Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/bq7OP9TmXZiG_zQcEe6YI_hOgPY.roa
File: bq7OP9TmXZiG_zQcEe6YI_hOgPY.roa (raw, json)
Hash identifier: SkabKxUOkBNHegBMTaI5mWA5c9sXNKrfgdNH/l3e+EQ=
Subject key identifier: 6E:AE:CE:3F:D4:E6:5D:98:86:FF:34:1C:11:EE:98:23:F8:4E:80:F6
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 018CC8DF6F2B72B62F0C492DE3B782884543
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/bq7OP9TmXZiG_zQcEe6YI_hOgPY.roa
Signing time: Tue 02 Jan 2024 06:32:15 +0000
ROA not before: Tue 02 Jan 2024 06:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52073
IP address blocks: 185.143.241.0/24 maxlen: 24
185.200.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:6f:2b:72:b6:2f:0c:49:2d:e3:b7:82:88:45:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Jan 2 06:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6eaece3fd4e65d9886ff341c11ee9823f84e80f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:f5:84:04:b4:1a:8f:e6:97:9c:1f:7a:b8:
82:f9:0e:99:1c:3c:0c:7c:e6:3a:f0:91:58:77:b3:
66:87:3d:97:1c:e3:56:71:e1:ab:40:7f:e9:10:ac:
b6:e2:fe:4d:1e:60:50:f8:64:54:b8:52:47:2e:17:
7b:d7:ed:ff:ad:c9:9e:21:58:86:46:aa:4a:1e:ea:
37:8e:5e:6d:14:f1:c1:ee:b5:6e:82:a2:a4:8b:e8:
3b:da:8e:03:61:63:1c:fe:05:d6:1b:23:cd:19:93:
af:9d:78:b2:bb:a3:b0:8a:ea:99:90:b0:38:8b:d4:
56:5a:af:35:21:8b:58:d1:ca:19:89:12:4b:59:d7:
6e:a4:fe:bf:a9:4c:d9:d5:5c:bf:ca:c3:bb:ab:51:
5e:e3:b0:ed:7d:43:9a:10:94:40:0a:e7:72:06:7c:
de:a5:17:d2:80:b0:9e:27:70:98:06:f8:68:d6:4c:
72:a1:3d:30:53:80:c9:6b:97:71:b5:5e:47:1c:ad:
2d:71:27:ec:1b:9a:5f:ef:7b:c9:19:6b:9e:33:43:
39:9c:11:58:76:36:00:4f:9a:ae:a8:2e:76:a0:cf:
3d:ab:b2:ce:40:af:7d:f7:20:15:9e:72:f6:b9:7d:
d7:61:ad:c8:81:cc:8e:06:79:d5:e8:9a:63:1e:ea:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AE:CE:3F:D4:E6:5D:98:86:FF:34:1C:11:EE:98:23:F8:4E:80:F6
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/bq7OP9TmXZiG_zQcEe6YI_hOgPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.241.0/24
185.200.246.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:35:fd:87:cb:96:3e:74:5b:bd:8a:b7:a0:03:ec:cb:97:f9:
ac:19:ff:89:02:a3:6d:25:aa:0c:19:fa:10:66:60:aa:14:3c:
68:74:50:cd:28:bf:95:52:30:94:85:f8:2c:53:c7:d4:57:27:
7d:ab:1c:ab:4b:91:16:72:69:48:1b:41:f7:39:87:8e:88:e9:
6f:5e:29:18:3d:69:4a:f7:31:67:d8:4d:86:aa:74:bd:08:f4:
6b:ec:fa:f3:b3:30:6b:f0:0b:71:93:58:bb:cb:a9:79:b5:69:
0a:9b:f5:39:61:8a:03:e9:7f:66:bc:25:2f:6b:34:ee:5d:51:
d2:1c:48:5a:bf:01:2e:85:d6:81:0f:48:d2:20:b1:38:5d:d6:
a4:21:14:d4:f6:ee:a5:c5:6a:fe:92:82:47:53:bd:e3:e8:5e:
80:53:5a:02:b2:e9:8a:ce:78:59:68:41:1a:cc:ab:f3:e9:43:
c0:a6:05:39:22:8e:b8:3a:c9:76:0f:a7:67:24:9e:a8:e1:c2:
44:b5:8d:e8:3e:54:22:6c:0a:d0:e4:68:ac:09:8b:a8:4c:12:
88:bd:50:27:9f:23:0f:f8:55:8f:d6:44:60:ee:86:18:44:f0:
1c:27:4d:96:ef:b8:19:bc:49:f7:73:b3:b9:47:d5:d2:bf:6c:
b3:e7:99:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:56:23 2024 by rpki-client on console-ams.rpki-client.org