Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/0S_GqoTM0xxnZfxgIohxryGYSk8.roa
File: 0S_GqoTM0xxnZfxgIohxryGYSk8.roa (raw, json)
Hash identifier: sX30L1EG+WULlG1HahLfkRELKuxabDlPmso+87cMQlE=
Subject key identifier: D1:2F:C6:AA:84:CC:D3:1C:67:65:FC:60:22:88:71:AF:21:98:4A:4F
Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial: 018CCA2BD8CD55269CA4918DCF652E9B64DC
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/0S_GqoTM0xxnZfxgIohxryGYSk8.roa
Signing time: Tue 02 Jan 2024 12:35:20 +0000
ROA not before: Tue 02 Jan 2024 12:35:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6776
IP address blocks: 185.150.52.0/22 maxlen: 22
193.247.239.0/24 maxlen: 24
193.247.251.0/24 maxlen: 24
193.247.252.0/23 maxlen: 23
193.135.252.0/24 maxlen: 24
193.135.253.0/24 maxlen: 24
193.135.152.0/23 maxlen: 23
193.135.164.0/24 maxlen: 24
193.135.165.0/24 maxlen: 24
193.247.184.0/23 maxlen: 23
193.247.93.0/24 maxlen: 24
193.247.100.0/24 maxlen: 24
193.247.102.0/24 maxlen: 24
193.247.120.0/22 maxlen: 22
193.247.78.0/23 maxlen: 23
2a00:efa0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:d8:cd:55:26:9c:a4:91:8d:cf:65:2e:9b:64:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
Validity
Not Before: Jan 2 12:35:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d12fc6aa84ccd31c6765fc60228871af21984a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:7c:36:86:82:56:fb:da:c0:42:e3:28:24:
59:60:b8:98:b7:52:bc:da:85:9e:1b:fc:cf:95:fc:
a1:57:fd:94:3d:ea:af:62:26:eb:bb:61:db:41:50:
3d:ad:c5:cb:bf:82:93:05:fc:fa:5b:53:b8:c2:81:
b3:5e:c3:d7:21:1e:89:cc:cb:c2:6b:55:af:26:df:
63:e4:03:09:dc:43:ee:98:8b:3c:a6:94:88:46:44:
be:ad:6d:4a:2f:fc:a5:3d:13:54:47:e1:31:ca:0f:
6c:6b:b3:21:08:26:38:9f:e2:a0:e9:58:f1:85:06:
8b:90:c8:26:8a:6a:e7:80:14:3e:5f:4f:27:7f:4e:
d9:01:58:b8:75:4c:5a:36:9a:42:45:99:85:c0:bc:
44:35:20:94:91:ad:43:56:a2:c7:ef:97:c2:41:c3:
e0:b3:bf:39:6c:c8:97:b4:ed:08:9d:0d:f7:b7:92:
b7:1a:b8:ce:3f:63:37:85:8a:b4:5a:98:83:30:a7:
a7:b8:9c:8e:29:7f:2f:6b:36:b7:9f:84:c4:e8:b9:
54:bd:eb:0c:05:cc:67:6c:8b:24:a9:1e:b8:4c:1a:
ef:ef:a7:41:50:a0:e1:c4:4f:98:47:b0:26:12:11:
5e:65:43:77:98:6c:6a:2f:ca:54:22:68:d8:11:27:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2F:C6:AA:84:CC:D3:1C:67:65:FC:60:22:88:71:AF:21:98:4A:4F
X509v3 Authority Key Identifier:
keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/0S_GqoTM0xxnZfxgIohxryGYSk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.52.0/22
193.135.152.0/23
193.135.164.0/23
193.135.252.0/23
193.247.78.0/23
193.247.93.0/24
193.247.100.0/24
193.247.102.0/24
193.247.120.0/22
193.247.184.0/23
193.247.239.0/24
193.247.251.0-193.247.253.255
IPv6:
2a00:efa0::/32
Signature Algorithm: sha256WithRSAEncryption
86:af:48:89:f4:53:5b:60:71:a0:db:f6:c8:99:62:a3:46:cf:
6c:6d:77:44:b4:f0:5d:db:7a:8b:c2:1a:80:de:a3:8f:cc:05:
7e:99:63:e4:9a:19:35:be:e3:c2:29:95:00:92:ed:02:2c:a9:
b3:fc:10:b5:95:82:e1:77:1a:1f:4f:ac:ca:c4:4b:1f:11:45:
ad:c0:25:fc:2e:f1:50:99:86:dc:eb:81:b9:30:a7:7a:d8:8a:
02:00:38:0c:2a:9c:b2:4c:72:6a:da:94:9f:cf:3c:59:35:ff:
e1:b7:b6:c2:19:5b:77:9b:e6:28:3c:10:2b:61:d2:89:c9:00:
e9:ff:b9:2c:d3:bc:f8:3c:6c:3e:31:b5:f2:1e:73:0b:5b:de:
af:c6:a8:60:25:68:e6:d0:69:e1:4d:44:d6:26:83:ff:b5:e2:
6d:77:ec:3e:f6:c5:48:41:8b:3c:a9:75:4a:8c:ad:0a:25:7a:
bb:9b:f8:e8:ca:63:87:2d:a4:c1:92:24:79:b5:8d:db:63:98:
20:9f:11:0a:df:19:dd:7b:db:a4:55:4e:57:48:60:41:77:a1:
c2:07:5b:fa:0c:8b:f7:f5:10:a4:8e:ee:eb:fc:88:3b:57:25:
f9:19:0e:66:50:c4:17:03:9b:07:e7:bd:2c:a4:a7:05:9c:5c:
c1:93:bb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:56:29 2024 by rpki-client on console-ams.rpki-client.org