Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/RBQ9MooZ3uLdaSdFo8ZLS8WxqBY.roa
File: RBQ9MooZ3uLdaSdFo8ZLS8WxqBY.roa (raw, json)
Hash identifier: hhh/LUJEjxbXWhqOnDhkYvA8lBls3nVgGCYXrKnFbIM=
Subject key identifier: 44:14:3D:32:8A:19:DE:E2:DD:69:27:45:A3:C6:4B:4B:C5:B1:A8:16
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018EAAE6767285925232830249B6F7AE9481
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/RBQ9MooZ3uLdaSdFo8ZLS8WxqBY.roa
Signing time: Thu 04 Apr 2024 20:56:54 +0000
ROA not before: Thu 04 Apr 2024 20:56:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397563
IP address blocks: 80.253.252.0/22 maxlen: 24
80.253.252.0/23 maxlen: 24
80.253.254.0/23 maxlen: 24
91.151.80.0/24 maxlen: 24
91.151.82.0/24 maxlen: 24
91.151.91.0/24 maxlen: 24
91.151.92.0/24 maxlen: 24
213.142.128.0/24 maxlen: 24
213.142.129.0/24 maxlen: 24
213.142.130.0/24 maxlen: 24
213.142.131.0/24 maxlen: 24
213.142.136.0/24 maxlen: 24
213.142.137.0/24 maxlen: 24
213.142.142.0/24 maxlen: 32
213.142.144.0/24 maxlen: 32
213.142.145.0/24 maxlen: 32
213.142.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:aa:e6:76:72:85:92:52:32:83:02:49:b6:f7:ae:94:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Apr 4 20:56:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44143d328a19dee2dd692745a3c64b4bc5b1a816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:05:b7:84:c6:bc:d1:3f:51:c1:65:eb:76:b5:
82:52:4b:51:5f:b2:45:de:f7:2b:64:20:49:ed:86:
41:aa:e6:b5:7c:66:ea:55:40:79:8b:ec:e0:ad:b6:
e5:5f:63:60:1b:eb:5c:79:9b:16:01:60:ad:41:bf:
66:14:a2:6b:e6:6a:76:1e:29:54:88:b1:82:f9:98:
51:99:fb:c9:e1:bc:de:bf:26:1c:1e:2a:a0:0a:e7:
5e:47:4a:af:a1:13:ad:a9:9e:c7:f9:a8:52:cd:8f:
ba:c0:ee:11:60:74:f9:03:84:91:6f:d7:e9:d7:af:
a8:be:be:64:49:da:2d:ea:78:38:d0:31:16:a4:5a:
80:1b:5d:85:56:ac:c7:07:d0:4b:d2:9a:f5:f1:e9:
5c:12:0d:0f:6a:d8:da:a3:a6:c9:21:d8:86:cc:3c:
5b:c8:02:42:10:08:ac:64:90:5d:2d:23:c9:73:97:
f0:bf:da:f3:6f:b8:42:a7:83:d0:af:2a:50:68:e8:
6f:cf:25:7b:95:72:59:a6:2e:18:86:77:83:5e:b8:
70:1a:50:3f:45:da:f1:53:25:32:df:fc:36:66:f4:
d7:d5:5c:a5:a8:01:23:8a:24:be:2f:8f:cd:b0:d0:
56:04:b9:5c:34:11:e2:0e:d2:a7:4c:a9:46:f7:a5:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:14:3D:32:8A:19:DE:E2:DD:69:27:45:A3:C6:4B:4B:C5:B1:A8:16
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/RBQ9MooZ3uLdaSdFo8ZLS8WxqBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.252.0/22
91.151.80.0/24
91.151.82.0/24
91.151.91.0-91.151.92.255
213.142.128.0/22
213.142.136.0/23
213.142.142.0/24
213.142.144.0/23
213.142.152.0/23
Signature Algorithm: sha256WithRSAEncryption
47:c0:d7:96:f6:6b:95:fc:89:4e:d8:f5:d8:49:74:e3:9f:bb:
86:c7:ca:10:b7:83:55:37:ac:16:3d:d8:06:65:8b:95:a0:7f:
2e:ca:42:f8:05:74:39:96:97:c7:50:6a:10:cf:67:45:60:5b:
fd:04:cc:06:d1:51:c0:22:69:89:d3:2c:d6:b1:12:42:d7:0d:
55:45:fe:07:fb:41:c6:31:71:39:ee:bb:a5:80:1e:82:90:0c:
c2:f6:23:2d:47:09:b1:c0:23:94:c6:ac:75:d5:4f:36:9e:13:
78:be:c4:4d:d8:4b:d8:2a:e6:62:72:41:c8:1a:52:5b:95:44:
ae:38:6b:92:52:c9:7a:a2:8a:91:25:32:98:f9:d9:3c:23:1b:
99:4e:ce:3e:06:bd:33:b9:00:58:4f:27:12:59:3f:60:73:94:
7c:3e:ae:c2:86:4f:6b:71:49:85:37:89:92:1b:5a:5f:6d:fe:
2b:d3:b3:43:44:cc:75:99:dc:6b:a2:7f:7a:e6:ff:50:fd:13:
67:07:bb:cb:24:dc:05:65:c9:3e:53:6d:6f:3a:60:bd:fa:78:
7c:10:3a:35:77:4e:30:95:d4:ad:be:e4:7e:57:6a:9b:ce:f3:
00:46:7a:7d:5f:a0:47:e1:99:be:7f:a1:1c:35:4c:f5:ba:e6:
62:92:54:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:51:40 2024 by rpki-client on console-ams.rpki-client.org