subject key identifier: A8:72:61:41:7D:34:0C:27:B1:00:98:21:E7:50:B0:5E:2B:95:D4:3D
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0192B922790301F17E4E0DF2AE6921C9AE13
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/qHJhQX00DCexAJgh51CwXiuV1D0.roa
Signing time: Wed 23 Oct 2024 11:28:16 +0000
ROA not before: Wed 23 Oct 2024 11:28:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 2.59.162.0/24 maxlen: 24
2.59.163.0/24 maxlen: 24
62.133.60.0/24 maxlen: 24
62.133.61.0/24 maxlen: 24
62.133.62.0/24 maxlen: 24
62.133.63.0/24 maxlen: 24
194.156.102.0/24 maxlen: 24
194.156.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:22:79:03:01:f1:7e:4e:0d:f2:ae:69:21:c9:ae:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Oct 23 11:28:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a87261417d340c27b1009821e750b05e2b95d43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:ee:a8:68:2a:d4:e3:f9:67:b7:41:f5:67:
51:51:53:d8:9b:a8:7d:e2:87:33:6a:27:7c:2c:aa:
be:87:fe:91:40:bc:79:d4:3f:55:a4:d1:9d:56:05:
dd:70:81:16:fe:bc:22:cd:9c:97:5f:30:c7:f7:37:
3b:01:90:97:a9:2c:bf:68:2f:de:1d:42:43:28:78:
75:4d:46:57:4c:67:00:d7:d0:b2:7a:66:da:f1:4c:
e2:f4:8f:9a:22:8c:fa:0b:d7:24:29:ad:f8:90:63:
00:6f:26:d3:26:85:eb:85:e5:34:fd:3e:cd:50:40:
38:59:95:d0:71:12:cb:90:53:b5:28:71:3b:bd:5f:
ec:9d:95:8f:b8:b6:25:97:3b:20:6b:2d:9b:36:62:
b7:22:cf:fa:ad:ac:06:ef:bd:b2:3c:0c:2d:59:1d:
47:e9:ac:4d:97:d4:f0:14:9b:e7:b6:77:b2:94:4e:
f9:ca:d5:ea:91:af:bf:44:89:c4:51:2e:a5:ff:14:
4d:ab:eb:1d:4c:3c:c1:ea:93:c0:7b:6c:df:56:a8:
67:41:17:26:c8:2d:57:b3:7f:80:b2:37:6e:d9:e1:
fc:f4:67:c4:20:91:4c:36:cc:fa:77:7c:73:c7:5b:
84:c6:1a:8c:23:6b:16:f6:ae:bd:2c:66:6a:97:bd:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:72:61:41:7D:34:0C:27:B1:00:98:21:E7:50:B0:5E:2B:95:D4:3D
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/qHJhQX00DCexAJgh51CwXiuV1D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.162.0/23
62.133.60.0/22
194.156.102.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:27:99:13:8c:16:40:e3:7a:8b:8a:70:2a:ab:88:0f:c7:f3:
12:e7:5a:a9:14:e4:2c:83:f2:b6:06:f9:c7:b2:d6:38:33:93:
65:b0:f6:1b:c3:2b:18:43:e2:d1:4e:f7:54:6d:4b:3e:2b:fd:
35:cf:93:54:28:a4:09:ce:94:1c:a2:38:23:d5:4d:6a:73:70:
83:96:e5:94:13:85:70:45:fd:8d:78:43:c1:cd:af:ea:b7:15:
92:d0:85:48:e0:a5:40:ab:5f:1f:41:93:0c:01:bf:64:1d:69:
f9:ba:6e:0b:33:a1:fb:1b:c0:3b:df:a5:37:8e:3b:a3:5d:30:
10:79:c0:3e:ef:fd:d5:e9:4e:30:1b:dc:46:40:70:1e:11:32:
83:0e:43:30:30:06:01:79:93:4f:55:51:27:05:10:83:f6:9d:
f6:23:b2:d3:72:52:fc:fe:5d:7d:df:f8:01:5d:0c:73:a0:4f:
af:cc:99:fd:38:c0:1b:8f:db:93:68:77:1b:4a:68:49:c6:39:
b0:3a:cf:87:e5:34:15:3a:ee:5b:0f:27:96:d3:e1:07:e5:4f:
e7:e1:6e:bd:47:b1:39:da:b9:03:37:b9:dc:2d:6e:83:88:fc:
83:a2:9a:89:d5:07:25:79:50:ac:f1:54:5f:4d:17:b7:07:33:
e3:c6:83:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:56:53 2024 by rpki-client on console-ams.rpki-client.org