Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/fqiWB9DtDp5ujEWVh2baM4pZU0s.roa
File: fqiWB9DtDp5ujEWVh2baM4pZU0s.roa (raw, json)
Hash identifier: JhZ6pVYRuk3AEfRwUR2IXrxNqDbO0f/r9SE8HI2oFQI=
Subject key identifier: 7E:A8:96:07:D0:ED:0E:9E:6E:8C:45:95:87:66:DA:33:8A:59:53:4B
Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial: 018E3CE10AF45CCBFD2187ABB21E21B63D0D
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/fqiWB9DtDp5ujEWVh2baM4pZU0s.roa
Signing time: Thu 14 Mar 2024 12:12:45 +0000
ROA not before: Thu 14 Mar 2024 12:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43076
IP address blocks: 185.8.44.0/24 maxlen: 24
185.8.45.0/24 maxlen: 24
185.8.46.0/24 maxlen: 24
185.8.47.0/24 maxlen: 24
217.171.80.0/24 maxlen: 24
217.171.81.0/24 maxlen: 24
217.171.82.0/24 maxlen: 24
217.171.83.0/24 maxlen: 24
217.171.84.0/24 maxlen: 24
217.171.85.0/24 maxlen: 24
217.171.86.0/24 maxlen: 24
217.171.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3c:e1:0a:f4:5c:cb:fd:21:87:ab:b2:1e:21:b6:3d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Validity
Not Before: Mar 14 12:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ea89607d0ed0e9e6e8c45958766da338a59534b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1f:64:a2:e5:a4:31:44:45:66:14:e6:12:81:
65:23:b8:1c:28:82:e4:be:1e:41:00:29:96:35:04:
50:23:78:3e:ce:7d:cd:8c:c0:87:30:3a:f6:93:ea:
e9:c1:06:78:66:d1:07:74:32:49:df:c4:78:1d:cb:
9e:72:11:bc:2d:51:dd:16:0f:c3:69:18:c0:ef:0f:
75:1d:0a:e7:c1:3e:6e:7d:d9:c9:7c:d7:5b:a4:42:
27:d0:00:49:7e:6c:5d:c9:ac:d1:fa:1b:b9:97:e7:
7f:2c:fb:26:f4:a2:9c:0c:ea:96:01:ea:37:9c:01:
bb:76:67:6a:50:3c:2c:a4:34:f9:0d:0b:ea:57:00:
55:44:37:2b:8e:da:04:8a:dd:51:8c:34:e9:89:d8:
d8:0c:96:ec:30:51:9b:7f:e1:84:25:ff:b5:c9:6f:
8e:d2:36:75:96:c4:de:7c:b7:8b:50:38:1c:f7:7d:
47:59:ae:f9:54:6f:60:03:9c:49:92:fd:8f:8f:82:
87:92:f1:2e:2d:84:a7:07:88:cf:d9:c3:1f:19:93:
e8:d2:45:95:cb:54:88:d4:92:7b:a7:9b:6a:a2:d7:
3f:65:7e:c9:e8:70:ad:d4:62:73:ac:b5:3e:c7:89:
43:53:2b:3e:79:38:dc:0c:71:70:7a:e8:fe:91:13:
0b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A8:96:07:D0:ED:0E:9E:6E:8C:45:95:87:66:DA:33:8A:59:53:4B
X509v3 Authority Key Identifier:
keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/fqiWB9DtDp5ujEWVh2baM4pZU0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.44.0/22
217.171.80.0/21
Signature Algorithm: sha256WithRSAEncryption
38:c6:27:aa:0b:21:5e:2b:91:58:43:b7:8f:4d:ab:73:33:65:
21:eb:0c:8a:77:87:c5:ab:3e:25:2c:26:1b:ef:1c:26:8b:13:
ec:58:33:2d:c8:a4:c1:a3:41:00:c3:1b:1a:c5:1e:27:f8:ef:
d4:26:1c:10:4f:77:cd:0e:4a:2f:2f:74:82:89:49:6f:0b:ac:
62:0c:b7:a0:17:ac:57:a2:e9:24:96:d8:eb:8f:ad:65:db:8a:
fc:d2:fa:71:c6:8d:fe:f8:72:5f:0e:c6:e9:36:ea:5c:47:8f:
37:0b:48:fe:b9:c5:40:13:eb:61:06:a2:a4:f0:7a:5e:07:b7:
8b:32:38:b8:02:06:f4:5b:d3:78:97:29:e0:a5:f8:53:50:90:
f3:b1:86:3d:d3:7a:2c:09:54:c7:8b:47:88:40:a7:55:f3:d3:
8a:f5:5e:35:96:65:0f:39:3f:10:4e:c6:ad:51:87:d9:f5:2d:
d6:23:39:03:56:8e:0a:44:bb:09:8c:02:d7:32:91:85:ab:ea:
ee:60:52:93:31:f0:74:0f:52:02:1a:10:40:12:a8:cb:1d:bb:
99:4b:a6:5a:17:d1:36:ef:91:2d:04:9d:57:70:77:82:3d:76:
cb:a4:7c:3a:13:f9:48:1e:a6:3a:84:eb:70:67:39:b8:33:7d:
78:08:89:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:06:03 2024 by rpki-client on console-fra.rpki-client.org