Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/sQNRQCJMPvHB1uK0Y6MkjaT2zVg.roa
File: sQNRQCJMPvHB1uK0Y6MkjaT2zVg.roa (raw, json)
Hash identifier: svRC67c37nl3YbTygCUUlmz6d+yHEKarfocijGomP7c=
Subject key identifier: B1:03:51:40:22:4C:3E:F1:C1:D6:E2:B4:63:A3:24:8D:A4:F6:CD:58
Certificate issuer: /CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Certificate serial: 018CC50155A811D6E2BB1F35611F3DAFA049
Authority key identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/sQNRQCJMPvHB1uK0Y6MkjaT2zVg.roa
Signing time: Mon 01 Jan 2024 12:30:48 +0000
ROA not before: Mon 01 Jan 2024 12:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21161
IP address blocks: 193.138.83.0/24 maxlen: 24
185.195.180.0/22 maxlen: 22
194.110.196.0/24 maxlen: 24
178.249.84.0/22 maxlen: 22
178.249.80.0/22 maxlen: 22
194.121.11.0/24 maxlen: 24
2a02:2198::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:55:a8:11:d6:e2:bb:1f:35:61:1f:3d:af:a0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Validity
Not Before: Jan 1 12:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1035140224c3ef1c1d6e2b463a3248da4f6cd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:33:6d:77:ac:13:c8:ce:e3:cd:6b:9a:37:
95:48:41:b1:98:b2:3d:e0:74:47:93:52:0a:52:fc:
57:e8:5a:10:48:5e:81:8c:78:1d:4b:98:81:eb:bf:
99:76:81:b2:40:6d:33:56:1f:33:a6:8d:5c:28:de:
5d:8e:26:b1:6b:b8:58:94:9b:d1:93:d6:b7:be:82:
94:5e:73:1d:5d:06:75:9f:75:5c:31:30:fa:29:f9:
d2:3e:6a:73:6b:05:93:80:d5:b6:ee:02:c2:eb:bc:
db:54:03:d2:33:40:e5:64:db:83:6c:ef:db:ad:10:
c5:a1:75:63:aa:1e:97:9a:2a:db:2b:22:25:03:dd:
1e:1d:51:0a:3e:25:b0:b2:6b:70:c3:bf:8a:fe:01:
6b:c8:ff:28:23:3d:a5:fd:d5:86:44:c5:d9:ea:8d:
6f:55:c5:91:53:bb:9c:8d:d4:2c:7a:ac:a8:85:88:
f5:5c:06:84:73:22:c9:77:d7:5d:5b:83:eb:94:75:
53:26:b3:ac:fb:ae:41:5a:ba:74:f4:fc:86:46:cc:
64:2d:87:31:8a:54:ce:6d:b1:87:2b:f2:99:2d:6a:
8c:f6:4a:4f:2a:0a:0d:98:69:f5:df:a0:7e:a9:2a:
ab:ae:a2:2c:56:f3:91:7a:24:28:1a:be:d3:5b:30:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:03:51:40:22:4C:3E:F1:C1:D6:E2:B4:63:A3:24:8D:A4:F6:CD:58
X509v3 Authority Key Identifier:
keyid:3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/sQNRQCJMPvHB1uK0Y6MkjaT2zVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.80.0/21
185.195.180.0/22
193.138.83.0/24
194.110.196.0/24
194.121.11.0/24
IPv6:
2a02:2198::/32
Signature Algorithm: sha256WithRSAEncryption
38:1c:1c:a4:0e:c3:47:f4:df:76:df:17:aa:7f:91:78:d1:16:
9f:42:87:0b:ce:f0:c3:73:2a:bd:dd:0a:14:5e:5d:34:4a:3f:
f8:2f:5c:87:70:c9:69:01:c4:2d:f4:a8:ad:d1:1a:4d:31:ca:
e2:44:e6:a0:28:ba:3e:f0:62:21:53:da:ee:43:5a:6c:e8:02:
e2:85:ac:6e:84:11:ee:56:ec:ae:d1:7e:60:31:41:34:c0:d5:
3d:2f:c8:97:2d:ce:7e:7f:27:ac:6d:cd:d8:43:02:2d:b7:e8:
e6:14:2f:af:ba:8c:4f:0c:4e:74:4b:d4:41:40:32:d1:ae:28:
f3:70:e1:7a:db:a8:d8:09:53:5f:fa:a4:a7:8a:ba:db:e5:0c:
f9:6c:34:11:a8:d4:94:6c:9f:54:e2:4d:07:4e:9f:7f:6b:e4:
4e:9e:40:de:a3:42:0c:54:56:eb:8b:16:9d:19:75:06:6b:92:
5d:e8:4a:16:da:60:32:b7:ec:12:ab:9f:3a:08:98:e0:b2:d3:
26:9d:47:62:bc:7a:d2:53:1e:9a:d5:52:c4:56:4f:7d:61:1c:
ea:22:68:47:62:83:34:ff:c2:3b:1d:cd:95:6c:d7:c5:13:3f:
32:a7:05:eb:ff:08:33:1b:96:7e:78:a5:99:7a:58:d4:04:53:
a7:72:ed:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:37:49 2024 by rpki-client on console-ams.rpki-client.org