Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/qLspSX6pM4Uv6GLUomPIxBsUDy8.roa
File: qLspSX6pM4Uv6GLUomPIxBsUDy8.roa (raw, json)
Hash identifier: KlAlr38tSOfYEFmob/opK86hxvrny93ZMjDWc70C/z0=
Subject key identifier: A8:BB:29:49:7E:A9:33:85:2F:E8:62:D4:A2:63:C8:C4:1B:14:0F:2F
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 018CC7274A9BECA8E64CB4E5DE19324C744B
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/qLspSX6pM4Uv6GLUomPIxBsUDy8.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206063
IP address blocks: 185.39.252.0/24 maxlen: 24
185.39.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4a:9b:ec:a8:e6:4c:b4:e5:de:19:32:4c:74:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8bb29497ea933852fe862d4a263c8c41b140f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:0c:83:68:52:f6:8c:78:a8:29:27:c6:7a:
35:b4:b2:26:f5:c8:da:29:f1:83:c9:bb:65:38:58:
ea:61:96:2e:fd:9d:55:00:a1:7e:65:02:ac:d1:1c:
55:fd:81:9d:94:c1:b3:e2:5e:be:54:8e:ff:51:36:
2f:c4:d7:d8:f3:88:f2:90:ad:15:64:d4:35:19:08:
fe:63:1d:af:89:d0:10:c4:94:e9:0c:9e:c8:05:4c:
96:da:82:1d:5c:9d:82:4e:73:45:ab:25:ad:4b:41:
4b:f9:89:a6:7f:d2:2f:9d:dc:d1:ec:cf:da:fa:5f:
9e:64:de:0e:0d:38:5e:77:b2:f9:e5:c9:f7:46:67:
44:d0:bb:ca:6d:9e:71:5e:9e:2a:4a:b3:b3:e5:2f:
8f:5e:a5:e2:15:eb:7f:33:0b:42:2b:45:3e:40:43:
21:9c:6a:e7:93:87:71:90:cb:77:d1:a5:83:44:c3:
95:6c:4e:dd:d9:b3:2e:c5:69:ba:be:5c:ab:ad:75:
dd:3f:77:66:3f:e4:3e:77:14:32:c1:e5:83:29:e1:
92:65:d1:ff:0c:df:f8:c7:3d:8f:e3:c0:27:4b:58:
81:29:c4:b0:1c:a3:6f:b2:0e:bc:be:cb:c7:9c:ce:
72:fd:c6:49:e7:60:c9:87:2d:9b:b7:ca:2b:4d:61:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BB:29:49:7E:A9:33:85:2F:E8:62:D4:A2:63:C8:C4:1B:14:0F:2F
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/qLspSX6pM4Uv6GLUomPIxBsUDy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.252.0/24
185.39.254.0/23
Signature Algorithm: sha256WithRSAEncryption
21:df:83:4c:c7:9f:6b:1d:02:70:bc:f1:96:38:09:0b:60:4c:
6f:8f:74:fa:17:8b:e8:9f:9e:ac:fa:74:d1:ac:36:df:e7:1f:
44:94:3f:b2:19:16:46:57:e1:75:6f:27:4c:04:6a:70:05:0f:
4d:62:62:50:cf:d5:e8:1b:91:b3:5e:3b:15:12:3d:16:25:20:
f3:fc:7a:8d:f7:89:c9:7f:3f:0f:06:83:39:e4:50:ee:13:39:
91:d0:fd:cf:45:2e:4a:57:11:01:9a:39:f5:46:f2:30:30:c0:
8d:3e:0e:e3:56:29:ba:5b:f2:58:59:bf:b7:2f:95:6c:f6:7c:
89:59:13:6e:e0:b0:45:c1:56:d7:c4:05:e9:8b:95:85:5d:a1:
a9:e7:06:85:31:92:32:f7:70:90:33:34:07:ed:11:88:1a:e4:
a0:52:23:ef:ed:1f:e1:c5:16:8b:ba:89:a2:d7:4f:95:17:82:
c8:c4:30:fe:09:bb:da:86:1a:e9:03:46:4b:52:4e:c3:55:2a:
53:4a:fc:fb:6e:22:08:7d:ee:e7:b4:01:cc:2f:00:03:26:aa:
72:48:0d:8e:3e:b1:6e:24:88:b0:f4:b5:c4:81:48:15:38:5a:
89:28:19:0c:b9:a1:04:12:c1:28:2c:a0:22:5d:0a:7f:c0:a3:
2e:56:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:53:54 2024 by rpki-client on console-ams.rpki-client.org