Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/EQ-MI94gNTH8NuYQrRLRT_LJg3E.roa
File: EQ-MI94gNTH8NuYQrRLRT_LJg3E.roa (raw, json)
Hash identifier: XlnynrfroVIPGbV843O9WaPTHuciNIwrM8cO9bg61ec=
Subject key identifier: 11:0F:8C:23:DE:20:35:31:FC:36:E6:10:AD:12:D1:4F:F2:C9:83:71
Certificate issuer: /CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Certificate serial: 018CC26CF5D3ACB785B2C2DD6FADD69CAF5E
Authority key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/EQ-MI94gNTH8NuYQrRLRT_LJg3E.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61102
IP address blocks: 185.18.206.0/24 maxlen: 24
185.18.205.0/24 maxlen: 24
89.33.29.0/24 maxlen: 24
185.18.204.0/24 maxlen: 24
89.33.28.0/24 maxlen: 24
185.18.207.0/24 maxlen: 24
176.223.65.0/24 maxlen: 24
185.217.98.0/24 maxlen: 24
185.217.97.0/24 maxlen: 24
185.217.96.0/24 maxlen: 24
185.217.99.0/24 maxlen: 24
107.150.179.0/24 maxlen: 24
107.150.178.0/24 maxlen: 24
188.210.255.0/24 maxlen: 24
185.37.150.0/24 maxlen: 24
185.37.149.0/24 maxlen: 24
185.37.148.0/24 maxlen: 24
185.37.151.0/24 maxlen: 24
2a03:ff40:4ed1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f5:d3:ac:b7:85:b2:c2:dd:6f:ad:d6:9c:af:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=110f8c23de203531fc36e610ad12d14ff2c98371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:68:d2:1a:61:1f:1d:fe:8d:7f:0a:d7:f4:
c6:72:e2:cf:76:d6:51:db:7e:30:07:47:a6:dc:7a:
dc:44:02:0a:66:ed:5e:49:a5:fe:af:43:e7:0c:30:
9a:df:fa:dd:28:39:b2:8f:83:d7:87:93:8e:b2:84:
50:7d:76:cb:12:fe:fe:c3:c8:f3:b0:46:dd:c7:b0:
3e:1e:65:84:b5:0e:3e:5c:3e:0f:34:a8:60:be:53:
e9:e7:74:53:59:5e:84:24:0f:21:7d:55:77:04:af:
a4:04:85:1b:cc:07:5a:f2:a3:28:fe:6a:a4:2d:4d:
7a:7f:9d:d0:ab:1c:87:7b:d0:71:63:6e:09:2f:07:
9f:7d:76:cf:d4:d1:84:af:7d:e5:2c:06:fe:f6:eb:
a6:4f:56:04:8e:f0:88:90:aa:81:bb:bb:dd:46:90:
a9:ff:ea:7e:09:ed:5e:c4:5f:28:e6:c1:85:f3:2b:
d4:06:e9:e1:62:b9:be:be:48:4e:ed:39:2b:c7:88:
6a:82:f2:21:b0:0a:c3:0f:99:58:b3:ea:12:2e:f7:
a0:e9:0c:18:91:d9:c6:38:fb:cf:90:91:47:88:b5:
38:d0:44:29:25:54:6a:21:0a:fd:dc:28:5e:89:f9:
19:35:44:9b:1b:44:09:fd:8d:3d:81:69:e5:16:09:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0F:8C:23:DE:20:35:31:FC:36:E6:10:AD:12:D1:4F:F2:C9:83:71
X509v3 Authority Key Identifier:
keyid:40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/EQ-MI94gNTH8NuYQrRLRT_LJg3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.28.0/23
107.150.178.0/23
176.223.65.0/24
185.18.204.0/22
185.37.148.0/22
185.217.96.0/22
188.210.255.0/24
IPv6:
2a03:ff40:4ed1::/48
Signature Algorithm: sha256WithRSAEncryption
14:53:44:04:be:5b:9e:de:77:f8:20:2c:d7:48:e9:d6:54:d4:
fd:34:d1:01:b7:df:17:56:57:d9:17:32:ad:ab:8d:f0:c0:b6:
51:d1:00:c7:b1:aa:ee:58:83:21:02:88:12:0f:de:23:42:b8:
ca:4d:4e:f9:ac:a3:48:2f:b4:cc:d9:a7:ee:1e:52:c3:c9:53:
71:49:59:2d:bf:39:50:b0:16:4f:2a:82:a0:07:31:9f:a1:18:
14:81:46:a7:0a:17:9c:12:b6:71:bd:bc:19:ff:bc:47:db:2c:
b2:be:7b:cd:26:e0:4c:6d:19:ff:42:7c:b5:c1:06:5d:34:7e:
d1:c6:1c:e8:68:d0:89:7b:54:c0:23:02:9f:23:24:a3:f7:30:
8a:fe:e0:f2:17:dc:04:a1:e5:0f:3b:35:d5:0d:65:e9:0c:99:
48:b4:d0:5b:8c:35:45:28:66:2d:97:cd:c6:e3:a7:8d:00:8d:
8e:a4:d0:b2:d1:fe:c0:03:72:6c:87:1e:b4:c8:2a:02:e2:2e:
42:1b:98:61:e8:87:c2:eb:e5:f2:cf:ef:9c:4e:6f:64:2f:8f:
f8:4b:ca:73:d0:35:41:15:89:fa:af:3e:86:1a:b1:d5:d7:d3:
79:b5:de:78:b1:ca:d6:c3:73:a6:ec:f3:a1:21:eb:f1:6b:9e:
4a:2f:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:56:08 2024 by rpki-client on console-ams.rpki-client.org