Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/qTz8o5q6RHvrllZV0ZRds49dgYY.roa
File: qTz8o5q6RHvrllZV0ZRds49dgYY.roa (raw, json)
Hash identifier: TQXvuCy7cN+IOzB/rtqVP1gfd7HbrzoS2YS1T+aCETA=
Subject key identifier: A9:3C:FC:A3:9A:BA:44:7B:EB:96:56:55:D1:94:5D:B3:8F:5D:81:86
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802C8AAADF92EBCF42D9C0A8843C452
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/qTz8o5q6RHvrllZV0ZRds49dgYY.roa
Signing time: Tue 02 Jan 2024 02:31:14 +0000
ROA not before: Tue 02 Jan 2024 02:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44277
IP address blocks: 93.118.39.0/24 maxlen: 24
89.43.61.0/24 maxlen: 24
85.204.23.0/24 maxlen: 24
86.106.99.0/24 maxlen: 24
188.240.198.0/23 maxlen: 23
89.35.115.0/24 maxlen: 24
188.214.226.0/24 maxlen: 24
188.241.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:c8:aa:ad:f9:2e:bc:f4:2d:9c:0a:88:43:c4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a93cfca39aba447beb965655d1945db38f5d8186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:0f:d2:56:e5:8d:fc:00:13:04:1e:06:e6:
59:f0:64:28:1e:e2:02:74:59:5f:e5:e3:8c:07:13:
6b:f8:79:34:f6:f9:86:0b:a1:55:00:01:d5:16:0b:
5a:4f:7d:c1:1f:92:7b:15:69:c4:7b:0c:f8:a2:e0:
f2:25:92:2d:50:58:13:d2:5f:00:f1:a1:f9:08:f6:
e5:83:3c:1a:97:3a:41:71:ad:dc:7c:95:5f:9e:5b:
e7:25:68:09:82:3f:57:a3:c0:55:82:f0:84:ac:a1:
83:bf:27:58:f5:be:c6:9f:ae:e0:c2:0a:35:75:f6:
15:fd:12:e9:4b:22:fd:17:7b:5f:8d:7d:55:38:85:
e1:89:70:6e:c4:95:c0:8f:8e:02:60:91:ae:c9:b8:
9b:b6:43:d6:a8:22:ff:8e:00:9e:cc:d0:18:1f:1e:
bc:69:3a:e0:ac:bd:68:c2:64:98:7d:b8:22:2e:ef:
8d:94:01:d4:bc:fc:91:f1:3b:c1:81:15:e3:dd:a3:
54:9c:38:36:97:16:fc:9f:4f:d1:8b:16:6a:4d:ef:
df:05:e1:7a:3e:3e:83:c1:3d:2f:1d:44:9d:65:cd:
bb:71:47:7f:16:e0:2a:71:fd:12:6f:f0:3c:a5:b4:
4f:94:0b:c7:e2:7c:c6:12:b8:27:5c:37:e3:4a:cd:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3C:FC:A3:9A:BA:44:7B:EB:96:56:55:D1:94:5D:B3:8F:5D:81:86
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/qTz8o5q6RHvrllZV0ZRds49dgYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.23.0/24
86.106.99.0/24
89.35.115.0/24
89.43.61.0/24
93.118.39.0/24
188.214.226.0/24
188.240.198.0/23
188.241.108.0/24
Signature Algorithm: sha256WithRSAEncryption
55:1c:54:7f:68:70:a9:f2:06:37:bf:53:0c:79:59:7c:9e:91:
38:5e:a1:4a:65:56:d5:bc:99:99:a7:b1:37:64:d1:f9:35:48:
04:80:1d:d1:02:cd:77:3e:62:33:d0:b4:e9:5b:8a:4a:53:d8:
ea:26:a3:88:62:aa:c9:3d:87:e1:50:81:9b:5a:1a:53:0c:e0:
3e:fd:99:a4:36:bb:ea:b7:c1:9e:10:76:40:3f:76:8c:65:7b:
c4:90:57:a0:5b:ab:a8:61:98:f0:d5:af:01:cb:01:23:dd:e8:
aa:c1:f1:22:68:01:19:6e:4b:ef:4f:96:62:7a:e0:33:0b:66:
b0:d6:8c:ef:48:9c:c2:18:35:90:05:38:6d:8d:5a:d4:dc:f9:
c2:ec:b1:53:72:c2:5e:62:58:5e:e2:4d:c2:78:1d:f5:2f:57:
e8:6b:a3:16:58:92:55:b4:54:57:fe:b4:90:7c:9d:41:b3:85:
ec:c6:89:87:8d:ea:ab:e2:f0:c8:5f:f6:96:74:57:b0:ec:56:
18:f7:95:4d:b7:b2:ce:3a:ca:56:13:88:e4:1c:0d:4c:9c:3c:
d3:20:3c:76:25:7c:f8:3b:be:fb:e3:6a:e7:40:48:da:0b:f2:
4a:02:b2:e1:82:94:d1:cb:41:d5:29:0e:19:33:86:46:16:f4:
ac:00:21:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:19 2024 by rpki-client on console-fra.rpki-client.org