Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/ZQpq2AGUvJTb5VR5KHaDG-IWFIY.roa
File: ZQpq2AGUvJTb5VR5KHaDG-IWFIY.roa (raw, json)
Hash identifier: zJsG9JzTuhIOnURP5WuUUrYKI5S6BY+MeJGEVRBeL90=
Subject key identifier: 65:0A:6A:D8:01:94:BC:94:DB:E5:54:79:28:76:83:1B:E2:16:14:86
Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial: 018E7B3A586FBFC7C714A30516228AA1CFF7
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/ZQpq2AGUvJTb5VR5KHaDG-IWFIY.roa
Signing time: Tue 26 Mar 2024 14:46:45 +0000
ROA not before: Tue 26 Mar 2024 14:46:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47217
IP address blocks: 5.11.32.0/21 maxlen: 24
46.21.176.0/20 maxlen: 24
77.244.176.0/20 maxlen: 24
80.244.112.0/20 maxlen: 24
91.212.241.0/24 maxlen: 24
94.102.128.0/20 maxlen: 24
94.185.72.0/21 maxlen: 24
109.233.216.0/21 maxlen: 24
178.251.72.0/21 maxlen: 24
185.4.140.0/22 maxlen: 24
185.200.88.0/22 maxlen: 24
193.41.235.0/24 maxlen: 24
193.169.56.0/23 maxlen: 24
194.69.192.0/24 maxlen: 24
194.69.193.0/24 maxlen: 24
2a02:670::/32 maxlen: 56
2a0a:27c0::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:3a:58:6f:bf:c7:c7:14:a3:05:16:22:8a:a1:cf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Validity
Not Before: Mar 26 14:46:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=650a6ad80194bc94dbe554792876831be2161486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:60:77:9c:08:d8:ea:57:6e:a9:5c:38:b8:
97:8e:2b:d5:e2:42:3a:7b:8c:73:40:1c:d2:a9:13:
6e:2b:7b:3d:8b:bf:8a:00:87:87:d7:49:51:aa:e5:
3b:df:86:70:8d:3e:38:bf:85:3a:b6:04:ba:b1:4d:
0b:8c:f4:42:a1:d3:98:c6:31:eb:49:a8:34:6a:15:
a3:f4:fe:7b:18:46:8e:21:88:71:b0:2a:16:f8:24:
17:ea:e5:35:05:92:fd:6f:4f:bf:b2:6b:e7:fb:b2:
28:74:41:43:7d:58:3b:64:fe:d6:13:85:f4:50:71:
35:b1:38:61:5e:ae:9f:3b:45:b6:45:59:ed:67:df:
9d:04:da:05:07:7a:f0:69:6a:e4:bd:34:a8:f8:f4:
c8:a8:c3:51:6c:ff:9d:97:a8:e6:8f:5d:ac:a2:1f:
d0:9b:82:d4:0c:7d:33:cf:f1:5e:97:92:1b:7a:75:
a7:ab:d2:17:dc:1a:7a:13:09:a7:e1:52:70:2b:07:
f2:df:d8:a3:72:e5:9f:c4:38:f6:73:a1:f6:9e:58:
97:b9:c9:02:b2:a5:ca:db:8f:8a:f1:82:41:83:3f:
0b:b3:66:d9:96:d3:84:94:fb:9f:07:da:c7:69:59:
33:31:07:15:56:5a:bf:6b:03:0c:0d:56:1a:9b:15:
26:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0A:6A:D8:01:94:BC:94:DB:E5:54:79:28:76:83:1B:E2:16:14:86
X509v3 Authority Key Identifier:
keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/ZQpq2AGUvJTb5VR5KHaDG-IWFIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.32.0/21
46.21.176.0/20
77.244.176.0/20
80.244.112.0/20
91.212.241.0/24
94.102.128.0/20
94.185.72.0/21
109.233.216.0/21
178.251.72.0/21
185.4.140.0/22
185.200.88.0/22
193.41.235.0/24
193.169.56.0/23
194.69.192.0/23
IPv6:
2a02:670::/32
2a0a:27c0::/32
Signature Algorithm: sha256WithRSAEncryption
37:dd:cd:8c:3c:c1:d6:fa:d3:f4:b4:54:bf:2d:50:dd:bc:8b:
5c:87:b5:d7:13:0f:15:03:05:3e:04:42:eb:26:8b:62:27:0b:
73:5a:4f:d3:2f:27:ce:d2:34:13:87:fe:06:11:39:b8:23:6c:
c2:6e:f2:3e:ef:0d:99:86:dd:5b:13:92:07:f5:50:3f:6e:75:
27:50:70:ce:05:9b:6a:7f:94:ca:4a:f8:57:5e:23:8b:33:2b:
16:51:5f:38:a0:fb:65:05:e0:b9:7f:69:2e:71:90:84:f6:e9:
a9:35:61:35:cf:b2:04:e9:ce:7f:4b:b9:12:9d:2a:a9:f7:18:
cd:9d:59:e2:22:5b:a7:53:41:35:6c:c2:2e:da:f7:43:65:78:
cf:68:d5:d8:6f:5a:02:cd:46:ca:1a:c9:d6:87:9e:93:19:b5:
1a:99:b2:47:1d:fe:db:a7:c2:84:62:ec:af:a8:4f:1d:ea:ac:
3c:88:af:ef:d7:5d:39:d5:5f:b7:25:f9:ab:e9:09:fb:1d:15:
b5:20:90:4f:7b:1f:0b:7b:09:dd:6e:ff:51:65:84:55:34:6c:
f4:bd:9a:16:e0:c4:b4:5b:79:ff:fa:87:c8:cf:91:3a:ad:eb:
a5:67:43:34:88:cb:0a:a2:da:f6:50:c5:70:8c:3a:64:96:a7:
e5:bb:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:53:39 2024 by rpki-client on console-ams.rpki-client.org