Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/PQpBpYcWhvrvRd4bGDnN8pY1Y5c.roa
File: PQpBpYcWhvrvRd4bGDnN8pY1Y5c.roa (raw, json)
Hash identifier: EOyWcntDPe4fIqfe4aQc1XW6TZ6kvZgJGtWsOmIS0Ak=
Subject key identifier: 3D:0A:41:A5:87:16:86:FA:EF:45:DE:1B:18:39:CD:F2:96:35:63:97
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 018CC8012B35E6D8CEFD081E6A2B6F81B42B
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/PQpBpYcWhvrvRd4bGDnN8pY1Y5c.roa
Signing time: Tue 02 Jan 2024 02:29:28 +0000
ROA not before: Tue 02 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42093
IP address blocks: 195.22.100.0/22 maxlen: 22
185.10.156.0/22 maxlen: 24
178.251.24.0/21 maxlen: 21
2a00:1938::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:2b:35:e6:d8:ce:fd:08:1e:6a:2b:6f:81:b4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Jan 2 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d0a41a5871686faef45de1b1839cdf296356397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5a:09:de:da:5c:a8:bc:8c:f2:fe:90:7f:d3:
cd:94:da:79:1e:24:b5:23:ea:e4:ab:9e:c7:b7:e1:
09:e4:b8:29:7d:28:b5:ad:0e:13:cf:fc:87:5f:f6:
42:39:73:60:e3:f8:f5:d7:5b:13:f7:d1:24:64:43:
8a:a9:7b:23:8b:e3:87:b6:79:cf:da:83:7d:28:e7:
83:c5:6b:59:fb:a6:2c:2a:f4:f3:b1:40:d7:86:94:
3c:06:4e:fc:14:b1:aa:ac:52:cd:ca:6b:fd:87:47:
c2:b3:88:87:d5:87:d3:82:f7:5c:20:96:43:97:b4:
7c:b3:dc:5f:0b:c8:98:4b:a1:b1:09:94:f9:b0:c2:
19:50:b9:1f:95:f2:78:ea:4e:90:3f:e0:aa:51:80:
1c:fa:60:8f:ed:4e:8a:f8:0e:60:01:02:ef:2c:0f:
a7:61:35:60:a1:f7:17:a8:d1:24:6a:c8:35:54:9c:
86:62:f6:2f:db:97:76:d3:36:4c:44:e8:4f:7e:72:
60:8d:16:0a:e0:db:a1:d6:82:81:ce:57:a5:5d:92:
cd:31:de:1a:e9:06:a9:5f:e3:7f:44:34:3c:e8:df:
5e:d8:70:f4:d5:58:da:3b:c2:8b:a0:2a:94:8a:ce:
2f:71:9c:30:e6:e9:63:5d:5b:7a:83:8b:e0:f0:f8:
98:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0A:41:A5:87:16:86:FA:EF:45:DE:1B:18:39:CD:F2:96:35:63:97
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/PQpBpYcWhvrvRd4bGDnN8pY1Y5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.24.0/21
185.10.156.0/22
195.22.100.0/22
IPv6:
2a00:1938::/32
Signature Algorithm: sha256WithRSAEncryption
8f:0d:48:31:98:90:b0:0d:66:d3:79:eb:97:8b:8d:fc:00:68:
bb:bc:3c:e7:13:58:eb:50:a1:8e:35:39:94:41:7a:68:0b:95:
e9:56:c9:b5:9f:a8:75:fc:e0:a9:32:04:87:45:de:c7:21:92:
fc:22:b4:de:cb:a1:94:68:fa:94:fa:43:4f:16:0e:9b:e8:65:
1c:57:5e:02:63:6c:56:dc:82:47:2a:9f:56:08:2d:5c:99:b4:
bb:08:05:c9:dd:1a:f7:f6:c3:28:d2:da:f4:43:78:7a:9d:4a:
13:ac:91:3a:b3:30:e5:12:03:f6:22:21:8f:a4:03:33:d6:3e:
aa:5b:32:49:69:2d:69:ec:58:5e:9d:8f:73:a9:49:2b:d8:8a:
d0:5b:d0:02:5c:14:24:2d:31:75:2f:43:88:82:b5:2a:49:3c:
cb:81:75:3e:54:69:73:02:42:b5:79:53:1c:1b:4b:d1:43:ea:
4a:35:f4:62:17:a3:cc:8f:d3:77:c3:c7:bc:7a:04:4b:8e:79:
df:5c:01:75:98:57:06:e0:37:c9:81:7d:ed:a6:11:81:4d:40:
ca:ba:c1:ac:a4:5d:25:e9:1c:b4:85:67:56:07:48:08:17:e2:
33:1f:6d:cf:0c:df:8a:bc:60:79:ec:c3:ff:01:fe:85:99:92:
ee:98:16:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:46:04 2024 by rpki-client on console-ams.rpki-client.org