Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lqceRQvyi57RyvJH7_cp_QWIIeU.roa
File: lqceRQvyi57RyvJH7_cp_QWIIeU.roa (raw, json)
Hash identifier: S7rFIWlqBQ4DcgJZsWD4TM3uRk/VRCqak9do/gyygPQ=
Subject key identifier: 96:A7:1E:45:0B:F2:8B:9E:D1:CA:F2:47:EF:F7:29:FD:05:88:21:E5
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018ED1CEAF2681BA7D951C37736DEB468E83
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lqceRQvyi57RyvJH7_cp_QWIIeU.roa
Signing time: Fri 12 Apr 2024 10:16:07 +0000
ROA not before: Fri 12 Apr 2024 10:16:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 185.194.177.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:ce:af:26:81:ba:7d:95:1c:37:73:6d:eb:46:8e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 12 10:16:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96a71e450bf28b9ed1caf247eff729fd058821e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:47:8a:43:63:e1:0d:fe:78:fd:1a:69:75:
4b:dd:ea:a6:e3:4f:64:97:18:fb:36:61:6c:a5:e9:
5f:9e:18:b2:4d:48:9d:9b:7e:6c:0e:a1:e1:a5:5a:
1f:c9:f1:dc:bd:dd:e0:5d:82:06:6e:ca:0a:53:77:
27:57:3c:40:c7:3c:dd:c9:db:cb:94:b6:ce:5a:57:
fc:c0:4e:4a:83:45:85:c8:02:be:ee:10:ad:dd:18:
5f:c4:ec:b4:de:b7:65:7a:3a:84:8f:68:41:e6:53:
07:93:10:75:f1:6c:8b:5e:d9:fb:df:0e:30:9b:15:
b0:d0:40:8f:3e:be:17:6c:0c:20:eb:c9:8f:4e:78:
a9:24:6a:a0:9c:49:8b:e7:4d:09:0f:eb:df:52:e9:
7c:6f:7b:55:31:77:38:a8:61:da:e9:e0:a6:74:58:
4c:0a:66:60:a1:bf:00:6d:7f:b2:47:c4:ad:11:83:
11:bf:dd:b4:63:e9:a8:c2:64:cd:69:b3:9c:f8:23:
c4:81:a2:b7:ff:2e:c1:a3:d4:23:d3:98:e9:d9:b6:
e1:9e:33:03:d4:02:2b:21:2c:7c:61:b3:d5:6c:e0:
95:31:38:d5:6d:35:ca:c8:8a:d5:ed:7c:e6:08:2e:
22:f7:6b:ae:bf:65:5b:f7:d0:62:6a:73:46:fc:c4:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A7:1E:45:0B:F2:8B:9E:D1:CA:F2:47:EF:F7:29:FD:05:88:21:E5
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lqceRQvyi57RyvJH7_cp_QWIIeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.177.0/24
185.209.73.0/24
185.210.235.0/24
185.218.20.0/24
185.222.29.0/24
185.246.112.0/24
193.58.146.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a0:23:76:32:f3:b8:9c:4a:2c:80:61:28:d4:f5:fb:b1:3f:
59:04:58:2a:be:24:6f:23:70:9f:b7:7a:d7:70:b1:c7:35:24:
59:a1:24:f7:53:b9:dd:1e:7c:cf:34:0a:fe:21:39:3e:d6:81:
d3:25:55:3d:4f:c4:77:61:31:85:36:f4:2d:60:ff:d4:a7:94:
e8:cb:54:9f:d3:a3:25:cf:11:aa:38:4e:ee:32:4d:0c:9d:11:
b8:b9:95:86:16:bb:82:dd:42:4e:a3:9b:fc:06:14:30:6e:77:
bf:d0:8a:56:31:3b:4f:5a:4f:71:68:cc:4b:33:1e:65:59:fe:
df:1d:b5:a5:2e:bc:ea:63:bb:77:7a:bb:cc:64:63:ec:f5:87:
49:49:8e:34:e1:71:c2:d5:a6:d1:0d:c8:e4:a3:39:ab:f6:e9:
d6:ed:f7:ab:fa:bf:ce:46:80:ff:c8:b6:c3:df:51:fb:42:c7:
7a:72:cd:af:fb:f6:d4:c7:42:a5:07:d8:3d:d5:0a:7a:b9:6e:
8a:9f:37:97:67:2b:d4:3d:ab:ad:46:4f:14:f2:2f:13:b2:bf:
38:b0:1a:96:32:2c:6e:c5:99:ee:7b:5f:3f:4d:c0:ce:ba:3a:
93:2e:03:6c:2e:d1:2f:dd:3b:a2:67:2e:0d:d9:df:85:01:3c:
ef:3b:74:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:08:13 2024 by rpki-client on console-ams.rpki-client.org