Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/qg2PUXUWxQxYTfWRtvmal-wwtYw.roa
File: qg2PUXUWxQxYTfWRtvmal-wwtYw.roa (raw, json)
Hash identifier: 0X1SPp2FzxFcd+JrK6WjL5TW1PJnjbJ36A7mUW16+jk=
Subject key identifier: AA:0D:8F:51:75:16:C5:0C:58:4D:F5:91:B6:F9:9A:97:EC:30:B5:8C
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 018CC3B7186B2E50623A035E01D096B032D3
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/qg2PUXUWxQxYTfWRtvmal-wwtYw.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204947
IP address blocks: 185.63.100.0/22 maxlen: 24
185.234.172.0/22 maxlen: 24
2a0d:2100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:18:6b:2e:50:62:3a:03:5e:01:d0:96:b0:32:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa0d8f517516c50c584df591b6f99a97ec30b58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:2c:e9:d1:28:19:ff:d0:54:55:45:50:08:
19:6b:ab:6d:0d:94:db:46:75:b7:a7:61:07:dc:f7:
4d:2e:ba:a4:87:5b:fe:47:b5:68:f7:7a:9a:49:80:
9c:d2:27:02:ad:9a:05:8b:7d:bd:47:28:f0:8d:fb:
46:b7:07:0c:7b:ea:07:30:b2:be:72:2c:e2:02:52:
2d:6b:21:2b:2b:3b:0b:d2:5a:c7:d7:f5:8b:97:bb:
e1:37:f4:bd:5e:cf:ad:c7:61:a1:cc:56:f0:2d:b5:
ed:03:07:04:fa:e0:84:a2:20:b0:b7:48:1b:d2:d4:
9d:96:ad:0b:d2:45:5f:83:94:50:9f:92:3b:b3:8a:
5f:ce:13:1f:87:ca:5c:6d:aa:ac:aa:3a:ac:e2:2f:
df:2d:a0:42:7b:09:e7:cc:b2:52:df:57:9d:8f:54:
5d:c5:8f:0f:c0:d1:30:7f:fe:b3:1b:da:ff:85:e5:
95:2f:07:39:f6:73:d0:5a:15:40:85:db:51:e8:0e:
d8:2c:f1:ed:a4:51:8d:a9:c7:12:03:eb:6e:45:8b:
c0:e7:52:6e:ed:b9:dc:4f:f4:bc:0b:49:c3:45:9c:
68:c8:33:4e:fa:33:81:f5:d3:03:2e:ef:ed:25:02:
5a:50:57:ae:c4:06:fb:6c:62:54:a1:18:ec:8e:0f:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0D:8F:51:75:16:C5:0C:58:4D:F5:91:B6:F9:9A:97:EC:30:B5:8C
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/qg2PUXUWxQxYTfWRtvmal-wwtYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.100.0/22
185.234.172.0/22
IPv6:
2a0d:2100::/29
Signature Algorithm: sha256WithRSAEncryption
a6:2b:46:7f:90:c1:24:da:db:73:b7:22:1b:52:67:db:99:af:
2a:b2:b7:ab:53:b5:c5:00:d1:6e:17:c9:77:98:8a:00:f5:f4:
59:d4:ca:5e:63:33:02:1e:cb:83:a0:12:82:b4:3e:a0:13:c4:
ae:f9:b9:53:14:ae:86:ed:3b:9e:3f:fc:1d:00:bb:a7:ea:83:
dc:d8:33:51:3d:de:52:b1:2b:ce:19:42:81:0c:42:0d:00:62:
c2:d1:5c:85:2f:e4:7c:9f:d0:c8:d6:a2:37:9a:31:64:a5:ea:
0d:56:9a:29:a1:87:91:2a:a0:eb:4a:77:d2:5b:12:7a:17:3d:
78:8f:1e:e2:49:2a:c0:16:d5:30:50:93:11:9a:d3:57:3e:5e:
03:7e:a9:76:ba:34:da:ab:d6:0e:37:f2:c6:30:fa:66:7d:d1:
c0:8c:e8:7c:65:0d:a2:6e:bf:eb:69:9a:fd:90:35:06:b7:6c:
f3:f6:3a:74:c8:23:10:9d:40:83:5a:39:9a:34:90:b6:33:ea:
30:7b:1e:de:dc:d6:1d:88:8d:4e:d4:56:da:5c:28:d3:ba:50:
f0:eb:88:ef:f2:6e:3f:69:4f:ee:7f:79:90:5e:7e:c0:70:00:
13:00:33:2d:eb:82:77:31:f7:62:11:10:3e:74:ac:82:6d:9d:
4d:89:59:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:47 2024 by rpki-client on console-fra.rpki-client.org