Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/QL-uEvi0dSD8nhaddyBVHIw-Mr8.roa
File: QL-uEvi0dSD8nhaddyBVHIw-Mr8.roa (raw, json)
Hash identifier: UU4S86aRwRql8xCnbc6BF4J6J5TArScBvjCdQVCBPvk=
Subject key identifier: 40:BF:AE:12:F8:B4:75:20:FC:9E:16:9D:77:20:55:1C:8C:3E:32:BF
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 018CC64B8C74126965BE90ED9BE80786303F
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/QL-uEvi0dSD8nhaddyBVHIw-Mr8.roa
Signing time: Mon 01 Jan 2024 18:31:29 +0000
ROA not before: Mon 01 Jan 2024 18:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43332
IP address blocks: 185.220.145.0/24 maxlen: 24
185.187.80.0/23 maxlen: 23
185.187.82.0/24 maxlen: 24
185.187.83.0/24 maxlen: 24
2a0b:9b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8c:74:12:69:65:be:90:ed:9b:e8:07:86:30:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 18:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40bfae12f8b47520fc9e169d7720551c8c3e32bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:93:6b:af:f1:18:e3:75:f5:4f:13:17:36:76:
a7:db:da:5f:c0:83:83:95:7e:c8:75:29:23:55:5c:
88:af:89:9a:7c:0b:85:9b:64:9d:4e:75:73:f1:2a:
d8:21:17:44:bb:74:62:c0:78:fa:c0:e2:e4:ab:86:
af:3d:d6:5d:79:70:ed:01:29:31:88:e7:d6:53:a8:
25:33:0d:80:8d:21:a3:56:46:19:13:0a:e0:10:19:
68:88:54:c8:56:59:13:53:73:e5:8b:b1:92:12:3b:
ab:85:3f:57:d6:ff:8f:50:8f:12:c8:32:d8:d4:1f:
a3:a7:6b:3c:ee:4e:01:a1:b6:d6:84:3d:62:b6:d2:
46:e0:f1:68:02:07:31:9a:80:de:60:10:64:9d:18:
8e:cb:1f:c1:24:3a:6f:f3:0b:5c:2f:2e:52:a3:9a:
19:b1:74:e5:1b:6a:43:37:5b:f8:01:a8:92:98:4d:
2c:6c:ce:cd:fb:f7:14:d4:9e:0d:f6:b0:26:f9:4c:
50:3a:88:08:7d:56:f9:39:bb:0f:aa:84:59:44:67:
32:92:50:c3:33:24:03:51:54:0e:e9:3c:ea:88:a1:
3f:79:d8:b6:88:c7:98:97:fb:a3:2e:60:6f:f9:06:
b8:85:68:db:4c:8c:0d:6c:18:15:70:12:70:61:bb:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BF:AE:12:F8:B4:75:20:FC:9E:16:9D:77:20:55:1C:8C:3E:32:BF
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/QL-uEvi0dSD8nhaddyBVHIw-Mr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.80.0/22
185.220.145.0/24
IPv6:
2a0b:9b80::/29
Signature Algorithm: sha256WithRSAEncryption
bf:2d:57:95:3c:8a:96:d5:54:20:5c:31:c4:51:45:1c:ec:99:
4e:55:bc:7a:41:22:5a:6f:4d:1a:28:2d:a0:27:ce:54:b6:fc:
a3:79:a4:15:55:97:d4:e6:b1:4c:dc:e3:bb:e8:85:e0:2f:71:
d2:bd:25:eb:cf:f1:eb:40:32:ec:8e:91:a9:f5:48:af:3d:65:
93:41:b3:58:a4:f8:df:69:ba:e3:54:bc:68:52:01:d9:b1:f4:
d7:71:83:5f:95:5a:4e:b5:8c:5a:04:3f:3a:ab:3a:53:bf:87:
4e:96:1c:c5:ed:e3:31:ca:d8:6a:09:78:a1:4c:c8:45:27:e2:
d1:ae:2f:04:f0:41:a9:f7:3b:04:bf:b2:18:45:15:28:2d:cc:
c8:a6:d9:4a:65:62:18:64:54:a8:5d:a3:d6:26:d8:da:6a:aa:
10:e6:34:03:49:cc:d8:9f:91:9a:73:62:07:19:7a:db:04:f5:
46:af:73:ad:e4:84:71:3a:07:51:ab:92:44:64:98:2d:be:fd:
af:17:1f:df:84:25:18:e4:5d:38:b8:4d:1e:90:32:a2:67:53:
90:9d:29:8c:fe:16:e4:b2:04:7c:d2:92:ce:83:2c:14:69:70:
05:f8:43:dd:8e:f8:ba:90:a4:70:2f:d1:a4:09:53:9b:cf:dc:
cd:ed:6f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:23:01 2024 by rpki-client on console-fra.rpki-client.org