Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/0qnhdec3OZ27iXQx8sfwMl4UE8E.roa
File: 0qnhdec3OZ27iXQx8sfwMl4UE8E.roa (raw, json)
Hash identifier: K1c/EkFgnEpI/LDtRJLuVgZ4x9K1o9+YolbAfgH8WwA=
Subject key identifier: D2:A9:E1:75:E7:37:39:9D:BB:89:74:31:F2:C7:F0:32:5E:14:13:C1
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 018CC492FFF1E801CF0116998D810433A76D
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/0qnhdec3OZ27iXQx8sfwMl4UE8E.roa
Signing time: Mon 01 Jan 2024 10:30:17 +0000
ROA not before: Mon 01 Jan 2024 10:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35213
IP address blocks: 91.239.139.0/24 maxlen: 24
91.239.138.0/24 maxlen: 24
91.239.137.0/24 maxlen: 24
91.239.136.0/22 maxlen: 22
91.239.136.0/24 maxlen: 24
91.201.168.0/24 maxlen: 24
176.111.51.0/24 maxlen: 24
193.0.247.0/24 maxlen: 24
91.205.67.0/24 maxlen: 24
91.205.66.0/24 maxlen: 24
91.205.65.0/24 maxlen: 24
91.205.64.0/22 maxlen: 22
91.205.64.0/24 maxlen: 24
2a13:61c0::/29 maxlen: 29
2001:678:31c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:ff:f1:e8:01:cf:01:16:99:8d:81:04:33:a7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Jan 1 10:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2a9e175e737399dbb897431f2c7f0325e1413c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:06:00:1e:dd:bd:a7:a6:6c:2f:3c:17:85:2d:
2c:8e:4b:a5:ca:2d:b8:3c:b8:c6:be:38:6f:02:07:
25:e9:4d:6a:55:75:08:f2:0d:21:dd:ab:15:8a:d0:
a8:94:ac:a2:83:f1:e7:a3:58:b9:fd:b4:65:80:2f:
8e:79:d1:88:d4:65:40:70:1c:fd:87:0e:89:e8:6a:
1b:30:a3:01:f7:6c:56:f9:0b:03:ee:66:66:12:00:
24:27:7d:52:d8:57:ce:6c:70:1b:67:52:02:41:c3:
b6:68:c6:b5:3f:62:40:b2:4e:6d:80:ee:2b:bb:c6:
e4:7f:ed:63:85:f7:b7:f7:ad:06:67:59:11:b2:27:
c1:82:e1:1b:e1:6b:e4:30:13:2b:35:32:82:ef:93:
8c:1e:d8:f3:d9:0e:e1:e8:fb:29:d8:8d:f9:8e:14:
b7:0d:97:84:af:95:41:6e:46:04:65:fe:bf:43:4d:
0c:06:fd:71:6a:88:d3:89:dd:76:66:f7:5b:e8:5a:
a7:36:8e:fa:f1:4b:e5:09:38:73:4b:59:99:fe:c5:
81:f2:f7:8c:c6:87:48:c3:fd:fb:9a:e9:cc:eb:1d:
7c:f4:13:c3:75:79:ac:ba:6f:43:fa:04:c7:cf:a7:
99:a0:23:42:57:35:aa:cb:bc:73:c8:b1:83:0e:2d:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A9:E1:75:E7:37:39:9D:BB:89:74:31:F2:C7:F0:32:5E:14:13:C1
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/0qnhdec3OZ27iXQx8sfwMl4UE8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.168.0/24
91.205.64.0/22
91.239.136.0/22
176.111.51.0/24
193.0.247.0/24
IPv6:
2001:678:31c::/48
2a13:61c0::/29
Signature Algorithm: sha256WithRSAEncryption
37:79:d8:3f:a0:c3:07:5b:87:85:09:10:34:2f:09:9a:84:2f:
7a:0e:f2:5d:ac:8c:8b:7e:fa:75:9e:4f:ce:2f:72:bc:61:94:
bc:e5:33:6b:8e:a4:27:90:67:bc:2a:56:e1:35:2a:a6:98:6c:
d9:62:c8:1a:1c:5f:a0:02:8e:29:81:33:91:f8:f0:b7:09:75:
8a:e8:c7:57:12:fe:db:64:01:95:8f:70:05:e5:f4:86:95:aa:
a9:70:3c:f6:2c:1c:0c:60:e9:f5:98:f6:ff:1a:47:f2:c3:19:
5e:7e:81:c3:2c:71:ec:7a:f2:2d:c7:cb:63:d3:2f:03:79:b2:
1e:4f:0f:0d:d0:de:d4:ec:6a:5f:42:8a:42:7e:47:7f:b3:d6:
ac:15:6a:8d:28:b8:ef:93:f3:5a:f3:74:fe:62:10:5b:45:b5:
44:d3:9b:ad:7d:d6:b8:41:08:ad:e4:4d:22:ab:47:a5:19:01:
d3:23:b0:ef:57:89:a3:a7:4a:4f:fd:60:c3:b2:a3:33:70:3b:
30:40:67:08:54:8f:ab:fe:ab:b9:62:c3:ec:0e:9c:88:0b:fc:
a9:84:e1:10:3e:0c:b2:d4:0b:ef:ca:53:e2:1e:32:9e:0f:58:
ec:f4:28:41:1b:62:67:e2:a4:34:d5:9d:7d:d6:a9:9c:38:41:
a2:21:7d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:31:44 2024 by rpki-client on console-ams.rpki-client.org