Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/Qhr9yxPRQxlKYDLQ7R1De7w83HI.roa
File: Qhr9yxPRQxlKYDLQ7R1De7w83HI.roa (raw, json)
Hash identifier: DidXDEqxqcsPVP6QuXn1cIWDDkhP0+mi6RjKxxpS1IY=
Subject key identifier: 42:1A:FD:CB:13:D1:43:19:4A:60:32:D0:ED:1D:43:7B:BC:3C:DC:72
Certificate issuer: /CN=b9e273c8ba0b0afb205d00b3170e69b816743397
Certificate serial: 018CC26D3A0822C5BABE6C89F9A8B86C3A4F
Authority key identifier: B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/Qhr9yxPRQxlKYDLQ7R1De7w83HI.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24776
IP address blocks: 194.29.206.0/24 maxlen: 24
194.187.192.0/22 maxlen: 22
217.25.176.0/20 maxlen: 20
213.161.192.0/19 maxlen: 19
194.3.136.0/24 maxlen: 24
194.2.74.0/24 maxlen: 24
2001:1650::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3a:08:22:c5:ba:be:6c:89:f9:a8:b8:6c:3a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e273c8ba0b0afb205d00b3170e69b816743397
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=421afdcb13d143194a6032d0ed1d437bbc3cdc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:60:79:c4:42:fc:6e:08:cf:f5:f4:d1:99:3e:
60:91:62:b7:37:84:ff:a6:a9:08:2d:d8:45:23:bb:
8a:46:63:35:18:d7:74:ec:02:48:f2:cc:59:d9:80:
a8:c5:93:62:2d:8d:1c:92:3c:57:2c:39:01:86:50:
96:c1:57:f2:8e:d5:6a:9c:68:23:5e:97:47:7b:d9:
49:6e:a4:24:f8:41:bd:0a:74:5f:5b:de:eb:71:13:
c2:3b:71:7d:11:22:61:77:cc:be:34:42:ba:a4:02:
53:06:34:38:ca:29:76:68:e5:31:f9:9a:91:7d:ea:
4b:ba:f6:8c:bc:ab:04:8e:63:5f:0e:47:2d:3f:d1:
f3:bc:b7:f1:f6:08:64:5e:70:ca:57:fd:38:3e:18:
65:a4:82:5d:66:f7:01:4a:3c:c4:ec:1a:ad:bf:66:
e4:db:ee:c6:dd:d3:a0:8d:99:fe:f4:49:ae:17:1e:
7d:df:a4:02:ff:d8:f0:24:06:bc:15:5a:f5:a9:c9:
bb:81:aa:3b:6d:36:d5:0c:01:10:c1:96:02:71:4b:
e0:13:64:32:b3:98:0b:94:b5:ad:f2:5a:8a:78:c0:
75:d7:a1:15:d7:8b:5e:4d:ac:1a:f7:e5:4d:ae:0d:
8d:8f:53:39:d6:4c:86:ff:cb:8e:0e:94:f9:76:1e:
16:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1A:FD:CB:13:D1:43:19:4A:60:32:D0:ED:1D:43:7B:BC:3C:DC:72
X509v3 Authority Key Identifier:
keyid:B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/Qhr9yxPRQxlKYDLQ7R1De7w83HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.2.74.0/24
194.3.136.0/24
194.29.206.0/24
194.187.192.0/22
213.161.192.0/19
217.25.176.0/20
IPv6:
2001:1650::/32
Signature Algorithm: sha256WithRSAEncryption
7a:b6:b4:1b:ca:ef:94:dc:64:45:fc:cf:cb:c4:f4:95:5c:09:
b7:1b:39:6e:c6:c5:10:eb:75:b9:ee:8f:dc:ae:63:c8:3d:8b:
58:13:36:a0:e7:e8:4d:57:72:76:8b:61:49:c4:7d:32:e1:07:
35:68:15:fd:39:d9:ba:06:ef:fc:3a:c0:3b:64:43:3c:78:71:
be:73:e0:93:d4:d1:a9:d9:3a:97:b2:8c:05:7f:9a:60:8d:97:
b0:87:c5:47:19:68:ac:ee:b5:7d:63:4b:12:2a:ff:75:42:f7:
f7:a6:5a:16:84:90:bb:1c:6f:cb:46:65:a9:2a:fd:a1:e9:a7:
db:f9:e4:a6:d0:83:39:be:da:53:8b:15:25:cd:2a:6d:f5:98:
2f:06:d1:e6:a9:14:85:ff:73:48:15:17:3e:43:4f:42:2e:0a:
6a:af:c2:a2:ec:6b:b8:4a:11:c6:51:97:6a:9a:4a:3a:7c:8e:
99:8c:c5:85:06:8d:18:77:65:e3:a6:35:84:ab:b1:38:40:6d:
9c:ec:5e:ac:08:f7:97:ac:5f:ce:63:9b:de:15:ec:fc:e8:b9:
7e:e4:88:74:09:5d:f8:7c:69:4e:44:0d:8b:74:7f:e0:50:bd:
ae:3e:a1:b4:cd:8e:5a:d6:8f:82:42:7e:6a:0a:65:72:99:ae:
68:a9:1f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 13:52:19 2024 by rpki-client on console-fra.rpki-client.org