Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/QrJLsDR9s_Iz3dOoeahBtdj69cw.roa
File: QrJLsDR9s_Iz3dOoeahBtdj69cw.roa (raw, json)
Hash identifier: ccKn6KsYvWYlfjaQCLmgIvAu7wvSjjGXV5sRHJ8fsDk=
Subject key identifier: 42:B2:4B:B0:34:7D:B3:F2:33:DD:D3:A8:79:A8:41:B5:D8:FA:F5:CC
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 0190B33551B9770E146C9D5E485D56CEB9FB
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/QrJLsDR9s_Iz3dOoeahBtdj69cw.roa
Signing time: Sun 14 Jul 2024 21:45:34 +0000
ROA not before: Sun 14 Jul 2024 21:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48611
IP address blocks: 185.250.184.0/24 maxlen: 24
185.250.185.0/24 maxlen: 24
2a0c:1140::/32 maxlen: 32
2a0c:1142::/32 maxlen: 32
2a0c:1143::/32 maxlen: 32
2a0c:1144::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b3:35:51:b9:77:0e:14:6c:9d:5e:48:5d:56:ce:b9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Jul 14 21:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42b24bb0347db3f233ddd3a879a841b5d8faf5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:a4:54:8b:c8:a3:03:19:c5:be:b3:1a:ee:
c6:2f:e6:db:de:09:9a:80:33:ab:e8:80:fa:6e:43:
a1:39:4a:8b:17:dc:ae:5a:ed:fa:5f:eb:c2:92:50:
57:4c:b0:5c:39:70:57:c2:bc:af:d0:dc:9d:ab:86:
d0:ea:23:e9:66:c6:bf:5a:ca:ed:f7:0f:3c:ce:c2:
0b:70:a9:ec:d4:3b:d8:57:a2:9d:3d:50:78:e7:41:
b8:4e:8b:e4:ab:bf:f8:fd:d2:97:6d:14:0d:cd:d2:
4d:12:74:c3:b7:75:21:89:8d:3a:29:2d:b1:d8:30:
6f:2b:fb:90:71:af:be:b0:6e:22:a8:ac:79:07:0d:
c8:b0:5d:fa:11:78:93:42:36:82:06:2b:bb:94:15:
35:d3:95:36:5a:d3:d5:0b:1d:98:69:75:8b:db:18:
46:d5:05:ee:dc:90:f6:c3:ef:8b:60:5d:57:ee:3f:
26:81:43:43:e2:98:3b:2f:70:d9:55:2e:b1:9d:7a:
77:7e:64:57:d9:78:93:6a:1e:b1:5d:50:30:16:66:
1f:c9:36:10:c5:b6:23:97:be:2d:5a:6a:d1:92:6a:
56:2d:f7:88:20:f7:43:bb:cd:6c:19:7a:13:4d:ec:
22:ef:c5:d7:e7:a1:6e:3c:da:5f:4a:a7:4a:a0:95:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B2:4B:B0:34:7D:B3:F2:33:DD:D3:A8:79:A8:41:B5:D8:FA:F5:CC
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/QrJLsDR9s_Iz3dOoeahBtdj69cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.184.0/23
IPv6:
2a0c:1140::/32
2a0c:1142::-2a0c:1147:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
55:7e:44:45:ab:6b:b0:a9:13:88:e8:0f:f6:5b:c0:59:00:45:
00:08:28:52:6d:13:37:44:f7:d7:3b:60:d5:4e:92:35:42:af:
5c:bd:50:39:e4:bc:07:ab:5a:6e:ec:2e:71:8d:27:40:b3:fc:
35:e8:05:df:70:45:81:ef:ea:a1:81:92:11:51:43:ae:6e:c8:
18:69:af:9e:9b:58:8c:77:58:9e:d2:48:22:f8:7e:59:b1:63:
49:29:c2:af:32:6b:a9:4a:04:d7:2e:3c:5f:ec:92:be:b1:29:
ad:6b:67:e5:b2:dd:33:4d:01:99:94:ef:42:a2:fa:3c:a4:94:
d7:2f:a6:b8:8a:16:1b:c9:a6:d0:bd:a6:1f:83:3e:48:f6:88:
aa:76:9c:89:21:9d:cb:58:e4:f1:6a:5b:77:f5:33:4e:c2:96:
c0:e8:3f:76:de:41:68:84:57:6d:97:a8:07:8e:e1:93:09:1d:
90:08:f0:3c:39:c6:c7:fc:17:b1:2f:a1:86:f6:f5:27:3f:bc:
48:6f:da:25:1c:e1:97:02:61:13:eb:4e:3c:af:03:2b:e7:13:
37:35:61:23:53:31:d4:32:a1:54:3a:f1:e1:e4:57:9f:b3:0d:
ce:e7:b0:72:97:75:25:57:e3:37:a6:5a:79:4f:42:c5:05:26:
44:46:1e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:14 2024 by rpki-client on console-fra.rpki-client.org