Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/Q9J9erlZyBbqbg3iUKfJJDXxpOo.roa
File: Q9J9erlZyBbqbg3iUKfJJDXxpOo.roa (raw, json)
Hash identifier: mhXyHsXPmhWpl/VcKHp3T3YKxB8INMZB27A3b6/DaRM=
Subject key identifier: 43:D2:7D:7A:B9:59:C8:16:EA:6E:0D:E2:50:A7:C9:24:35:F1:A4:EA
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 018CC26D3D571D16B681964CD40344E865F2
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/Q9J9erlZyBbqbg3iUKfJJDXxpOo.roa
Signing time: Mon 01 Jan 2024 00:29:48 +0000
ROA not before: Mon 01 Jan 2024 00:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44327
IP address blocks: 93.188.11.0/24 maxlen: 24
93.188.8.0/21 maxlen: 21
93.188.8.0/24 maxlen: 24
93.188.8.0/22 maxlen: 22
93.188.12.0/22 maxlen: 22
93.188.14.0/24 maxlen: 24
92.51.96.0/20 maxlen: 20
92.51.96.0/21 maxlen: 21
92.51.92.0/24 maxlen: 24
92.51.104.0/21 maxlen: 21
92.51.99.0/24 maxlen: 24
92.51.112.0/24 maxlen: 24
92.51.112.0/22 maxlen: 22
92.51.116.0/22 maxlen: 22
92.51.112.0/21 maxlen: 21
92.51.112.0/20 maxlen: 20
92.51.113.0/24 maxlen: 24
92.51.121.0/24 maxlen: 24
92.51.124.0/22 maxlen: 22
92.51.120.0/22 maxlen: 22
92.51.120.0/21 maxlen: 21
92.51.126.0/24 maxlen: 24
109.234.112.0/22 maxlen: 22
109.234.112.0/24 maxlen: 24
109.234.116.0/22 maxlen: 22
109.234.112.0/21 maxlen: 21
92.51.64.0/20 maxlen: 20
92.51.64.0/21 maxlen: 21
92.51.64.0/24 maxlen: 24
92.51.64.0/18 maxlen: 18
92.51.66.0/24 maxlen: 24
92.51.65.0/24 maxlen: 24
92.51.69.0/24 maxlen: 24
92.51.75.0/24 maxlen: 24
92.51.72.0/21 maxlen: 21
92.51.80.0/24 maxlen: 24
92.51.80.0/20 maxlen: 20
92.51.80.0/21 maxlen: 21
92.51.82.0/24 maxlen: 24
92.51.87.0/24 maxlen: 24
92.51.88.0/21 maxlen: 21
92.51.86.0/24 maxlen: 24
37.131.226.0/24 maxlen: 24
37.131.224.0/21 maxlen: 21
37.131.224.0/22 maxlen: 22
37.131.228.0/22 maxlen: 22
37.131.227.0/24 maxlen: 24
37.131.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3d:57:1d:16:b6:81:96:4c:d4:03:44:e8:65:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Jan 1 00:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43d27d7ab959c816ea6e0de250a7c92435f1a4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:0e:3e:de:97:8f:1a:8f:38:0e:5f:a6:e3:
ef:22:b5:5a:da:c9:5f:89:be:62:7d:84:b2:1c:b5:
f2:3b:82:7e:73:39:46:b7:4a:b0:7d:6f:81:04:40:
4b:78:84:c3:08:fc:15:2f:5b:8c:95:35:9b:e2:e9:
d8:11:30:4f:3b:c6:8e:45:61:30:1d:04:8c:7f:21:
8e:65:ca:a5:3e:ec:cf:04:70:e6:af:b5:df:0e:47:
81:58:34:65:00:dc:c7:28:19:a2:81:da:5d:8c:fb:
56:c9:be:7c:a9:3b:e9:e7:22:84:ac:a1:9f:61:64:
68:41:f2:d8:b4:11:ee:fb:a8:88:c5:d9:7c:0e:0a:
df:28:00:0c:76:26:d5:9c:5c:5f:04:93:61:6c:25:
57:0e:8e:a2:13:8c:75:ca:79:55:16:8f:26:2a:d5:
c5:00:51:8d:80:33:b8:57:68:6c:12:3b:2c:15:e0:
a7:56:b9:21:0a:f4:a2:c6:b1:81:46:e5:d3:1a:5e:
c5:5a:0e:27:d8:9c:81:ec:5c:d1:93:4b:2f:97:f2:
01:92:68:6f:10:13:fe:8f:6e:5e:6f:b4:7f:2a:a2:
c2:18:43:79:ee:ae:08:7d:40:cb:6e:6a:16:49:90:
70:a1:17:14:2b:0d:36:43:0f:6a:7d:30:0b:72:5a:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D2:7D:7A:B9:59:C8:16:EA:6E:0D:E2:50:A7:C9:24:35:F1:A4:EA
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/Q9J9erlZyBbqbg3iUKfJJDXxpOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.224.0/21
92.51.64.0/18
93.188.8.0/21
109.234.112.0/21
Signature Algorithm: sha256WithRSAEncryption
60:9b:4b:1c:ca:27:3b:41:75:d5:1f:17:e7:da:b7:a9:68:b5:
09:8f:cf:8f:73:ba:df:9d:df:98:10:1c:a8:13:3b:bc:fc:06:
46:c1:7f:2c:eb:dd:10:85:54:7a:88:f9:a6:b7:b2:ad:ac:0f:
f1:25:ad:12:56:06:ab:e9:df:f7:47:a5:4b:07:d4:20:eb:28:
07:1d:ad:7e:da:51:dd:93:1d:e2:21:5c:56:2b:89:a2:37:fd:
7b:02:66:b5:e0:36:ba:6b:0b:e1:f6:58:f6:1c:a2:03:44:dc:
d3:11:18:4c:a5:e9:b1:3c:1a:7f:fe:60:27:54:f9:0a:24:eb:
1f:57:97:82:77:ab:bb:aa:51:5e:cf:79:fe:c7:69:dd:ce:ae:
4c:1b:69:e0:18:38:b3:84:66:70:3d:47:b4:3b:5f:79:a5:02:
39:9e:2c:6c:24:cd:69:51:f5:ed:b1:c3:a4:45:44:3a:21:22:
4a:2c:8b:b6:f7:48:d7:e1:28:b5:5b:01:20:3e:80:c6:79:c9:
44:67:3a:d2:f4:a5:47:0b:60:94:53:ea:55:02:77:45:d1:36:
93:71:93:9b:67:e1:df:9a:e9:be:e0:3d:ef:22:76:ad:e0:7c:
22:99:4c:64:d2:0d:a4:45:17:40:4c:a7:fd:73:64:53:c8:0d:
bb:e1:39:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:27 2024 by rpki-client on console-ams.rpki-client.org