Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/2Qo03-NjTQik2b4fZIReOcBWtJg.roa
File: 2Qo03-NjTQik2b4fZIReOcBWtJg.roa (raw, json)
Hash identifier: 5yh8C2Ej23fAaKybY047sssu30C2M1faFU6Jmg6Phpw=
Subject key identifier: D9:0A:34:DF:E3:63:4D:08:A4:D9:BE:1F:64:84:5E:39:C0:56:B4:98
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 018CC80214542F862651D4783535D2266736
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/2Qo03-NjTQik2b4fZIReOcBWtJg.roa
Signing time: Tue 02 Jan 2024 02:30:28 +0000
ROA not before: Tue 02 Jan 2024 02:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60823
IP address blocks: 185.25.124.0/22 maxlen: 22
92.243.70.0/24 maxlen: 24
92.243.92.0/24 maxlen: 24
195.191.254.0/23 maxlen: 23
2a04:3180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:14:54:2f:86:26:51:d4:78:35:35:d2:26:67:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: Jan 2 02:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d90a34dfe3634d08a4d9be1f64845e39c056b498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:e1:ef:98:bf:4f:1e:5f:11:60:04:43:85:
93:d8:74:fd:6d:1b:29:c9:c7:37:a9:9d:1b:aa:ef:
48:b1:f3:08:62:d4:e3:6a:6b:47:ed:e8:16:b0:c6:
d3:e4:5c:ff:36:1b:30:da:0d:e8:ef:d2:ac:3d:4f:
63:e3:5f:34:9d:47:67:65:af:f8:66:50:bc:19:2d:
0b:9f:15:af:9f:4b:07:b7:a9:05:cf:ba:ee:0e:42:
36:e4:52:c8:0f:b4:fe:b3:58:a7:70:6a:30:a6:37:
de:1e:8e:a8:42:eb:00:0d:f3:f1:14:18:28:bf:6a:
a6:30:10:a6:f3:2c:2b:1d:ef:58:33:8d:ce:7b:7d:
c7:f8:51:e5:ad:d1:d2:f2:eb:54:09:ca:50:0d:48:
d2:f3:18:6c:69:32:8f:09:ce:8f:bb:78:6d:83:a5:
99:47:78:25:7b:b1:42:d5:e9:45:77:61:ba:88:5a:
8a:32:27:0b:cb:e0:da:04:9d:a0:9b:87:ae:bb:c3:
60:50:dd:d7:1d:73:49:64:9b:02:08:28:bf:8a:a5:
87:f5:e7:e1:ac:3a:3f:fa:6c:04:c9:38:69:c9:c7:
1e:78:7a:cf:db:03:4a:ed:15:c8:d3:bd:85:1e:ba:
0c:1a:75:04:56:dc:0b:d9:35:82:26:a8:f7:e6:73:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0A:34:DF:E3:63:4D:08:A4:D9:BE:1F:64:84:5E:39:C0:56:B4:98
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/2Qo03-NjTQik2b4fZIReOcBWtJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.70.0/24
92.243.92.0/24
185.25.124.0/22
195.191.254.0/23
IPv6:
2a04:3180::/29
Signature Algorithm: sha256WithRSAEncryption
41:76:b6:1f:c2:7f:74:a5:4c:14:a8:a0:93:c6:9e:5f:67:43:
d0:47:a1:ba:1a:82:2a:25:6f:d3:47:c4:0f:da:c5:79:c9:c2:
c0:1e:2b:ee:9e:7e:46:5b:51:07:06:65:4e:52:f4:fb:6d:8f:
48:79:c9:8c:a5:85:37:7b:d0:d4:7d:a0:63:00:42:fe:37:9b:
2a:84:58:97:9a:af:0c:ed:a4:8c:7d:cf:0a:aa:0a:b6:f2:a1:
c6:92:a7:bc:5a:5c:5f:d3:e3:de:d4:0e:42:69:4c:44:93:c7:
cb:d9:5c:df:c7:af:02:17:ca:7f:db:3b:a1:cf:46:61:44:70:
cf:e7:4b:79:7d:d7:3d:a4:67:25:58:21:00:a1:06:3e:6c:63:
2e:70:d9:0d:c1:00:6c:20:ea:e6:27:26:46:e5:16:cc:b5:78:
b6:23:3e:7b:ae:52:1f:f0:33:98:e4:0a:c7:ea:6c:b3:b7:4b:
24:d7:36:0d:f7:51:c1:c6:e2:86:58:f7:aa:00:35:31:c8:13:
ef:90:40:1f:47:c9:29:52:97:91:2a:82:3b:45:ff:68:86:6f:
d3:22:99:eb:d9:e9:3b:a3:1f:fb:15:a6:39:8e:32:cb:85:de:
a5:5f:56:f3:9f:87:fa:36:39:43:52:9d:4e:b1:02:ba:97:ea:
6a:ed:28:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:38 2024 by rpki-client on console-ams.rpki-client.org