Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/tqm9nw-3RcS47WrWsAcWhsqvKBg.roa
File: tqm9nw-3RcS47WrWsAcWhsqvKBg.roa (raw, json)
Hash identifier: tTxgyXTsiTy5dWeGqhuJqEZqsaPwEfpYpdDh3YHiodE=
Subject key identifier: B6:A9:BD:9F:0F:B7:45:C4:B8:ED:6A:D6:B0:07:16:86:CA:AF:28:18
Certificate issuer: /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial: 018CC424670E838F70F0AAA540C0624EA587
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/tqm9nw-3RcS47WrWsAcWhsqvKBg.roa
Signing time: Mon 01 Jan 2024 08:29:29 +0000
ROA not before: Mon 01 Jan 2024 08:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8400
IP address blocks: 185.125.176.0/23 maxlen: 23
212.57.44.0/22 maxlen: 22
212.57.42.0/23 maxlen: 23
212.57.40.0/21 maxlen: 21
93.92.248.0/21 maxlen: 21
37.35.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:67:0e:83:8f:70:f0:aa:a5:40:c0:62:4e:a5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6a9bd9f0fb745c4b8ed6ad6b0071686caaf2818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:21:86:bc:c0:af:9a:11:79:c8:7f:04:b4:fc:
bf:62:c6:02:cd:ca:01:da:4d:81:e0:f1:67:90:8d:
63:28:58:24:29:75:46:e8:7a:4a:2a:23:4e:4a:20:
04:6c:57:19:c9:b6:7c:11:1d:c1:86:c6:43:9a:75:
1d:da:d2:57:3d:ac:58:03:35:e4:05:26:62:e8:15:
ad:29:e5:b7:21:7d:9e:88:73:67:68:a1:41:46:b6:
ef:1e:21:a7:48:af:98:74:c2:25:69:8e:5b:8e:f1:
57:aa:e2:13:b6:cf:3d:17:55:1d:0f:da:ab:58:70:
7f:44:82:47:38:ab:b3:46:f9:9a:12:c2:df:a1:ab:
e2:4a:fc:a0:5e:fb:41:01:b2:e3:c9:03:96:90:5a:
e0:98:9f:25:2d:88:29:07:48:53:ee:29:42:11:1b:
5c:c6:c9:cd:c8:24:47:70:db:c9:7b:6f:e2:e9:e0:
6e:d2:8b:02:9f:87:80:76:58:d9:9f:e7:1e:e4:69:
6d:15:07:1a:cb:91:d4:05:5b:cc:a0:06:92:d7:aa:
bd:68:9f:42:2f:f9:6e:bb:a7:f7:fc:dc:20:e0:94:
65:24:d5:ce:1d:20:a1:f3:6e:04:93:c3:31:e7:27:
b5:7c:f2:05:fb:33:6f:5d:a2:72:99:88:29:be:bf:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A9:BD:9F:0F:B7:45:C4:B8:ED:6A:D6:B0:07:16:86:CA:AF:28:18
X509v3 Authority Key Identifier:
keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/tqm9nw-3RcS47WrWsAcWhsqvKBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.8.0/21
93.92.248.0/21
185.125.176.0/23
212.57.40.0/21
Signature Algorithm: sha256WithRSAEncryption
01:fe:cd:b6:68:c2:da:66:b9:60:49:6f:79:dd:5e:95:79:c5:
f7:16:35:bf:e4:6d:3a:f5:00:f0:3a:76:2b:b2:19:fb:39:2f:
ab:fe:ef:c1:b6:d5:85:32:21:3b:71:58:33:92:7e:44:29:51:
b7:62:69:71:42:6b:7a:3e:9f:bf:f8:f1:8e:66:62:47:34:d7:
55:b2:08:be:c0:f7:5d:19:34:ee:08:9b:d6:81:74:8c:78:2c:
58:41:e6:4e:c9:c7:68:10:c2:f2:8c:a6:40:5f:8e:99:d4:ad:
01:1c:70:c8:10:96:6c:a8:5b:51:43:f3:bc:5e:eb:6e:a8:5c:
4d:cb:3f:74:39:a4:4d:37:c0:23:18:7a:fa:66:50:8a:de:8a:
1f:ae:ea:19:b6:6c:fd:eb:ca:dd:18:c0:a4:1e:56:b0:3a:86:
30:42:d4:de:92:bf:ea:c1:8d:ff:39:6c:c3:2b:75:e6:e5:9d:
b2:5c:7c:90:ba:d0:60:7f:f4:f2:8a:ca:d9:60:70:d0:64:15:
bd:1c:6e:33:cb:d7:2d:18:89:43:ac:67:d4:da:fe:f2:b2:2b:
de:87:0b:c4:b1:67:5f:b4:e6:6c:d8:39:6b:91:0a:5c:16:d0:
c1:9f:65:27:28:3c:99:39:07:32:43:30:01:e5:f8:27:ae:45:
fc:20:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:28 2024 by rpki-client on console-ams.rpki-client.org