Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/RqM-sosJkdh-H9DbQhfUBazqt9w.roa
File: RqM-sosJkdh-H9DbQhfUBazqt9w.roa (raw, json)
Hash identifier: b+1j8XdMh6ZEJE2rHNOa1SHYHJU7kyg28BPBgdACxFo=
Subject key identifier: 46:A3:3E:B2:8B:09:91:D8:7E:1F:D0:DB:42:17:D4:05:AC:EA:B7:DC
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 018CF337AA4E211159F2D46A56AF6C9E34B6
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/RqM-sosJkdh-H9DbQhfUBazqt9w.roa
Signing time: Wed 10 Jan 2024 11:52:40 +0000
ROA not before: Wed 10 Jan 2024 11:52:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200497
IP address blocks: 194.9.18.0/23 maxlen: 24
5.252.16.0/22 maxlen: 24
194.4.144.0/22 maxlen: 24
194.9.8.0/23 maxlen: 24
2a0c:e440::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:37:aa:4e:21:11:59:f2:d4:6a:56:af:6c:9e:34:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: Jan 10 11:52:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46a33eb28b0991d87e1fd0db4217d405aceab7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:8f:a3:74:82:4c:ba:d7:be:a3:51:d8:cc:
92:2f:37:3e:1d:34:3b:8c:41:9c:5b:66:d1:5e:df:
4b:7a:d4:7d:d3:c8:fc:bb:e5:69:3b:e3:d5:15:a2:
6e:83:4d:c1:da:8a:65:ce:86:59:f5:d3:ce:ee:3e:
9c:3d:64:03:1d:87:3a:11:93:11:65:88:c5:42:b2:
14:00:79:ce:41:a3:21:b2:76:c0:8d:a3:26:59:a1:
ba:51:08:3e:24:34:85:bb:50:29:32:0d:5b:8a:3e:
9f:64:ce:9f:5c:fb:43:48:dd:3c:d2:b4:f2:27:00:
b7:a4:3e:89:05:39:5a:16:d5:72:f4:02:c6:2c:bb:
a6:bf:d7:a8:b9:d7:d7:3e:f0:ab:bc:20:57:35:b9:
c5:9c:ff:f8:00:e6:94:b9:fc:42:3a:a6:c8:4c:1b:
9e:bf:f6:06:d2:5a:39:f4:2a:e2:1b:57:ad:37:82:
90:8a:8c:da:03:20:6d:bf:0e:d7:12:5b:0f:5b:bf:
3a:fd:ea:a0:d4:39:45:7e:7b:48:50:dc:bc:f4:c1:
5d:b4:50:3b:21:31:82:7a:0c:74:5b:d6:b7:54:d0:
53:9a:e3:66:25:91:8b:5a:4a:5b:29:b3:d3:9b:f1:
3a:66:9b:a1:6d:a5:0b:cc:59:9b:3f:2e:0d:18:40:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A3:3E:B2:8B:09:91:D8:7E:1F:D0:DB:42:17:D4:05:AC:EA:B7:DC
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/RqM-sosJkdh-H9DbQhfUBazqt9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.16.0/22
194.4.144.0/22
194.9.8.0/23
194.9.18.0/23
IPv6:
2a0c:e440::/29
Signature Algorithm: sha256WithRSAEncryption
8a:87:d0:13:74:a9:4b:9a:95:c1:b9:b7:39:9c:07:ec:82:c3:
6a:41:6e:8f:77:fe:9f:8e:48:b7:77:a0:b2:a4:45:c3:c1:0e:
d8:89:db:f3:64:11:3a:00:8a:45:16:17:df:57:c2:c6:1e:2d:
f8:2e:95:cb:ea:63:7e:ca:0c:c1:46:43:fa:45:19:e6:0a:84:
a8:4c:5d:d1:6f:1a:5e:be:dd:06:18:e1:a7:cc:8d:0a:f4:80:
55:35:79:a7:56:23:6a:be:80:6e:c8:c5:ca:ba:fc:cf:7a:ed:
57:e8:0b:63:24:48:0d:6c:ed:af:3f:31:29:4f:f6:08:9b:5d:
55:a1:94:99:fc:62:56:bb:a5:9d:76:1d:12:8d:16:07:86:f8:
35:a1:54:27:47:34:38:1c:c5:ee:2a:04:13:86:a2:21:4c:01:
94:de:d8:60:aa:93:ec:31:01:41:23:0b:ce:f1:ae:9c:e7:93:
1e:5e:89:14:24:7e:2e:50:1d:60:2a:01:63:a2:11:25:0b:c2:
a2:59:65:73:ba:aa:c9:b6:b8:4d:db:f6:8b:d3:bf:e1:ce:12:
7d:1e:80:ca:f6:42:d0:a9:6e:0a:47:a6:04:04:61:09:a6:f3:
5c:1c:b6:46:84:0e:f4:4f:53:bc:d1:27:69:db:da:91:54:22:
6c:cb:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:00 2024 by rpki-client on console-ams.rpki-client.org