Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Os_bqy157Rcaga8z6UWPKBb8pV8.roa
File: Os_bqy157Rcaga8z6UWPKBb8pV8.roa (raw, json)
Hash identifier: Q2GzduMCNyC7yIgE7zcom7hyhyiHQotRTcYNh8hhOUM=
Subject key identifier: 3A:CF:DB:AB:2D:79:ED:17:1A:81:AF:33:E9:45:8F:28:16:FC:A5:5F
Certificate issuer: /CN=41cede907492e50c951263957881bc3cc5ce30ae
Certificate serial: 018CC3B73F4149BBD1B4D423DD83BDEB41E6
Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Os_bqy157Rcaga8z6UWPKBb8pV8.roa
Signing time: Mon 01 Jan 2024 06:30:15 +0000
ROA not before: Mon 01 Jan 2024 06:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49892
IP address blocks: 94.143.128.0/24 maxlen: 24
94.143.128.0/21 maxlen: 21
94.143.129.0/24 maxlen: 24
94.143.130.0/24 maxlen: 24
94.143.131.0/24 maxlen: 24
94.143.132.0/24 maxlen: 24
94.143.133.0/24 maxlen: 24
94.143.134.0/24 maxlen: 24
94.143.135.0/24 maxlen: 24
185.169.216.0/24 maxlen: 24
185.169.216.0/22 maxlen: 22
185.169.217.0/24 maxlen: 24
185.169.218.0/24 maxlen: 24
185.169.219.0/24 maxlen: 24
2a04:6a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3f:41:49:bb:d1:b4:d4:23:dd:83:bd:eb:41:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae
Validity
Not Before: Jan 1 06:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3acfdbab2d79ed171a81af33e9458f2816fca55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:93:a9:be:8d:da:67:c1:e4:b8:18:4f:8a:
d7:de:44:4f:94:3f:0c:af:a0:d3:83:d0:8a:6f:a4:
47:66:6f:2c:a5:1b:44:9c:fd:fb:32:c1:87:79:29:
6d:92:77:03:51:dd:0f:e0:5e:d8:09:dd:7e:2c:19:
65:7d:96:da:62:07:46:a0:cd:be:4c:78:7b:d6:4f:
c9:a9:56:64:8e:00:bb:70:9f:d7:40:67:a5:85:e5:
96:fa:d1:3e:53:73:34:e5:17:8a:c4:f2:5f:cd:4b:
cd:43:1c:d5:3e:cb:28:da:34:5c:6b:97:0b:64:a2:
a3:a6:1b:eb:4a:70:87:1d:b0:3f:4d:40:07:74:35:
be:04:52:0a:ba:82:aa:62:5a:a0:fb:f4:71:20:3f:
7b:0f:f3:3a:d0:f0:17:71:36:65:64:bc:e7:8d:95:
b5:c1:46:62:c4:bc:9d:20:d0:2b:30:fe:9c:70:3a:
62:3f:0e:d4:51:57:69:7a:12:d7:d2:a8:ae:c6:e2:
a4:a9:df:8c:93:f6:37:fb:d0:d4:db:45:79:33:3d:
71:84:ca:29:c0:2e:1a:69:b2:c6:08:ed:b4:a0:a2:
5c:5b:f2:06:5b:b5:01:df:30:5f:f8:5c:93:3f:9f:
11:de:53:b0:97:c3:d5:4e:2d:c7:e0:3e:85:83:2b:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CF:DB:AB:2D:79:ED:17:1A:81:AF:33:E9:45:8F:28:16:FC:A5:5F
X509v3 Authority Key Identifier:
keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Os_bqy157Rcaga8z6UWPKBb8pV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.128.0/21
185.169.216.0/22
IPv6:
2a04:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
54:84:bc:14:6d:aa:5f:ec:a3:01:3f:95:61:62:d4:76:d5:dc:
33:f2:19:fd:cf:a8:e8:97:f1:f4:bd:ff:77:4b:22:4a:f6:fb:
5a:e9:39:37:26:dd:79:64:54:4c:07:ad:70:bb:9b:1c:d1:49:
a5:50:42:b6:1b:13:2a:f2:c2:c4:aa:10:be:8f:e1:60:63:0f:
77:38:96:de:3f:b2:ef:23:6a:8d:0e:a9:ef:0d:c8:08:5f:75:
4f:62:67:28:c0:93:93:8c:2f:74:2d:cb:e9:ce:5f:85:67:7b:
a0:8e:1b:50:3e:d7:5a:4d:a9:1e:2b:ac:e2:a9:3b:f1:c8:de:
38:0c:fa:37:22:65:9d:ee:48:bb:aa:a6:e8:cf:f8:e3:bc:e0:
38:71:56:20:ac:38:b8:5e:11:b7:f2:d4:73:da:b9:63:ab:68:
4a:3b:e3:09:e1:ef:29:1c:54:29:8d:2b:9b:30:04:fe:d7:bd:
78:88:f9:7b:44:32:59:d6:1c:cd:a8:f7:10:75:7b:47:e2:3e:
5a:6f:51:30:04:ca:12:28:90:b2:f1:51:1b:4f:ff:9f:23:16:
57:d2:dd:df:66:b4:ba:66:d8:c9:53:90:ac:ef:e6:e5:58:46:
f8:e1:b9:f3:c8:18:1b:4f:fc:f0:df:d9:49:9c:13:61:8d:a8:
3a:5d:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:03:26 2024 by rpki-client on console-ams.rpki-client.org