Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/qFml8DUiLOYSpc35VCsPyfgK3G0.roa
File: qFml8DUiLOYSpc35VCsPyfgK3G0.roa (raw, json)
Hash identifier: tpKPY4d14p0c2/l+5FxC0Rzd4m4G9QxcBpfkzmlm+AY=
Subject key identifier: A8:59:A5:F0:35:22:2C:E6:12:A5:CD:F9:54:2B:0F:C9:F8:0A:DC:6D
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 018CC64B2753A00035724CF0E1AF1729EBEA
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/qFml8DUiLOYSpc35VCsPyfgK3G0.roa
Signing time: Mon 01 Jan 2024 18:31:03 +0000
ROA not before: Mon 01 Jan 2024 18:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209853
IP address blocks: 185.149.103.0/24 maxlen: 24
185.149.100.0/24 maxlen: 24
185.149.102.0/24 maxlen: 24
185.149.101.0/24 maxlen: 24
45.151.251.0/24 maxlen: 24
45.151.248.0/24 maxlen: 24
45.151.250.0/24 maxlen: 24
45.151.249.0/24 maxlen: 24
78.142.209.0/24 maxlen: 24
78.142.208.0/24 maxlen: 24
78.142.211.0/24 maxlen: 24
78.142.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 04:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:27:53:a0:00:35:72:4c:f0:e1:af:17:29:eb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Jan 1 18:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a859a5f035222ce612a5cdf9542b0fc9f80adc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:2b:15:01:7c:cb:ce:57:33:44:1c:7a:b0:
87:e5:9b:8c:24:10:e2:bc:7b:fd:e9:2b:8f:6c:ae:
26:19:69:ef:44:2b:1e:38:3a:84:33:e2:1e:09:60:
6f:08:82:73:21:5c:56:b7:43:ac:fa:9e:7e:ca:57:
4e:ed:99:36:2f:3a:ac:b2:bf:f9:40:17:30:9a:b9:
b7:52:08:41:0d:2a:87:64:57:fe:74:52:6b:17:44:
60:84:7a:68:4e:f8:19:49:5e:fc:ce:33:1c:3b:4f:
5c:12:1f:6e:3c:8a:19:cd:64:04:21:38:cc:d0:07:
f3:4b:93:f2:35:a7:f8:86:43:46:fd:27:59:87:6b:
4c:96:f4:9c:4d:cb:20:bb:19:c5:79:00:82:ee:f4:
d7:c8:1c:c1:4d:d0:07:2f:45:8b:7f:ee:77:a2:f5:
4a:1e:c8:49:b8:8a:81:15:de:e2:d2:6c:4a:e7:3f:
48:c4:d3:0b:ce:2c:43:15:2c:34:5d:51:ac:6b:9e:
7b:e3:5d:6d:58:f7:70:b0:b5:3c:6c:30:a7:1f:9b:
50:5a:90:32:6e:56:51:b3:4e:83:8e:a9:4d:1a:0e:
d9:55:a4:40:b1:14:2d:39:11:35:05:10:7c:75:58:
2e:ce:59:46:dd:7f:2b:14:c1:a3:23:6e:04:97:bf:
d7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:59:A5:F0:35:22:2C:E6:12:A5:CD:F9:54:2B:0F:C9:F8:0A:DC:6D
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/qFml8DUiLOYSpc35VCsPyfgK3G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.248.0/22
78.142.208.0/22
185.149.100.0/22
Signature Algorithm: sha256WithRSAEncryption
73:9e:f6:cc:03:b0:b4:33:3b:22:ae:28:3e:1f:30:82:30:fa:
a6:f4:2c:0b:cd:63:ac:1f:1b:11:a9:96:5b:b4:02:1d:49:14:
b3:d2:18:54:1b:5f:c9:62:a6:5b:bd:42:68:f7:73:7f:d0:28:
0b:75:aa:a8:78:36:15:9f:a9:4c:d6:ef:d5:29:d0:b3:8c:4e:
52:67:a0:09:29:b2:35:77:9e:99:ea:c5:5d:1e:45:58:b5:b2:
96:39:8a:3c:39:13:e9:c5:0b:09:c3:9f:a2:77:e5:b7:e5:c9:
25:57:cb:ea:6a:ec:ed:f9:55:51:c5:e2:50:14:4d:49:1e:6b:
66:76:fc:8a:a8:84:23:95:1a:c7:ca:2a:3b:65:fa:8d:4e:27:
a5:ef:63:91:97:99:fa:70:2b:34:1a:4f:e9:d5:35:d8:68:79:
55:56:fa:94:b7:12:9c:b2:0c:a1:70:9c:9c:c1:b6:60:bf:6f:
1a:cc:10:66:ff:e7:2c:72:48:d6:17:f0:2c:2f:51:1f:72:c8:
cf:08:a1:3d:66:61:56:85:26:1d:58:c3:6c:7c:1a:df:9c:42:
f0:13:7d:c5:85:a5:9b:a7:93:02:c7:00:ec:c5:c4:8b:14:00:
b2:5b:1d:49:10:4b:02:e8:15:ff:86:58:16:17:1c:57:d6:9c:
71:32:12:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 10:01:02 2024 by rpki-client on console-ams.rpki-client.org