Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/lq24Cc8Mfcbs7B8x2XyVF1rBYQU.roa
File: lq24Cc8Mfcbs7B8x2XyVF1rBYQU.roa (raw, json)
Hash identifier: eIa96UI2BKC9d+QA2YQVSUIVQDdhtSlYnnJJ6N0quGs=
Subject key identifier: 96:AD:B8:09:CF:0C:7D:C6:EC:EC:1F:31:D9:7C:95:17:5A:C1:61:05
Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial: 018CCA29DD04E6006596E1FBB0F6D8CD5614
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/lq24Cc8Mfcbs7B8x2XyVF1rBYQU.roa
Signing time: Tue 02 Jan 2024 12:33:10 +0000
ROA not before: Tue 02 Jan 2024 12:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200807
IP address blocks: 78.31.213.0/24 maxlen: 24
78.31.212.0/23 maxlen: 23
78.31.212.0/24 maxlen: 24
185.173.164.0/23 maxlen: 23
185.173.164.0/22 maxlen: 22
185.173.166.0/24 maxlen: 24
2a0b:4f00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:dd:04:e6:00:65:96:e1:fb:b0:f6:d8:cd:56:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
Validity
Not Before: Jan 2 12:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96adb809cf0c7dc6ecec1f31d97c95175ac16105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:9c:7d:e5:f9:2d:c6:c5:ec:e6:c2:ec:51:
c6:63:f3:44:c5:ec:d6:25:54:42:20:81:d0:21:6c:
0d:8f:6e:6c:f5:68:e5:03:a0:d0:55:24:b3:c4:9f:
ea:fb:cf:b3:3b:a2:09:09:1f:5c:fc:cb:04:4f:b7:
e6:88:10:a7:b6:82:72:7b:9a:01:1a:3e:65:d0:12:
06:54:8d:5f:5b:5d:de:a4:1d:73:e8:03:c5:0c:65:
80:d0:ea:75:9c:8a:29:d7:6f:b3:fa:ae:63:96:b6:
50:1d:6a:ec:11:2b:8f:fb:f2:26:c1:62:c2:f4:b8:
69:dc:b9:44:2d:55:20:94:8a:aa:fa:4b:66:28:1f:
da:62:82:17:e8:ac:b9:80:42:1d:40:2c:d9:08:53:
fd:54:99:d5:4e:c5:68:14:53:95:90:f8:bd:a3:77:
a3:ed:2f:c0:02:2f:e8:45:de:90:24:e7:7d:d6:0f:
b8:7c:7a:29:dd:4a:59:a3:9c:61:e5:22:59:e3:b0:
5c:8f:78:68:54:83:b5:45:49:3e:fa:2b:45:a1:28:
cc:49:ad:9f:27:f4:4e:03:20:06:74:ff:a4:77:e9:
07:3e:a6:03:41:3d:2b:a7:31:43:f7:3a:09:9d:d3:
42:f0:b1:7d:d2:8d:fc:0d:e9:5e:b0:2f:d2:6e:c1:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AD:B8:09:CF:0C:7D:C6:EC:EC:1F:31:D9:7C:95:17:5A:C1:61:05
X509v3 Authority Key Identifier:
keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/lq24Cc8Mfcbs7B8x2XyVF1rBYQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.212.0/23
185.173.164.0/22
IPv6:
2a0b:4f00::/32
Signature Algorithm: sha256WithRSAEncryption
6e:55:ab:21:94:37:b5:59:43:6b:fd:3d:fe:ce:8b:f1:5d:fd:
4d:b2:c7:ac:43:7b:a7:32:55:1c:d9:23:4f:89:51:bd:e6:95:
9e:12:ec:46:f3:ea:61:72:da:45:b2:05:83:e9:82:a4:50:13:
e8:a5:a2:0d:79:e5:65:10:a0:26:a0:e1:a3:25:a0:64:16:21:
43:8a:6a:27:3f:c4:d7:04:07:9e:f6:0a:c5:9f:3a:61:5e:98:
46:94:e1:09:a8:ef:2a:1f:e7:79:82:68:ef:ef:e1:1f:f2:5d:
b3:06:e0:5e:31:f7:2f:a6:6e:92:4f:f1:ca:2e:b6:96:54:72:
b5:5f:12:7b:e9:a5:57:20:4b:7b:61:76:5b:31:04:28:0a:d8:
81:11:55:1f:4e:03:ed:08:99:c0:52:de:01:03:74:f9:f1:ed:
8c:f5:45:de:9d:dd:49:d1:77:eb:d9:fe:7d:7f:20:46:73:72:
c9:01:8d:9a:d7:e9:3a:e2:45:64:29:14:81:0f:bf:c8:2e:55:
87:06:0b:a6:40:7d:72:37:02:f0:52:d6:3f:8a:2d:de:7f:8a:
5c:0b:69:1a:3e:ad:b3:ea:ef:86:46:78:98:4a:18:fe:61:b4:
fc:2e:13:ff:ce:c0:84:ff:96:29:a5:90:ea:86:01:ee:7d:3f:
fa:72:15:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:39:31 2024 by rpki-client on console-ams.rpki-client.org