Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Qn9Hh8DvuMMiJWKFzbHGYmhiRwU.roa
File: Qn9Hh8DvuMMiJWKFzbHGYmhiRwU.roa (raw, json)
Hash identifier: IUsep4hi6ich1camnjDxYiWTQyvijSbmnzC+bwaE9iw=
Subject key identifier: 42:7F:47:87:C0:EF:B8:C3:22:25:62:85:CD:B1:C6:62:68:62:47:05
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 018CCA2A2673ADC387B30384C32A9AA41C54
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Qn9Hh8DvuMMiJWKFzbHGYmhiRwU.roa
Signing time: Tue 02 Jan 2024 12:33:29 +0000
ROA not before: Tue 02 Jan 2024 12:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202391
IP address blocks: 217.146.219.0/24 maxlen: 24
217.146.223.0/24 maxlen: 24
185.82.166.0/23 maxlen: 23
79.132.204.0/24 maxlen: 24
79.132.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Oct 2024 11:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:26:73:ad:c3:87:b3:03:84:c3:2a:9a:a4:1c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 2 12:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=427f4787c0efb8c322256285cdb1c66268624705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:f4:10:d4:a8:f1:50:d1:58:88:6c:20:30:
67:1b:4a:e3:fd:6f:e4:9d:17:ee:c9:3f:d7:c8:10:
fe:47:ff:78:e1:15:47:8a:04:33:78:26:97:c5:7a:
ab:a7:b0:76:87:59:a9:59:bf:40:51:83:f4:db:59:
63:3c:49:06:d0:bf:12:e8:a6:a1:55:49:6a:5f:e8:
fd:6d:6b:f2:a3:6a:5a:a8:5e:6e:58:ce:34:d5:ed:
02:39:74:0b:b2:5b:28:64:f1:d7:b7:bd:48:10:68:
d5:1c:62:2b:e5:14:68:a7:5b:7e:9c:b5:0f:f3:12:
64:72:1d:90:d8:58:54:8b:df:cc:4b:c5:7c:98:5d:
19:2d:27:ba:fb:6a:8f:74:ab:9f:82:79:02:5d:16:
51:a4:9d:7a:d3:c1:45:f0:a2:e7:e3:11:74:b7:76:
cc:2d:0b:77:5f:45:b8:4d:ba:74:bf:73:06:f3:b1:
42:23:82:42:2d:3d:7a:97:52:1c:d4:6d:1f:fa:a8:
cc:b2:ca:22:9d:75:97:84:7a:ca:83:06:5d:e6:73:
d5:9e:8d:9d:d3:e3:22:8c:ba:b0:c1:f8:bf:17:52:
f1:62:e3:e8:7b:7d:aa:9a:61:3c:f8:21:e7:29:f2:
d1:1e:a0:90:74:49:78:1c:d7:d4:8e:8d:8f:15:81:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7F:47:87:C0:EF:B8:C3:22:25:62:85:CD:B1:C6:62:68:62:47:05
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Qn9Hh8DvuMMiJWKFzbHGYmhiRwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.204.0/24
79.132.209.0/24
185.82.166.0/23
217.146.219.0/24
217.146.223.0/24
Signature Algorithm: sha256WithRSAEncryption
32:bf:0e:6d:ff:5e:42:99:0e:a2:58:96:98:5a:0a:24:22:7e:
a2:e4:68:68:47:d3:5c:ae:d9:b2:7b:cc:70:21:84:ab:94:1b:
aa:90:d2:2f:4d:86:6a:5d:06:42:f2:06:65:d9:81:c4:01:23:
e9:35:9f:3f:ba:20:a2:1d:6b:4d:80:05:52:96:5f:33:9d:90:
cd:8b:fd:3b:6f:68:55:b6:76:67:1d:dd:5e:17:5a:26:db:91:
d0:f3:44:75:46:aa:cb:d8:18:52:0b:5b:40:c4:c0:89:2b:2e:
67:54:7f:60:64:25:61:bd:03:47:9f:7a:e0:dc:12:a4:46:4b:
8c:6e:f7:4d:97:c0:6f:1a:c5:70:8e:74:a0:f1:1c:c0:a5:e4:
f1:b6:e7:81:08:7d:dd:47:97:af:5e:67:ca:4b:c0:98:45:8b:
00:ea:90:0a:b7:b6:88:5f:c2:b0:50:9e:a9:68:f6:f4:78:09:
70:27:59:48:0d:6c:62:cf:4e:03:50:76:8a:82:e1:cf:aa:a7:
83:48:85:14:c0:99:d6:0f:e7:bb:03:7d:b8:7f:0b:0f:56:aa:
74:0a:2f:a1:0c:8c:d4:c9:f3:4c:82:64:fd:e6:0d:c0:30:1f:
be:2f:37:53:44:5e:3a:7d:d4:f2:f4:9a:36:34:08:89:2e:8f:
69:89:54:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 18:17:26 2024 by rpki-client on console-ams.rpki-client.org