Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/h0Q8jwSVip-MJoyGXWiW3ThFuHE.roa
File: h0Q8jwSVip-MJoyGXWiW3ThFuHE.roa (raw, json)
Hash identifier: Kd9rouvdbDSUXHYef7Nnj6ZhhqkQ+6DnPQknt4dLG6U=
Subject key identifier: 87:44:3C:8F:04:95:8A:9F:8C:26:8C:86:5D:68:96:DD:38:45:B8:71
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 018D55AC1DF1F3990FF63EEF26F9699ABAA4
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/h0Q8jwSVip-MJoyGXWiW3ThFuHE.roa
Signing time: Mon 29 Jan 2024 14:42:39 +0000
ROA not before: Mon 29 Jan 2024 14:42:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61333
IP address blocks: 94.228.96.0/20 maxlen: 24
94.228.96.0/24 maxlen: 24
94.228.98.0/24 maxlen: 24
94.228.100.0/24 maxlen: 24
94.228.102.0/24 maxlen: 24
94.228.103.0/24 maxlen: 24
94.228.104.0/24 maxlen: 24
94.228.105.0/24 maxlen: 24
94.228.107.0/24 maxlen: 24
94.228.108.0/24 maxlen: 24
94.228.110.0/24 maxlen: 24
149.126.64.0/21 maxlen: 24
149.126.64.0/24 maxlen: 24
149.126.65.0/24 maxlen: 24
149.126.66.0/24 maxlen: 24
149.126.67.0/24 maxlen: 24
149.126.70.0/24 maxlen: 24
185.251.52.0/24 maxlen: 24
185.251.53.0/24 maxlen: 24
185.251.54.0/24 maxlen: 24
193.200.249.0/24 maxlen: 24
194.169.198.0/24 maxlen: 24
2a00:e30::/41 maxlen: 41
2a00:e30:64::/64 maxlen: 64
2a00:e30:80::/41 maxlen: 64
2a00:e30:280::/41 maxlen: 41
2a00:e30:a00::/40 maxlen: 48
2a00:e30:2100::/41 maxlen: 41
2a00:e30:3000::/41 maxlen: 41
2a00:e30:6900::/41 maxlen: 41
2a00:e30:ed00::/41 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:55:ac:1d:f1:f3:99:0f:f6:3e:ef:26:f9:69:9a:ba:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Jan 29 14:42:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87443c8f04958a9f8c268c865d6896dd3845b871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5b:86:66:5d:39:c6:a8:66:52:22:d7:e7:ee:
d6:d1:7e:e4:51:68:d2:c5:b9:04:b8:4d:eb:e3:9a:
20:47:c8:9f:6e:99:fb:40:3a:cf:a4:2e:26:c9:d9:
ae:ba:49:96:67:8f:8e:a2:64:6e:a6:b7:17:97:ab:
51:1b:c4:78:df:8d:cc:3c:1e:b6:0c:2b:db:48:77:
50:f1:ea:52:9f:a3:e1:58:fc:52:4b:0c:99:0d:dd:
95:b1:2a:c7:62:d7:16:9f:13:73:83:9c:f5:0f:11:
f3:2c:e4:3c:f4:5b:bc:bf:e9:28:aa:be:c5:f8:13:
5f:5f:87:68:a1:db:3e:8e:fe:33:89:22:cc:12:6c:
c4:64:87:f8:85:b6:62:36:a6:d0:08:0c:91:01:e0:
d1:51:36:74:e8:c1:80:3b:45:6b:d8:6f:bb:13:44:
03:d5:bc:8e:15:d9:14:a0:ed:2a:fc:50:6f:87:1f:
3f:2b:d4:2f:b2:9b:e6:25:fc:68:e7:ff:7e:0a:e3:
fd:5c:cc:5b:13:25:4f:3d:4b:50:6b:a8:8e:c8:4d:
9b:c4:ca:4a:cf:72:99:75:8c:70:c6:34:08:76:37:
94:57:55:98:1f:01:0a:df:5a:fc:ce:8a:e7:cb:1b:
41:a7:23:d9:b2:38:c4:f0:06:ed:a6:11:a8:4c:83:
a5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:44:3C:8F:04:95:8A:9F:8C:26:8C:86:5D:68:96:DD:38:45:B8:71
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/h0Q8jwSVip-MJoyGXWiW3ThFuHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.96.0/20
149.126.64.0/21
185.251.52.0-185.251.54.255
193.200.249.0/24
194.169.198.0/24
IPv6:
2a00:e30::/40
2a00:e30:280::/41
2a00:e30:a00::/40
2a00:e30:2100::/41
2a00:e30:3000::/41
2a00:e30:6900::/41
2a00:e30:ed00::/41
Signature Algorithm: sha256WithRSAEncryption
85:e0:5b:24:58:4f:61:68:42:1b:50:3a:43:bd:a5:3e:9f:68:
b7:5d:b9:21:45:ad:f1:7a:22:cb:30:83:56:d2:57:b2:6b:ce:
b0:98:4c:85:90:b2:4b:70:3b:7a:1d:cf:b6:4f:50:cc:1f:44:
19:20:7b:5b:6e:c9:83:8d:14:e2:99:cd:d8:c0:94:7f:4f:d1:
0e:88:70:44:7e:43:9f:12:99:33:e4:e1:25:6f:eb:c5:fa:7b:
6e:cd:b2:42:7d:11:5c:a5:cf:c7:fe:20:5a:b6:4b:81:f6:27:
dd:20:22:9c:7d:1f:98:6a:6a:ee:c4:99:46:f8:de:10:3d:51:
4f:f4:dc:6d:28:92:46:75:2d:a6:a7:98:f0:c6:5c:fe:0a:e1:
0d:f7:73:f6:f6:c6:69:91:15:c4:17:cd:c9:65:c8:91:c7:4b:
12:69:a8:7e:36:cc:4f:84:7a:3a:a6:82:fc:58:cd:77:b3:2b:
34:aa:07:6f:f1:2f:2c:d8:76:85:06:9b:bb:eb:74:28:c4:67:
63:02:1e:6f:5d:27:97:06:aa:4b:0c:28:3e:fd:bd:04:3f:3a:
c6:ee:e5:96:32:05:ca:bd:81:2c:73:54:7d:cc:7f:1b:ed:51:
a9:bc:4b:62:af:16:73:29:88:53:1d:e7:dc:46:d1:17:bf:b0:
ff:26:ac:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:06:03 2024 by rpki-client on console-fra.rpki-client.org