Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/9T0HtLwu8UOV4zRUqNtRwQOeDrs.roa
File: 9T0HtLwu8UOV4zRUqNtRwQOeDrs.roa (raw, json)
Hash identifier: MPcQdgDOHrpTmeJoeUhEHudIOt7WtlrUsbssoCOTAeI=
Subject key identifier: F5:3D:07:B4:BC:2E:F1:43:95:E3:34:54:A8:DB:51:C1:03:9E:0E:BB
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 018D657FE1E032043E338097755917866B26
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/9T0HtLwu8UOV4zRUqNtRwQOeDrs.roa
Signing time: Thu 01 Feb 2024 16:28:16 +0000
ROA not before: Thu 01 Feb 2024 16:28:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198912
IP address blocks: 57.191.0.0/21 maxlen: 24
57.191.127.0/24 maxlen: 24
57.191.192.0/19 maxlen: 24
57.191.224.0/19 maxlen: 24
57.250.220.0/24 maxlen: 24
57.250.255.0/24 maxlen: 24
2a0a:90c2::/36 maxlen: 36
2a0a:90c2:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:7f:e1:e0:32:04:3e:33:80:97:75:59:17:86:6b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Feb 1 16:28:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f53d07b4bc2ef14395e33454a8db51c1039e0ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c3:47:1c:c2:99:da:f6:5b:d5:81:73:f7:73:
8c:30:c4:d3:be:73:4a:f5:8f:4a:f8:24:c2:87:60:
0d:56:34:60:40:7f:e1:d0:a1:f8:fd:08:9e:c1:3a:
b1:9c:a5:0a:0d:df:46:8d:b9:bb:ad:d6:e5:e8:33:
61:bb:10:08:57:99:00:0e:0e:5f:2d:f3:96:49:0f:
f0:d4:1a:0d:bf:6f:8c:a3:bd:ed:b0:f3:67:42:df:
1e:07:9a:30:2f:ef:45:9a:a6:bd:3f:f5:67:04:97:
29:56:02:53:0a:c4:d8:b0:6a:c8:99:92:18:e6:c9:
82:2d:49:bc:29:16:6b:7f:5e:af:4f:82:b0:9d:df:
4d:c4:6f:02:2e:bf:6b:c8:36:bc:52:07:3a:12:c9:
fb:74:b1:fc:97:9f:3e:84:49:ef:c6:a7:84:fd:36:
81:71:7f:6e:2c:7f:60:b9:de:e7:45:c3:2c:17:64:
11:1c:8a:67:8b:31:54:7c:e9:99:06:6f:cb:9f:28:
ca:55:7c:f0:48:bf:cd:49:85:f7:b7:3e:7a:c5:eb:
f1:92:81:a8:ff:54:e3:59:3c:9e:3f:84:f8:4f:4c:
92:d9:69:9b:cc:93:2b:e6:8e:23:c7:01:b6:43:38:
64:e7:77:97:64:f8:17:3f:f6:84:95:4d:46:6f:1a:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3D:07:B4:BC:2E:F1:43:95:E3:34:54:A8:DB:51:C1:03:9E:0E:BB
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/9T0HtLwu8UOV4zRUqNtRwQOeDrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.191.0.0/21
57.191.127.0/24
57.191.192.0/18
57.250.220.0/24
57.250.255.0/24
IPv6:
2a0a:90c2::/35
Signature Algorithm: sha256WithRSAEncryption
9e:89:97:94:48:cc:9d:f6:d4:d3:23:39:fa:ae:a9:8d:54:a6:
9a:68:d7:8d:23:27:bc:1d:ce:37:e2:f4:4a:13:0c:0e:30:1d:
51:29:42:31:bc:de:5a:3f:c7:5f:1b:dc:b2:18:2b:cd:8f:6a:
c4:29:a7:b7:b6:3d:93:bd:33:10:0f:32:26:c2:1f:5a:0d:b5:
21:9a:38:18:91:5b:24:27:8e:a2:e2:21:e3:03:89:5e:6d:f8:
c1:69:4d:58:8e:f2:5e:39:d5:c3:94:91:4e:c5:ce:a9:5a:a8:
27:25:54:9c:66:ee:94:fc:10:7c:4a:5d:e4:1f:e4:44:3f:b6:
db:db:e0:b6:a2:d6:30:b6:f9:d1:74:74:e1:3b:3c:cb:e5:e7:
a3:bd:7c:80:2f:72:50:20:06:42:64:c3:45:6a:7b:96:f7:f2:
8f:31:67:00:a7:bc:8e:b8:7c:f8:e4:80:49:67:ab:2c:56:05:
15:77:5c:03:f5:64:4e:57:1d:64:01:d2:ef:63:ab:32:5d:5e:
07:e5:0b:bf:92:2a:9f:53:0f:10:05:52:fa:9e:ef:09:5f:b1:
65:a7:2d:3d:ec:52:72:08:79:8f:cf:a7:44:7e:1a:7c:16:69:
3b:3e:53:60:34:0b:5a:af:7e:cd:c3:ff:c5:62:b9:b7:29:65:
10:66:78:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 13:04:50 2024 by rpki-client on console-ams.rpki-client.org