Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/QakU1IySYihwgsattrOOPO9Mv5E.roa
File: QakU1IySYihwgsattrOOPO9Mv5E.roa (raw, json)
Hash identifier: QCyjljPWe6FkxdWOM8NK1MAeWUM9ewL27akn912GLUI=
Subject key identifier: 41:A9:14:D4:8C:92:62:28:70:82:C6:AD:B6:B3:8E:3C:EF:4C:BF:91
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 018CC56EE37FCEEE662D0B1CF27161579111
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/QakU1IySYihwgsattrOOPO9Mv5E.roa
Signing time: Mon 01 Jan 2024 14:30:27 +0000
ROA not before: Mon 01 Jan 2024 14:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41071
IP address blocks: 185.90.11.0/24 maxlen: 24
185.90.8.0/23 maxlen: 23
185.90.8.0/22 maxlen: 22
185.90.10.0/24 maxlen: 24
2a05:db80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e3:7f:ce:ee:66:2d:0b:1c:f2:71:61:57:91:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Jan 1 14:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41a914d48c9262287082c6adb6b38e3cef4cbf91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:ac:d2:aa:36:93:50:f8:b9:7c:61:ec:77:
ba:d2:cd:51:c8:04:6d:54:89:ed:0c:08:44:5d:ee:
ce:53:e0:ae:10:0b:88:74:3d:0b:72:18:e6:5e:94:
0c:87:9e:53:05:f3:0e:62:34:dc:f9:ca:fd:75:05:
64:3a:81:2f:fb:f6:8c:5b:96:7d:10:92:4c:bc:16:
57:40:aa:11:a3:30:c4:f6:be:39:4a:d5:7a:cc:8e:
92:53:2e:79:3d:12:f1:f2:4b:a4:43:4f:9b:22:07:
74:4d:58:f0:7b:4a:14:9c:07:08:c9:8b:1e:0f:15:
7a:0b:6c:7d:48:f5:f2:86:08:db:b3:bd:1d:97:1a:
79:1f:76:18:72:67:5e:4f:f5:9b:f9:9e:c6:dc:95:
36:fe:ad:7b:fc:bb:b5:cc:de:9d:f9:eb:96:69:4c:
c2:55:bd:37:af:bc:a0:ab:25:24:35:a1:5e:17:43:
b7:ac:44:27:3b:ae:9d:41:96:d7:b9:4e:49:08:fc:
23:bb:dc:aa:79:d7:6a:a7:40:b5:88:31:2e:39:0b:
70:63:a5:da:a5:e7:3e:ea:b2:f2:fa:57:76:96:89:
c6:f4:81:6b:50:d6:a5:d7:dc:88:89:ef:c3:a0:e8:
d7:63:82:be:58:a6:4f:0f:00:8b:ef:1e:a0:0e:55:
23:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A9:14:D4:8C:92:62:28:70:82:C6:AD:B6:B3:8E:3C:EF:4C:BF:91
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/QakU1IySYihwgsattrOOPO9Mv5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.8.0/22
IPv6:
2a05:db80::/29
Signature Algorithm: sha256WithRSAEncryption
3f:f2:29:af:11:61:ac:f3:6f:f8:5c:a8:79:8c:a4:aa:b4:a3:
66:5a:1e:04:df:03:c1:ab:69:bc:48:99:a0:58:02:91:21:e7:
08:06:76:e3:1b:34:8d:54:57:7c:23:4a:e7:f4:b4:ca:88:be:
cc:9c:e6:77:3d:95:c5:20:5a:92:53:1a:d8:97:b9:69:ec:01:
47:36:cd:b3:f9:55:be:58:ec:43:ca:6b:8a:af:21:1d:74:20:
6e:88:ee:37:04:63:3c:1d:73:c4:81:f3:7c:48:c1:76:4d:cc:
b9:3f:00:b3:e1:83:dc:2c:2f:cb:58:4f:10:8a:58:7c:f4:a4:
2b:68:c1:83:87:90:02:4d:5b:82:ac:4d:7d:80:5a:96:4a:df:
82:4b:81:0a:7b:4e:b9:5d:ec:ae:5a:9d:e4:ec:57:e6:72:35:
33:72:04:7f:ad:82:46:2a:b2:d0:cd:30:c2:d0:cd:cd:29:5a:
6f:d6:05:c7:da:d7:2c:33:4a:2c:74:d4:58:4c:0c:77:a7:79:
8f:da:a0:a7:13:ae:ff:31:7d:2c:f9:3f:c3:63:eb:21:d0:15:
c4:cb:a6:b4:a8:98:75:53:ff:3c:fc:82:38:f2:c9:fe:7d:2b:
55:c9:70:61:7f:b1:62:da:be:a6:0f:e3:11:cb:b7:51:79:f2:
2a:b2:48:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:02:01 2024 by rpki-client on console-fra.rpki-client.org