Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QhE2phiG-7gCrqRF1i_PGVkj7Q4.roa
File: QhE2phiG-7gCrqRF1i_PGVkj7Q4.roa (raw, json)
Hash identifier: xoG3YfzVh03sGcJcOUVhqbIULwMsiC/PT252U+Jy7zU=
Subject key identifier: 42:11:36:A6:18:86:FB:B8:02:AE:A4:45:D6:2F:CF:19:59:23:ED:0E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0193499BD67C1A06827397B63DBCD26556C8
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QhE2phiG-7gCrqRF1i_PGVkj7Q4.roa
Signing time: Wed 20 Nov 2024 12:46:09 +0000
ROA not before: Wed 20 Nov 2024 12:46:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
46.249.110.0/24 maxlen: 24
82.115.9.0/24 maxlen: 24
82.115.28.0/23 maxlen: 24
89.251.10.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
185.231.172.0/22 maxlen: 24
188.253.8.0/21 maxlen: 24
202.133.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:9b:d6:7c:1a:06:82:73:97:b6:3d:bc:d2:65:56:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 20 12:46:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=421136a61886fbb802aea445d62fcf195923ed0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:e3:0a:14:64:af:e2:99:c7:4e:bf:36:74:
7b:af:96:fe:66:df:56:36:01:6b:74:d5:2d:8e:a0:
01:94:19:f1:75:47:b2:de:84:68:28:28:08:bd:93:
ba:26:2a:0f:b1:f3:c1:ff:46:88:8a:66:8a:33:13:
3c:04:7b:d4:0b:a7:2b:83:b5:4b:be:d0:03:f3:a9:
53:34:f2:05:40:56:f1:e0:36:24:17:62:ad:d2:4b:
63:de:ad:ad:d4:88:e1:4c:46:9b:02:df:3b:63:23:
8f:5d:25:3a:98:77:b6:c6:9d:a6:de:92:1c:37:c3:
15:94:36:e0:76:90:92:cb:f6:a6:2f:9f:bc:b8:c7:
f2:4d:d3:3b:38:5a:78:e5:cb:5d:eb:9d:e4:b3:db:
0f:c6:05:46:ed:30:ee:71:41:5d:2d:25:13:ad:b1:
6b:9f:7c:1e:9d:47:c7:9b:39:03:bf:39:78:1d:54:
be:7b:7d:d5:c3:97:6c:2a:9a:c9:85:7d:70:94:b7:
f3:a6:80:68:a5:3d:4d:73:ad:cf:fa:38:76:e3:cb:
1c:e1:23:d5:cd:1e:a2:54:bc:2f:10:6d:81:25:ab:
9b:84:ee:1d:bc:78:f6:fb:1e:40:8c:79:d0:dc:62:
34:63:10:d5:1c:98:8d:b7:2d:8b:74:00:82:fe:6e:
e6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:11:36:A6:18:86:FB:B8:02:AE:A4:45:D6:2F:CF:19:59:23:ED:0E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/QhE2phiG-7gCrqRF1i_PGVkj7Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
46.249.110.0/24
82.115.9.0/24
82.115.28.0/23
89.251.10.0/24
159.255.32.0/21
185.231.172.0/22
188.253.8.0/21
202.133.90.0/23
Signature Algorithm: sha256WithRSAEncryption
43:b0:b2:15:02:57:56:28:dd:2a:a0:9f:2f:99:97:c6:ad:60:
1f:34:e9:43:8d:1f:24:a7:ef:e9:fa:92:da:d3:3f:47:f3:0d:
b1:12:37:62:ad:02:86:84:34:e8:7a:15:ad:5a:21:65:29:78:
29:21:dd:56:4f:cc:28:89:99:a5:f3:0d:97:7a:b4:0d:9a:a0:
35:4e:1d:e9:4c:a0:b6:0c:d4:b9:09:7b:60:ea:62:fe:11:63:
91:4e:36:88:4a:5c:b5:1b:e7:a0:7b:21:71:58:44:ea:61:92:
9f:3c:7b:1b:66:ba:0c:b7:33:71:f2:1b:ba:8b:ab:8e:c6:0a:
a8:4a:cb:99:bd:b2:4c:66:86:29:95:20:07:70:9b:b6:31:a4:
cc:16:3d:87:1b:13:df:e5:ed:8e:f9:f4:af:39:9b:6a:f3:4b:
32:53:7b:51:6d:d4:02:6d:32:95:5d:55:2b:ae:3b:c6:7d:53:
01:ee:ea:2b:9a:f9:64:1a:77:7e:a6:c0:cf:cf:c9:43:57:64:
60:bc:4e:3c:9a:2c:73:28:c7:05:79:e5:fe:5c:ba:83:c0:47:
94:89:fa:16:eb:6a:33:60:45:24:dc:6a:62:57:f0:47:81:cf:
37:fb:5d:9a:8a:2d:21:c5:4d:17:a9:ad:65:76:61:be:a2:ca:
ed:bd:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:26:34 2024 by rpki-client on console-fra.rpki-client.org