Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/spQpOkkOxds2NfBhBUDVbd7FpG8.roa
File: spQpOkkOxds2NfBhBUDVbd7FpG8.roa (raw, json)
Hash identifier: ODhUZ0jW2Yev4jC4Fr1mLrXYlUjfhvVcqiesYrKxvtA=
Subject key identifier: B2:94:29:3A:49:0E:C5:DB:36:35:F0:61:05:40:D5:6D:DE:C5:A4:6F
Certificate issuer: /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial: 018CC72744CAE17F928E3C8087C2ED017E83
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/spQpOkkOxds2NfBhBUDVbd7FpG8.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29396
IP address blocks: 84.53.64.0/18 maxlen: 24
185.41.144.0/22 maxlen: 24
91.194.8.0/23 maxlen: 24
82.148.192.0/19 maxlen: 24
90.145.0.0/16 maxlen: 24
2a01:5620::/29 maxlen: 48
2a02:120::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:44:ca:e1:7f:92:8e:3c:80:87:c2:ed:01:7e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b294293a490ec5db3635f0610540d56ddec5a46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:fe:92:e8:12:8b:c9:5c:cc:74:0c:6c:49:
08:76:cd:aa:ec:61:e7:b5:a2:b7:2a:28:dd:c9:33:
90:07:21:e1:2e:70:91:98:aa:ea:f1:4d:3f:37:ee:
58:33:58:97:73:68:2d:8f:a1:73:f9:61:9e:1b:4c:
ae:36:4a:e1:5a:bb:cf:36:10:b0:7e:b9:fc:12:f3:
06:94:dc:54:f6:1e:6b:a2:f6:80:7b:93:12:b8:80:
a4:21:b5:f5:11:37:b4:f1:e7:02:45:80:08:e4:a6:
41:b3:68:de:8e:53:92:45:9c:3d:3a:46:30:32:41:
86:c9:49:06:8b:f8:d0:45:a5:02:b2:e7:4a:56:6d:
5a:c3:97:40:2f:71:3b:82:95:75:ed:59:ac:7f:77:
f6:5f:8e:a2:c4:d0:93:f1:3a:3c:3d:e7:16:d9:16:
8c:a1:0f:41:9a:84:0c:e3:0a:b1:6b:60:fb:9d:e4:
58:d6:aa:e9:e8:42:e2:aa:6f:ec:2a:f5:68:e1:ae:
c6:e1:02:28:d7:23:ea:d0:14:08:7c:8d:61:a2:83:
94:85:30:3e:b4:05:78:f2:84:f4:aa:1d:52:5f:05:
4c:74:93:6e:c7:b6:f2:c2:51:63:63:89:70:94:b8:
6a:6e:0a:3a:4a:16:db:4c:28:df:37:41:d1:75:da:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:94:29:3A:49:0E:C5:DB:36:35:F0:61:05:40:D5:6D:DE:C5:A4:6F
X509v3 Authority Key Identifier:
keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/spQpOkkOxds2NfBhBUDVbd7FpG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.148.192.0/19
84.53.64.0/18
90.145.0.0/16
91.194.8.0/23
185.41.144.0/22
IPv6:
2a01:5620::/29
2a02:120::/29
Signature Algorithm: sha256WithRSAEncryption
3f:fa:2f:bf:ee:09:28:c8:24:c3:c2:d4:4a:16:8e:38:5d:1f:
01:f6:8c:e5:90:af:72:61:bf:75:97:f0:48:ab:94:8a:04:2a:
61:6b:3b:04:12:ec:93:34:62:78:3c:e8:09:2c:6b:01:8a:8c:
4c:0b:3b:3c:97:8a:dd:98:d7:23:9d:3e:07:a4:2f:f8:a9:93:
c3:2d:df:84:a8:fe:37:eb:50:b8:5a:02:bc:7d:5a:8c:21:2d:
68:18:dd:fe:3e:a5:79:d4:fd:3c:9e:fb:ae:55:22:3b:c5:ff:
03:34:d5:29:47:ed:02:dd:05:7a:6d:2e:c9:49:48:c3:2b:7e:
70:12:e3:c1:05:61:de:66:6e:1e:c7:2b:52:0e:d0:e4:ae:39:
d8:7b:52:98:8d:04:92:7f:02:7f:34:40:57:14:f7:02:8d:e2:
a5:fe:2e:63:1f:02:30:d1:13:52:57:4d:0e:e7:1c:2e:dd:de:
77:17:bc:97:1a:8e:3e:6f:4a:6a:33:b0:15:31:48:f2:cc:d5:
d0:31:61:3d:83:99:f1:ea:cb:af:fd:7c:e7:9f:6d:a0:12:56:
02:04:71:20:16:03:2e:d0:f1:54:f9:7c:56:e4:1d:35:2f:4e:
90:8a:7a:e1:0f:59:1c:6c:d3:c9:8e:d3:bc:01:1f:aa:c0:06:
7f:aa:ae:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 21:25:31 2024 by rpki-client on console-ams.rpki-client.org