Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/qUeoYdI6AaL4v5MsCzmcm-JoMyA.roa
File: qUeoYdI6AaL4v5MsCzmcm-JoMyA.roa (raw, json)
Hash identifier: AmJwUmjPuHvvzGHOtbbgPGlWlwLQWN4Jwe8J7cprc8U=
Subject key identifier: A9:47:A8:61:D2:3A:01:A2:F8:BF:93:2C:0B:39:9C:9B:E2:68:33:20
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 018CC80149D8B046DA67553C41C80BA1B937
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/qUeoYdI6AaL4v5MsCzmcm-JoMyA.roa
Signing time: Tue 02 Jan 2024 02:29:36 +0000
ROA not before: Tue 02 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8587
IP address blocks: 91.209.14.0/24 maxlen: 24
91.209.22.0/24 maxlen: 24
91.209.21.0/24 maxlen: 24
195.114.224.0/20 maxlen: 20
212.104.210.0/24 maxlen: 24
91.208.251.0/24 maxlen: 24
94.247.72.0/21 maxlen: 21
2a02:ca0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:49:d8:b0:46:da:67:55:3c:41:c8:0b:a1:b9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Jan 2 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a947a861d23a01a2f8bf932c0b399c9be2683320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:7a:56:ec:b1:bf:57:9e:89:b0:e5:1e:23:
5d:0a:b0:0c:51:5c:63:23:c5:b4:f1:c9:c8:94:ae:
3e:98:9e:e8:bb:a8:20:83:f9:58:29:77:07:83:41:
fd:dd:08:b0:93:46:79:55:c7:22:1b:93:8e:44:7d:
4a:af:14:27:ab:e7:16:3c:2e:a6:07:28:28:f9:45:
0e:d3:3b:7a:15:43:68:bc:9e:7d:ca:ab:7d:99:6f:
e6:ea:23:b5:ab:9a:fb:11:42:fa:0c:fa:2e:e6:e2:
d7:3d:8f:e4:e1:1d:d5:6f:8e:e2:43:25:8d:b0:47:
c2:9a:46:bd:05:91:bb:06:b3:b4:73:76:8a:12:c1:
77:1d:21:f1:63:a8:e6:ab:20:b6:fd:2c:29:25:6b:
4e:59:22:c0:90:bc:79:47:38:89:20:d9:cb:37:44:
cf:99:63:0e:fd:c9:a3:31:0f:1e:82:d4:f6:3d:36:
52:35:26:5d:2e:f8:9c:62:41:3c:25:17:35:10:8f:
7b:15:f7:f4:a7:19:9d:e5:16:07:22:55:57:40:0e:
f7:ef:68:ba:5e:8e:b8:f3:b8:4f:b9:8d:4f:69:96:
6e:93:88:7a:f5:42:0b:e3:bd:78:93:f2:bc:46:2b:
d9:e7:bc:e6:91:9a:73:ec:d4:28:33:1f:ea:01:0f:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:47:A8:61:D2:3A:01:A2:F8:BF:93:2C:0B:39:9C:9B:E2:68:33:20
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/qUeoYdI6AaL4v5MsCzmcm-JoMyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.251.0/24
91.209.14.0/24
91.209.21.0-91.209.22.255
94.247.72.0/21
195.114.224.0/20
212.104.210.0/24
IPv6:
2a02:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
23:4d:2b:e4:b3:da:0e:09:d5:f5:5c:5a:33:df:84:bf:b3:e3:
aa:d5:5c:76:c0:b8:7f:06:e0:51:43:b8:b2:ea:9e:6b:1a:fc:
4c:cc:df:a0:f3:bb:78:89:39:59:29:f6:30:bf:f0:e2:36:2c:
96:23:bf:79:b0:fa:ad:6a:be:5c:49:3e:d0:2b:a8:cc:64:10:
f6:7b:77:25:88:72:f9:3a:87:8e:61:b3:c3:94:bb:72:01:da:
22:fc:c3:26:e6:9d:6d:8c:49:0c:3e:c0:a8:f9:2e:9f:a3:c0:
95:68:f5:03:31:3a:f8:c3:22:20:09:ed:d6:38:d8:92:6a:45:
fa:04:62:4a:0c:5d:ef:7d:72:57:35:5e:fb:39:d4:ca:8e:7c:
a0:f3:18:44:dc:b8:00:7d:a6:61:e1:87:b9:3a:b3:42:e2:37:
90:ef:2e:ff:73:7c:aa:bb:5f:1b:40:9f:9a:e9:df:73:7d:d9:
f8:a5:32:b5:fb:6f:5f:72:10:6b:3c:35:7e:1e:31:97:f6:71:
15:4c:b7:e7:95:d1:7e:c2:cd:99:fd:8a:1c:cd:bf:54:25:18:
c6:7e:7d:69:95:be:cb:a0:a1:90:60:f1:f1:c3:ad:a1:3f:e4:
02:27:a8:5a:9a:49:f9:6d:ac:d9:f3:6a:b9:d8:f7:70:a5:18:
0a:02:fe:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:26:20 2024 by rpki-client on console-fra.rpki-client.org