Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/QubasF67rsvGz5JIN9k_zWLe_vA.roa
File: QubasF67rsvGz5JIN9k_zWLe_vA.roa (raw, json)
Hash identifier: TT4qcaAR+A0zx/mhNwxe3LnJC/ufW6/rqfNnJP/PjGk=
Subject key identifier: 42:E6:DA:B0:5E:BB:AE:CB:C6:CF:92:48:37:D9:3F:CD:62:DE:FE:F0
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 018CC8DE43E0A6691C9DBADB46C1E96BB0CA
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/QubasF67rsvGz5JIN9k_zWLe_vA.roa
Signing time: Tue 02 Jan 2024 06:30:58 +0000
ROA not before: Tue 02 Jan 2024 06:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15600
IP address blocks: 185.74.112.0/22 maxlen: 22
77.239.32.0/19 maxlen: 24
46.255.168.0/21 maxlen: 24
37.35.112.0/21 maxlen: 24
2a00:d420::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:43:e0:a6:69:1c:9d:ba:db:46:c1:e9:6b:b0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Jan 2 06:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42e6dab05ebbaecbc6cf924837d93fcd62defef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:87:8c:65:8a:0d:37:e8:fa:fc:f9:d9:1a:
ed:bf:46:43:17:df:33:d4:81:fc:b4:6b:73:f2:f2:
45:76:63:00:6b:f0:17:43:25:80:01:dc:59:8e:92:
41:2f:7e:f3:98:5a:3a:dd:28:94:bc:b8:31:43:7b:
a1:d0:04:24:2f:ef:ef:4a:f4:2a:e3:09:73:fa:44:
c3:32:29:1c:bf:5d:2b:1b:6b:da:17:fa:1d:7d:b0:
a4:4b:a5:8e:7b:11:20:99:2c:05:23:20:a7:7e:1c:
3e:c6:d3:63:a6:de:08:5a:cd:86:ad:02:cc:4e:56:
92:6a:6b:b6:dd:5e:9c:9b:75:9e:0f:dc:d8:7a:88:
9e:4a:32:cb:eb:be:12:d5:16:ff:39:5e:57:c7:09:
d9:ee:ab:67:53:b3:a1:de:b9:02:39:e2:21:ce:90:
85:8c:b8:94:13:87:e5:95:ed:33:74:4f:e3:49:88:
ca:16:88:b2:53:70:4d:15:ce:9b:cd:fe:42:0f:82:
b1:a3:3a:4f:5b:aa:6e:ab:2e:8f:8b:52:d9:d2:fa:
b6:d9:fb:44:d3:d9:b4:64:67:b3:d8:52:91:ea:07:
0c:4e:62:6c:af:9b:6d:87:6b:1a:c0:a6:f6:97:b8:
7d:27:da:74:67:72:44:62:1e:cc:ba:5b:96:bd:3d:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E6:DA:B0:5E:BB:AE:CB:C6:CF:92:48:37:D9:3F:CD:62:DE:FE:F0
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/QubasF67rsvGz5JIN9k_zWLe_vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.112.0/21
46.255.168.0/21
77.239.32.0/19
185.74.112.0/22
IPv6:
2a00:d420::/29
Signature Algorithm: sha256WithRSAEncryption
57:c3:1c:4f:b9:d9:99:9d:91:9f:6f:1d:dc:20:5c:21:91:6c:
c1:a1:c3:cb:35:4d:a7:f0:2c:76:05:c9:60:65:a1:d3:05:94:
fd:e3:d6:13:2c:6c:aa:a9:d8:ad:23:90:6a:98:16:99:17:31:
21:ca:aa:f8:c2:53:71:48:4d:18:22:b3:d9:9e:48:11:0d:9e:
77:64:86:af:8a:63:f4:48:f0:8b:8a:c0:fc:f3:f2:50:bd:67:
cf:cd:ba:74:07:81:a0:74:ad:3e:62:25:ba:c9:02:a1:64:f7:
81:20:14:31:23:3f:39:26:19:c3:9d:13:91:91:8e:f1:1b:42:
9c:46:aa:65:21:db:5c:38:7e:37:3b:f0:a6:4b:db:72:38:19:
08:81:39:cf:ea:7a:8b:90:7d:1d:c3:77:bf:e2:87:de:15:f7:
c2:6f:1a:6c:e4:76:ab:4c:1f:fc:b4:0e:d6:72:11:bb:8d:72:
06:4f:1f:3a:59:d6:84:9d:4d:77:56:d1:ef:6c:b2:2e:b8:98:
66:91:29:40:f7:26:34:8b:00:e1:21:14:13:ba:67:3b:62:39:
25:2e:82:a8:47:76:06:51:05:25:39:2b:ed:f9:eb:08:ce:a2:
06:da:cc:db:aa:b9:0e:b6:14:32:3e:68:94:f0:99:5f:da:0b:
0d:3b:f0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:36:41 2024 by rpki-client on console-ams.rpki-client.org