Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/qUPiWYBxMhrVDhExyWktSo_ymro.roa
File: qUPiWYBxMhrVDhExyWktSo_ymro.roa (raw, json)
Hash identifier: H3xvI4Ba70FwGz8pPDt4cQ2EVQ1UgJ0CZGl5tpUvOlY=
Subject key identifier: A9:43:E2:59:80:71:32:1A:D5:0E:11:31:C9:69:2D:4A:8F:F2:9A:BA
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01926831D354E6923DA424A35A71522998DD
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/qUPiWYBxMhrVDhExyWktSo_ymro.roa
Signing time: Mon 07 Oct 2024 18:15:48 +0000
ROA not before: Mon 07 Oct 2024 18:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50129
IP address blocks: 185.104.153.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:68:31:d3:54:e6:92:3d:a4:24:a3:5a:71:52:29:98:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Oct 7 18:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a943e2598071321ad50e1131c9692d4a8ff29aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:38:93:4d:ed:fa:22:9d:bd:1f:f6:48:19:
15:d6:0f:e2:c0:cc:15:e1:a9:af:0e:6e:30:b8:91:
09:73:03:e4:bb:ea:29:bb:c7:70:36:c5:3f:93:7e:
08:04:b4:d1:10:3d:0d:00:47:4e:05:44:e1:50:33:
90:40:3d:23:9a:fd:82:ff:9c:d3:da:b6:a8:c2:23:
78:cc:03:0d:7a:0d:c3:91:e0:e5:6b:00:45:9a:0a:
8e:4f:95:cc:95:d4:3f:d6:7e:cf:55:f9:fb:95:f6:
63:cf:f2:67:17:92:80:c3:13:1e:42:9f:c6:ef:06:
b4:ed:1b:e7:06:a2:2d:55:9a:4a:02:c1:4a:52:b1:
6c:2f:49:88:eb:14:1c:de:84:9d:42:38:ae:81:83:
03:9c:1c:49:61:f7:e3:65:66:a5:0e:50:b5:02:01:
ae:44:a0:f5:48:b1:1c:3a:d1:bc:08:df:fa:7a:11:
a3:6b:e0:98:3f:81:0d:19:a6:98:07:b0:41:b8:02:
9a:10:2c:3d:7f:17:63:1c:90:63:ec:33:e1:51:56:
f6:23:e1:4c:61:fd:06:f4:3c:c9:0c:33:24:a6:bd:
bc:db:a0:96:ae:30:71:3f:19:6f:22:4d:79:d9:82:
44:9d:9e:fc:33:7a:46:25:38:02:63:2b:f4:8b:e7:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:43:E2:59:80:71:32:1A:D5:0E:11:31:C9:69:2D:4A:8F:F2:9A:BA
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/qUPiWYBxMhrVDhExyWktSo_ymro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.153.0/24
185.122.186.0/23
Signature Algorithm: sha256WithRSAEncryption
46:ca:83:a6:21:3e:8d:e0:9a:17:ba:d0:e9:d5:e2:86:1c:47:
50:91:df:ba:4d:3b:42:e5:08:92:fb:b1:60:8d:ed:4e:d2:db:
e4:7d:02:5d:43:c1:5d:d5:be:1f:66:c3:ec:4f:e6:1b:49:fb:
6e:d1:81:6c:c1:67:50:f1:7c:1b:e4:fe:bd:c0:b2:dc:c1:15:
43:33:89:65:92:da:29:1c:e4:b7:a5:9c:a6:f0:71:87:66:c6:
a2:1c:5c:38:ea:0c:1d:75:2e:0f:a1:2c:48:94:84:d6:0f:77:
f1:0c:ed:62:83:b2:7f:23:22:49:eb:cd:a2:bf:e0:8b:a6:69:
e5:e6:0e:a5:60:fa:33:29:cb:5b:5e:4d:ad:cf:86:6c:82:65:
65:2e:df:28:bf:29:80:2e:20:4e:43:e2:44:07:9c:f5:fe:ae:
bf:7b:e9:bb:39:b7:62:61:2f:79:2f:15:63:76:c0:6c:81:a3:
12:de:8b:0f:93:7e:d0:b1:8b:f7:24:c8:65:30:ef:3d:2c:38:
af:2a:32:c5:42:cd:fa:58:64:e2:4b:34:d4:39:66:01:0d:e4:
82:32:bc:32:a7:13:6d:b6:3e:43:07:8b:29:f1:f7:30:02:ce:
fb:80:92:27:93:f9:b9:c9:ee:37:d7:5f:cd:95:51:5e:6a:8a:
94:ff:7f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:23:26 2024 by rpki-client on console-fra.rpki-client.org