Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/ql0IazXbH0Hfic3c7nXizlLQjfc.roa
File: ql0IazXbH0Hfic3c7nXizlLQjfc.roa (raw, json)
Hash identifier: 0lCPfOCuyqsUl4DaXbkxLVBfikHmKapWjpKD3pYK9Ks=
Subject key identifier: AA:5D:08:6B:35:DB:1F:41:DF:89:CD:DC:EE:75:E2:CE:52:D0:8D:F7
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 018CC3494F4F1461B25D2863C0462FAF83F0
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/ql0IazXbH0Hfic3c7nXizlLQjfc.roa
Signing time: Mon 01 Jan 2024 04:30:10 +0000
ROA not before: Mon 01 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33876
IP address blocks: 185.76.4.0/22 maxlen: 24
176.111.104.0/22 maxlen: 22
176.111.104.0/24 maxlen: 24
185.12.116.0/22 maxlen: 24
185.11.164.0/22 maxlen: 24
91.198.47.0/24 maxlen: 24
94.126.168.0/21 maxlen: 24
176.61.144.0/21 maxlen: 21
194.8.30.0/24 maxlen: 24
2a03:8bc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4f:4f:14:61:b2:5d:28:63:c0:46:2f:af:83:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Jan 1 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa5d086b35db1f41df89cddcee75e2ce52d08df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:68:66:09:c6:fe:fa:0a:eb:3c:9f:29:49:c3:
fa:41:aa:88:27:e4:50:90:55:0c:e1:65:f3:50:4e:
77:de:fa:c1:ee:c0:c7:9c:3d:5a:44:2f:11:ad:5e:
c7:2c:1b:50:b5:93:cd:68:15:44:c7:9e:11:93:64:
b1:79:e2:6e:b8:8e:1e:a7:fa:02:37:f8:d2:56:05:
6e:be:b6:6a:b7:3d:c8:9b:55:85:c7:25:77:79:d4:
eb:8c:91:d5:0b:43:cc:08:51:a3:e6:bd:05:ca:39:
63:a6:b2:c6:3f:60:e4:e0:a9:c7:3d:25:55:db:de:
54:0d:e7:13:f9:31:5e:91:99:d0:0c:52:09:f1:44:
54:1c:2f:45:95:8b:68:42:c9:50:48:b4:d8:3e:fc:
46:9a:df:8f:dc:37:0c:39:49:22:3f:90:c1:84:fd:
86:6f:37:27:26:0d:8a:00:5b:8b:4f:d7:8d:02:00:
46:c7:80:85:4f:c4:21:74:83:b0:0e:b3:5f:64:1e:
4d:60:80:f0:2a:09:20:32:34:0b:70:c3:c3:89:15:
82:e1:3a:86:d6:9a:b4:3f:12:c3:0f:3a:74:71:e7:
db:80:7a:1c:f0:16:7d:75:f1:4d:e5:1b:f8:37:00:
68:e4:f9:32:01:1e:a6:9c:7a:b5:3f:4a:c5:de:84:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5D:08:6B:35:DB:1F:41:DF:89:CD:DC:EE:75:E2:CE:52:D0:8D:F7
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/ql0IazXbH0Hfic3c7nXizlLQjfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.47.0/24
94.126.168.0/21
176.61.144.0/21
176.111.104.0/22
185.11.164.0/22
185.12.116.0/22
185.76.4.0/22
194.8.30.0/24
IPv6:
2a03:8bc0::/32
Signature Algorithm: sha256WithRSAEncryption
41:bb:fc:5a:9b:3a:e5:c1:f5:f1:dd:1a:e4:8a:ba:27:47:f0:
5b:eb:a9:e4:e1:0a:d0:68:b3:f7:19:1d:d5:54:b3:62:56:f6:
2c:c9:d5:85:81:34:f7:ba:13:da:9b:fb:f9:f0:cd:46:8a:7b:
e8:85:2a:27:47:4b:5d:b0:9d:86:07:4f:24:e1:49:ef:74:f5:
50:9f:91:a1:19:9d:4e:09:f6:3f:37:b4:ea:ab:2a:a5:92:22:
ee:84:0a:05:8b:fe:1f:4b:2b:2b:ab:9d:86:5b:29:2e:a9:aa:
d7:ac:ea:a0:b9:ec:0c:cd:bb:0f:0d:08:5f:52:9b:6b:6f:86:
16:a4:82:97:78:fe:d6:f3:69:9c:90:a2:2f:e2:05:94:09:00:
8c:24:d1:78:51:6a:63:c5:ed:fb:42:ad:ae:b7:12:23:93:4a:
91:4c:4b:db:ea:88:72:63:4d:16:a9:18:1a:43:df:56:59:c0:
29:27:f0:5e:f5:f8:51:f9:08:1c:e1:51:52:fd:6f:98:11:49:
ec:ee:f1:93:0a:78:99:4f:dc:8c:45:d0:c1:1c:ac:2d:7c:9d:
1f:35:77:a3:31:98:0f:6c:eb:fb:fc:d8:45:38:7d:1f:2f:f4:
4c:53:78:12:76:14:cc:16:78:f5:3b:b0:c3:69:94:db:25:51:
ba:aa:22:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:54 2024 by rpki-client on console-ams.rpki-client.org