Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/qsfPF-0_LPJoWFRYcCoM8w1NqVU.roa
File: qsfPF-0_LPJoWFRYcCoM8w1NqVU.roa (raw, json)
Hash identifier: OIACBeyU7yQSofD/DDxyap+1u8eHInqVBFeozOGV4s0=
Subject key identifier: AA:C7:CF:17:ED:3F:2C:F2:68:58:54:58:70:2A:0C:F3:0D:4D:A9:55
Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589
Certificate serial: 018CC94D1C0A00F4EC60B8A6E5FCCADF4F40
Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/qsfPF-0_LPJoWFRYcCoM8w1NqVU.roa
Signing time: Tue 02 Jan 2024 08:32:02 +0000
ROA not before: Tue 02 Jan 2024 08:32:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201466
IP address blocks: 185.160.168.0/22 maxlen: 22
45.134.152.0/22 maxlen: 22
185.222.164.0/22 maxlen: 22
193.36.144.0/22 maxlen: 22
185.73.168.0/22 maxlen: 22
195.191.48.0/24 maxlen: 24
2.57.108.0/22 maxlen: 22
195.242.72.0/22 maxlen: 22
2a07:bec0::/29 maxlen: 29
2a03:4460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:1c:0a:00:f4:ec:60:b8:a6:e5:fc:ca:df:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be9593d290e0250278a73b313550329327bd589
Validity
Not Before: Jan 2 08:32:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aac7cf17ed3f2cf268585458702a0cf30d4da955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:05:47:ea:d3:20:4e:dc:ab:eb:94:08:76:
7b:44:c1:a3:10:d5:45:8d:fd:b9:57:93:25:3c:89:
ab:26:bf:46:00:7b:a7:ad:5b:d8:3e:72:a8:7b:8a:
3d:aa:d8:5c:58:13:3f:c2:c4:4b:58:85:2f:67:dc:
8e:a7:7b:b9:76:8b:f7:e8:88:43:d4:69:b4:62:f5:
3a:8c:e3:e6:47:fe:7b:6c:bd:ac:3a:6e:4a:7b:0a:
4a:41:b1:0d:21:02:bc:26:d4:be:71:d6:3f:57:a3:
89:87:af:35:dd:71:4a:bf:db:d0:ea:5e:ff:3e:58:
45:90:4b:89:35:f1:2a:c3:e2:33:f5:40:66:12:98:
d4:c6:9b:d7:93:23:3b:80:47:72:84:eb:2d:a8:59:
5c:9e:b1:fb:47:74:66:ce:96:e0:5a:66:87:22:48:
be:62:3a:61:85:79:6a:07:3e:5c:d7:4b:4a:e6:19:
7a:e1:39:67:ba:7a:c7:85:b1:53:42:15:6c:9f:4b:
61:3a:0b:f4:d8:dc:98:b4:35:e5:a1:8c:41:90:14:
f8:db:61:9b:26:42:65:6d:d5:46:3b:6a:d0:3b:72:
94:57:39:2a:96:12:18:12:28:69:e9:68:8b:53:77:
04:88:2e:1b:d1:48:f5:72:bd:bc:12:e7:70:22:3f:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C7:CF:17:ED:3F:2C:F2:68:58:54:58:70:2A:0C:F3:0D:4D:A9:55
X509v3 Authority Key Identifier:
keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/qsfPF-0_LPJoWFRYcCoM8w1NqVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.108.0/22
45.134.152.0/22
185.73.168.0/22
185.160.168.0/22
185.222.164.0/22
193.36.144.0/22
195.191.48.0/24
195.242.72.0/22
IPv6:
2a03:4460::/32
2a07:bec0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:95:8b:bb:82:29:a5:92:9f:df:85:3e:32:16:d0:8c:70:70:
cd:83:bf:d7:be:47:bc:70:c0:f2:75:ab:9b:af:ec:7e:ab:dd:
28:0a:4b:eb:11:7f:5f:df:57:08:22:b3:2a:5f:68:ff:9a:58:
a2:f6:2e:bd:d2:35:ac:9c:7f:c0:ec:53:90:17:1f:75:81:e8:
7b:3e:ee:85:b1:0c:3e:68:e8:ac:04:5b:25:46:81:35:3b:d6:
99:ea:53:0e:21:9a:13:38:30:56:15:c1:c5:9e:5b:62:ec:4b:
5d:87:81:a2:f9:3c:08:f0:be:79:c2:84:0a:c9:05:b6:d8:ce:
14:35:31:04:ff:97:1b:11:6b:40:74:31:e0:ee:de:81:d8:b2:
11:ec:59:e1:72:94:0d:9b:50:ac:2f:49:98:4c:cd:d5:0b:53:
44:73:95:a6:de:4b:47:85:d2:a6:61:6c:e4:01:b2:71:50:cf:
13:52:00:83:c7:c8:af:f1:d5:15:53:6f:c0:b1:84:02:54:2e:
01:b6:ba:ad:c7:b0:d0:11:ed:6a:2d:6b:1d:48:fd:65:4a:22:
39:09:e5:57:42:24:fa:87:8a:e9:08:35:ab:fe:91:e4:b4:c4:
85:bc:f1:51:f6:90:1a:05:3f:94:d1:91:b8:9c:56:f8:d6:a0:
5c:86:ed:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:10:45 2024 by rpki-client on console-fra.rpki-client.org