Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/qT9ZHUsdvNDY6AhehIeolu2i56Q.roa
File: qT9ZHUsdvNDY6AhehIeolu2i56Q.roa (raw, json)
Hash identifier: fr/udsajG/LLi4nVStLf/Q9khi42dVNvjizjsUc6t5c=
Subject key identifier: A9:3F:59:1D:4B:1D:BC:D0:D8:E8:08:5E:84:87:A8:96:ED:A2:E7:A4
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 018F146E10D5DE461FCA2D6664EFB379C783
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/qT9ZHUsdvNDY6AhehIeolu2i56Q.roa
Signing time: Thu 25 Apr 2024 08:45:08 +0000
ROA not before: Thu 25 Apr 2024 08:45:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8860
IP address blocks: 79.98.104.0/21 maxlen: 24
185.52.204.0/22 maxlen: 24
185.55.228.0/22 maxlen: 24
185.199.37.0/24 maxlen: 24
185.199.38.0/24 maxlen: 24
185.228.24.0/22 maxlen: 24
185.239.124.0/24 maxlen: 24
185.239.126.0/24 maxlen: 24
185.239.127.0/24 maxlen: 24
194.145.63.0/24 maxlen: 24
195.189.80.0/22 maxlen: 24
2a01:b6a0::/32 maxlen: 32
2a02:80e0::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:6e:10:d5:de:46:1f:ca:2d:66:64:ef:b3:79:c7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Apr 25 08:45:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a93f591d4b1dbcd0d8e8085e8487a896eda2e7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:d5:5b:05:f8:6b:dc:e3:de:ed:b8:cb:db:
44:3d:e8:18:8a:8c:7c:96:b7:f2:fb:90:92:56:35:
26:da:b5:99:69:62:a9:31:dd:db:f5:31:99:5c:9c:
18:77:5d:29:51:22:65:4a:7c:f8:b1:e5:53:da:4f:
81:f3:71:79:ca:59:c0:29:2e:5f:fc:12:42:27:85:
3b:d6:d9:2a:c6:05:ea:6a:ae:9c:d1:48:b8:2f:0b:
6a:29:ef:5c:c0:a8:82:92:fb:9e:71:1d:51:cb:6c:
5d:96:ff:35:11:96:5a:1f:79:ac:4c:9c:ef:87:d1:
9a:4f:bb:9d:44:9e:ae:2b:f8:83:6e:51:f5:74:6b:
e2:9b:45:7a:5e:d8:6f:e1:88:67:38:86:ea:c7:50:
b9:e9:f3:08:7b:fa:4b:c4:a2:0c:23:f9:65:15:73:
23:06:71:3c:d4:f1:e6:bc:a4:5f:69:58:eb:73:71:
35:c3:77:c4:b5:f8:c1:fd:16:66:8f:b8:ea:72:42:
f1:e5:9b:88:e0:74:e5:74:e8:db:2c:4e:10:39:35:
f2:63:01:86:41:e7:55:be:bf:b0:40:87:e8:17:87:
61:9d:7e:02:36:4f:49:ba:ea:ad:1e:10:3f:e3:e7:
4c:72:e1:ed:e9:da:e0:3e:0e:da:53:f6:17:60:56:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3F:59:1D:4B:1D:BC:D0:D8:E8:08:5E:84:87:A8:96:ED:A2:E7:A4
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/qT9ZHUsdvNDY6AhehIeolu2i56Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.104.0/21
185.52.204.0/22
185.55.228.0/22
185.199.37.0-185.199.38.255
185.228.24.0/22
185.239.124.0/24
185.239.126.0/23
194.145.63.0/24
195.189.80.0/22
IPv6:
2a01:b6a0::/32
2a02:80e0::/30
Signature Algorithm: sha256WithRSAEncryption
75:83:de:00:0b:1c:01:a9:5a:5e:29:25:a1:72:bc:3a:16:0b:
a0:31:2f:3b:4d:dc:87:41:54:ec:cf:82:05:6f:a1:2a:35:c1:
e7:96:dc:26:b6:42:1f:4b:f6:bb:58:a4:f6:b1:ad:56:e0:2c:
b4:ce:c0:46:df:a6:2a:1f:13:20:ec:04:b8:e9:83:91:55:d5:
7f:67:e7:8c:c3:82:b4:97:f4:29:e4:76:26:e5:b8:25:3e:44:
41:d6:69:fd:a8:b9:45:97:7f:bb:06:14:f3:e9:d6:d4:13:8d:
0f:43:85:47:75:5d:06:f8:fc:da:b2:e4:0d:64:bf:1c:4b:a9:
95:54:e6:56:5e:16:8f:3c:c4:8a:04:37:8a:a8:77:ef:e0:6d:
c1:63:77:3e:8c:73:6a:54:c3:06:6b:d4:5c:62:b7:60:e6:b1:
30:b6:f2:9a:c2:8c:04:d8:91:97:96:eb:b4:e6:eb:4c:e9:32:
14:9d:a9:ba:6c:22:bd:ce:85:00:e0:f3:20:9e:1d:24:fe:86:
29:da:29:8a:94:01:cc:5a:1b:b6:76:3f:da:9f:6b:53:4f:f4:
4e:37:30:45:d3:3a:3f:1a:1b:dc:85:8d:50:cb:c9:ec:ef:1b:
56:b8:3f:b8:9a:b9:30:b0:94:f9:b6:09:59:35:33:f5:2f:2f:
35:1e:d9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:58:42 2024 by rpki-client on console-ams.rpki-client.org