Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/RHPQD-236gq3kSZg_OwOLkaY0gk.roa
File: RHPQD-236gq3kSZg_OwOLkaY0gk.roa (raw, json)
Hash identifier: F3RZxs/QPQgYTiZ0Gcw779rH+nZaU22AczZlClK2Wio=
Subject key identifier: 44:73:D0:0F:ED:B7:EA:0A:B7:91:26:60:FC:EC:0E:2E:46:98:D2:09
Certificate issuer: /CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Certificate serial: 018CC8DE2601E9852B932C94FAE95F44B6A9
Authority key identifier: 4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/RHPQD-236gq3kSZg_OwOLkaY0gk.roa
Signing time: Tue 02 Jan 2024 06:30:51 +0000
ROA not before: Tue 02 Jan 2024 06:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8934
IP address blocks: 185.109.120.0/22 maxlen: 24
193.188.64.0/19 maxlen: 24
93.93.144.0/21 maxlen: 24
2a02:9c0::/29 maxlen: 29
2a02:9c6::/32 maxlen: 32
2a02:9c7::/32 maxlen: 32
2a02:9c0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:26:01:e9:85:2b:93:2c:94:fa:e9:5f:44:b6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Validity
Not Before: Jan 2 06:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4473d00fedb7ea0ab7912660fcec0e2e4698d209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2c:97:0b:e9:9e:e2:57:f8:7c:62:f8:18:21:
9c:51:bd:37:61:a1:a8:f9:d8:c8:1f:d5:ac:68:4b:
a7:2e:5e:06:f5:8e:f0:80:c7:ca:6b:09:96:d5:45:
bc:d6:1c:46:9e:56:94:4b:4c:39:2e:ac:6f:5b:c0:
5b:ad:bf:0c:15:4a:e8:2a:89:9b:a0:f1:30:fd:6f:
2e:36:c6:b1:cd:0d:1a:63:dc:d6:03:8f:44:15:0e:
45:80:25:11:a9:45:bd:fb:5b:29:e4:93:17:2c:c0:
80:72:e0:75:af:b3:c5:1a:69:83:ae:91:d1:93:5e:
8b:47:d6:a0:9f:20:81:ac:a0:43:95:6d:36:28:e5:
cd:09:fe:04:23:75:e9:21:33:79:6c:51:17:11:64:
e1:b3:16:bd:7c:18:9d:63:73:0f:d7:19:b6:49:27:
c5:0c:34:dc:2e:80:6c:6e:dd:dd:61:e9:c7:ae:a6:
94:bd:42:18:41:06:ab:08:f2:68:5d:09:24:90:a8:
7d:5d:f3:66:3e:3c:70:49:54:d5:bf:68:88:eb:bb:
1b:db:9b:fc:f0:01:78:f9:ad:99:f5:04:7f:ce:e9:
b3:3b:d7:5c:55:e2:6f:50:61:bf:2c:6b:eb:fb:fb:
03:00:f9:59:b0:83:34:cb:28:4b:d5:ab:85:8c:d7:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:D0:0F:ED:B7:EA:0A:B7:91:26:60:FC:EC:0E:2E:46:98:D2:09
X509v3 Authority Key Identifier:
keyid:4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/RHPQD-236gq3kSZg_OwOLkaY0gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.144.0/21
185.109.120.0/22
193.188.64.0/19
IPv6:
2a02:9c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:b0:7b:37:d6:62:53:28:3a:f7:e9:5e:bf:6a:b7:4d:52:f7:
1e:79:99:93:a8:86:26:16:4b:2d:b0:93:6b:53:32:e6:cb:fb:
5b:cc:ad:19:39:bc:1d:57:f9:ad:27:81:24:79:67:65:57:fe:
37:5e:c6:1a:5a:e2:d8:80:96:94:2c:8e:3c:64:57:8b:7a:88:
8f:63:99:e1:73:c7:dd:73:c6:07:3e:38:f8:1d:ac:62:37:ca:
95:82:6b:75:21:b6:bc:a3:7d:15:2d:cb:ce:49:b5:c2:36:76:
43:dc:2f:4a:07:12:54:bf:cd:a1:90:fe:5d:c9:63:55:3b:b2:
87:8b:0a:f4:3e:5c:1a:89:8f:5e:47:de:ca:69:bb:ab:11:b5:
23:11:ce:a3:89:28:c1:28:f1:ab:e5:92:7d:85:10:29:28:e2:
f8:46:6f:2f:28:23:4b:d9:c7:67:99:c5:f6:5c:de:7a:fa:74:
4b:be:e7:12:bf:dc:42:00:65:88:8c:85:ee:50:36:34:73:fd:
5e:ec:e4:96:b1:17:8c:b6:86:e7:ba:0a:5b:10:22:cf:16:d0:
2d:58:15:2f:3d:58:6e:51:cf:5d:d8:a4:40:2b:5e:80:35:58:
f7:26:9b:3b:fe:fb:a1:75:6a:f7:8b:ac:bf:9e:f1:1f:51:9f:
c7:90:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:54:00 2024 by rpki-client on console-fra.rpki-client.org