Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/wqKkssq0B1-DEc8blOhwMHlBOEk.roa
File: wqKkssq0B1-DEc8blOhwMHlBOEk.roa (raw, json)
Hash identifier: DkJ65eV5QhNm3H/JhYO+jKTt5+nduNuRYOjIUJv0BPM=
Subject key identifier: C2:A2:A4:B2:CA:B4:07:5F:83:11:CF:1B:94:E8:70:30:79:41:38:49
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 018CC6B8BE55A74FD12EEB6A4C29AB2BCC01
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/wqKkssq0B1-DEc8blOhwMHlBOEk.roa
Signing time: Mon 01 Jan 2024 20:30:45 +0000
ROA not before: Mon 01 Jan 2024 20:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212882
IP address blocks: 95.130.188.0/22 maxlen: 22
91.237.218.0/24 maxlen: 24
185.14.110.0/24 maxlen: 24
185.14.111.0/24 maxlen: 24
185.14.108.0/24 maxlen: 24
185.14.109.0/24 maxlen: 24
95.130.184.0/22 maxlen: 23
95.130.186.0/23 maxlen: 23
2a03:ac40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:be:55:a7:4f:d1:2e:eb:6a:4c:29:ab:2b:cc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: Jan 1 20:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2a2a4b2cab4075f8311cf1b94e8703079413849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:2a:75:b9:3d:7d:bb:fd:74:e9:66:15:65:
16:86:8f:70:cd:57:f1:fa:8e:13:2c:1b:e6:c5:83:
43:eb:db:af:65:3c:06:cb:af:6a:d6:d6:7e:a5:45:
9e:b9:1c:4b:06:f5:32:b3:0d:fb:96:c4:3e:99:61:
bc:11:f3:44:bf:d4:e0:dc:aa:56:f6:89:7e:f2:40:
1b:40:30:51:25:16:6f:58:c6:a2:a4:b0:12:f8:a5:
ee:46:1b:34:c9:72:91:8a:32:13:78:9f:14:95:bf:
6b:19:ce:12:a0:3f:7c:8a:45:3a:10:06:18:6b:d0:
4e:91:f8:4a:9c:89:f7:87:8d:0f:96:a0:f2:83:b1:
bf:f7:7b:7c:fc:fe:93:7e:3a:96:8b:84:47:28:7d:
04:1e:9c:a9:58:98:77:30:ac:47:02:c4:cc:f9:a8:
b4:2f:29:b1:c7:3a:f9:b1:f1:13:bf:6a:94:a7:55:
21:32:84:9a:74:45:f9:9e:44:61:11:a1:f1:fe:00:
cd:b0:6b:23:ce:f9:e4:cd:1b:f2:22:6c:55:69:7e:
02:f8:f6:52:5a:42:52:e8:be:e1:57:37:17:9f:1b:
e8:f0:3d:1b:8a:da:69:e9:39:b3:3d:e9:f3:31:44:
f5:4b:f8:3e:2c:3b:52:05:67:de:96:ff:61:76:cb:
a7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A2:A4:B2:CA:B4:07:5F:83:11:CF:1B:94:E8:70:30:79:41:38:49
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/wqKkssq0B1-DEc8blOhwMHlBOEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.218.0/24
95.130.184.0/21
185.14.108.0/22
IPv6:
2a03:ac40:1::/48
Signature Algorithm: sha256WithRSAEncryption
2d:90:5c:bc:e7:67:38:aa:f2:14:2e:bb:ea:b4:21:86:90:cd:
5c:08:78:44:6a:da:99:b5:e6:07:b3:14:be:13:0a:3a:e2:6e:
ff:57:28:d2:5f:6e:06:be:6b:84:82:5a:b8:81:aa:15:02:44:
bb:7b:04:1c:6a:f9:74:92:c7:b8:11:f7:05:d4:ef:4c:7f:7c:
7a:3d:78:6d:ba:4a:06:29:52:0d:50:2c:fd:22:76:ae:7c:61:
ea:14:b6:1f:9a:7a:19:fd:eb:4e:83:25:20:96:71:9c:12:93:
62:6a:ce:9f:bc:7e:7c:83:e0:e1:00:e9:1b:3a:9c:b5:73:ee:
a7:80:48:22:b5:5f:76:be:22:b9:03:10:ff:aa:b8:d8:52:cc:
15:bb:b2:25:d3:21:0e:8e:3b:9e:8e:4d:87:eb:29:15:7a:79:
f1:c0:1f:0c:01:0b:7d:53:e3:4d:d7:6d:30:c0:eb:68:9c:5e:
61:65:f8:10:2d:f2:1b:fb:9d:bd:88:2d:f5:9c:2e:fd:18:34:
8e:85:61:4d:4d:9c:91:8f:99:e1:4a:f1:93:7f:8a:dd:a3:a3:
78:79:1f:d3:cb:fd:b3:5c:79:b2:4e:5e:0b:e5:a0:99:da:49:
2b:80:fd:25:ba:67:44:d5:2b:f3:f5:26:32:c4:2c:37:44:0a:
e0:c9:ed:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:46:20 2024 by rpki-client on console-fra.rpki-client.org