Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/qlQEdg2ZKQ7I3dGcJstLyIhmX3w.roa
File: qlQEdg2ZKQ7I3dGcJstLyIhmX3w.roa (raw, json)
Hash identifier: hkuzo9fqnWyAOy2cGQEwfojg8RoN+DHdfN2SfsROTX0=
Subject key identifier: AA:54:04:76:0D:99:29:0E:C8:DD:D1:9C:26:CB:4B:C8:88:66:5F:7C
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 018CC64B52D5319D16349CAFE2A36DA64B96
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/qlQEdg2ZKQ7I3dGcJstLyIhmX3w.roa
Signing time: Mon 01 Jan 2024 18:31:14 +0000
ROA not before: Mon 01 Jan 2024 18:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48159
IP address blocks: 185.11.90.0/24 maxlen: 24
185.11.89.0/24 maxlen: 24
185.11.88.0/24 maxlen: 24
178.251.208.0/24 maxlen: 24
178.251.213.0/24 maxlen: 24
178.251.212.0/24 maxlen: 24
178.251.215.0/24 maxlen: 24
178.251.214.0/24 maxlen: 24
2a03:57c0:7c00::1208:201/128 maxlen: 128
2a03:57c0:7c00::1208:143/128 maxlen: 128
2a03:57c0:7c00::1208:3/128 maxlen: 128
2a03:57c0:7c00::1209:85/128 maxlen: 128
2a03:57c0:7c00::1208:45/128 maxlen: 128
2a03:57c0:7c00::1208:185/128 maxlen: 128
2a03:57c0:7c00::1209:211/128 maxlen: 128
2a03:57c0:7c00::1209:55/128 maxlen: 128
2a03:57c0:7c00::1209:155/128 maxlen: 128
2a03:57c0:7c00::1209:95/128 maxlen: 128
2a03:57c0:7c00::1208:95/128 maxlen: 128
2a03:57c0:7c00::1208:215/128 maxlen: 128
2a03:57c0:7c00::1208:55/128 maxlen: 128
2a03:57c0::/32 maxlen: 32
2a03:57c0:7c00::1208:220/128 maxlen: 128
2a03:57c0:7c00::1209:25/128 maxlen: 128
2a03:57c0:7c00::1209:165/128 maxlen: 128
2a03:57c0:7c00::1208:65/128 maxlen: 128
2a03:57c0:7c00::1208:165/128 maxlen: 128
2a03:57c0:7c00::1208:25/128 maxlen: 128
2a03:57c0:7c00::1209:27/128 maxlen: 128
2a03:57c0:7c00::1208:27/128 maxlen: 128
2a03:57c0:7c00::1209:135/128 maxlen: 128
2a03:57c0:7c00::1209:75/128 maxlen: 128
2a03:57c0:7c00::1208:235/128 maxlen: 128
2a03:57c0:7c00::1208:175/128 maxlen: 128
2a03:57c0:7c00::1208:75/128 maxlen: 128
2a03:57c0:7c00::1209:177/128 maxlen: 128
2a03:57c0:7c00::1208:137/128 maxlen: 128
2a03:57c0:7c00::1208:177/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:52:d5:31:9d:16:34:9c:af:e2:a3:6d:a6:4b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Jan 1 18:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa5404760d99290ec8ddd19c26cb4bc888665f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:86:a6:70:88:6e:06:d8:63:9e:fb:b9:eb:
95:90:ce:20:fb:52:26:95:27:a7:a2:6f:89:1b:65:
93:f4:39:db:cb:ef:58:8d:2b:15:84:7f:03:bc:d8:
35:cd:c8:8d:a6:c5:49:6a:dc:ed:ed:7e:1f:1c:4e:
b7:b3:c9:1e:b5:20:c6:67:6a:1e:8b:de:2c:02:d4:
91:84:c7:86:da:c6:81:c9:bf:5a:6e:7f:09:7d:01:
19:40:3a:ea:b1:97:ea:c6:e6:ad:5f:e5:ac:41:69:
e9:54:c6:26:5a:8e:3d:70:a5:63:90:b5:ec:e2:b2:
60:00:13:98:04:66:c8:f0:cc:37:c9:72:fb:0c:19:
85:7c:16:77:3e:e5:ad:fe:ed:01:af:bc:7d:a4:b8:
d3:78:55:20:f3:75:61:ad:7e:0c:26:db:0d:fd:32:
ac:21:10:f2:6d:c7:f5:c2:1a:06:64:6d:3f:cc:73:
01:fe:2a:c7:30:87:6c:68:a6:fb:f1:bf:1e:ae:f9:
1a:f1:b8:23:03:4e:40:75:28:36:79:17:80:25:0a:
ef:d7:31:54:45:93:62:dd:8e:8e:23:b8:4a:bf:3b:
ec:50:92:61:4c:10:b2:6f:1d:1e:d5:26:5f:f0:b3:
0d:f0:ee:9c:e6:60:7e:0a:c9:78:48:2b:2f:fb:90:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:54:04:76:0D:99:29:0E:C8:DD:D1:9C:26:CB:4B:C8:88:66:5F:7C
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/qlQEdg2ZKQ7I3dGcJstLyIhmX3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.208.0/24
178.251.212.0/22
185.11.88.0-185.11.90.255
IPv6:
2a03:57c0::/32
Signature Algorithm: sha256WithRSAEncryption
98:76:b9:97:50:7c:98:f6:6e:d5:73:12:0e:6c:45:46:1b:03:
ff:1c:c0:15:f9:0a:2f:ab:4f:39:bc:ba:ef:fc:ad:52:ba:c9:
41:57:20:9f:be:42:07:48:63:92:7e:09:f0:86:e0:d5:6b:63:
9b:83:f7:01:06:df:16:52:55:0c:01:09:bd:83:96:c8:0c:42:
81:64:41:e7:0c:d5:31:f6:be:d8:68:65:1e:ca:fb:d1:20:4c:
aa:55:e6:84:de:1b:dd:fb:dc:84:0f:77:a2:46:1a:9a:19:b0:
d7:e0:58:16:fd:9b:4b:2f:4c:3f:eb:a4:bd:c5:05:ca:84:c2:
d0:04:6f:d1:35:c5:ce:87:55:12:e4:26:d0:4a:5b:cd:5e:c2:
a5:c9:29:d0:96:a5:10:32:b7:24:dd:9e:44:98:5b:17:a4:6a:
d6:d4:52:6a:61:db:70:29:29:12:3c:15:ea:55:1b:c2:90:45:
a1:54:05:29:1c:01:1e:44:fb:f7:fd:ee:61:d1:8e:1a:d7:d6:
49:9e:4d:1d:30:7e:0c:49:26:0a:78:4c:cd:bc:9f:a0:9d:14:
bb:b3:f3:35:db:a8:02:7a:6c:b9:25:76:64:cb:c8:e6:f1:c5:
ed:c1:e5:4e:e3:29:a5:00:7c:f3:bc:f3:3d:75:39:b3:4e:3e:
0c:90:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:27:57 2024 by rpki-client on console-ams.rpki-client.org