Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/qnO7iQ5Hm5C-Vhxd8qMAEwqa43E.roa
File: qnO7iQ5Hm5C-Vhxd8qMAEwqa43E.roa (raw, json)
Hash identifier: IcC05MaYPd89LOfptNlzGmt6G+mkEEEp1ADhuuy5SRc=
Subject key identifier: AA:73:BB:89:0E:47:9B:90:BE:56:1C:5D:F2:A3:00:13:0A:9A:E3:71
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 018CC3B671F04B1C68F0C13D8F59BB3BC53F
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/qnO7iQ5Hm5C-Vhxd8qMAEwqa43E.roa
Signing time: Mon 01 Jan 2024 06:29:22 +0000
ROA not before: Mon 01 Jan 2024 06:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212573
IP address blocks: 185.52.117.0/24 maxlen: 24
185.52.116.0/22 maxlen: 22
93.187.32.0/21 maxlen: 21
2a00:dd00:7::/48 maxlen: 48
2a00:dd00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:71:f0:4b:1c:68:f0:c1:3d:8f:59:bb:3b:c5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jan 1 06:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa73bb890e479b90be561c5df2a300130a9ae371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:8a:d5:4d:2d:5c:5c:54:11:c2:9d:3f:02:
12:6c:b0:77:aa:b0:04:ef:df:31:1c:d2:d6:0c:51:
f7:a3:97:9d:98:a8:20:9a:fd:38:7f:d1:2f:fa:f9:
d0:e7:a2:18:02:b9:d2:f5:03:6b:e0:cf:33:ca:0d:
5d:23:92:47:9a:0f:2a:55:f5:2b:bb:59:2e:30:03:
ff:41:78:0d:c4:5a:f4:86:22:72:14:22:9a:92:ff:
f2:89:ae:20:8b:19:3b:28:5c:87:8a:96:04:e5:b8:
08:92:b3:c3:68:b3:3d:fc:8e:17:27:f5:a2:43:a3:
81:07:86:c1:c8:bf:71:71:df:80:01:36:05:55:f8:
24:da:e1:8a:4d:cb:01:72:4f:c0:44:8e:17:f9:ff:
4b:33:79:97:fa:8c:27:d6:54:11:f4:37:64:83:7b:
fe:42:e8:54:49:65:a0:c8:c8:94:e9:be:fb:53:c9:
f1:81:db:91:9d:7b:6b:99:d1:d9:5b:54:bd:83:e7:
63:52:f6:85:26:2e:b1:cb:32:8f:92:9b:52:6e:8b:
53:ae:ab:91:06:42:1a:54:01:17:ff:1e:9a:96:12:
7f:33:c5:d4:1d:5c:d7:60:cf:0f:fc:fd:4c:87:88:
14:90:e5:d2:d3:cb:d7:af:01:e8:c6:5c:97:66:67:
3e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:73:BB:89:0E:47:9B:90:BE:56:1C:5D:F2:A3:00:13:0A:9A:E3:71
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/qnO7iQ5Hm5C-Vhxd8qMAEwqa43E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.32.0/21
185.52.116.0/22
IPv6:
2a00:dd00::/32
Signature Algorithm: sha256WithRSAEncryption
07:8c:53:b2:26:08:a3:74:80:71:bc:48:d5:ac:81:22:39:d4:
3b:3b:41:98:cd:04:6c:86:8a:8f:64:ef:cc:4f:2f:67:39:f2:
17:d5:23:22:e8:5f:40:0f:b8:7e:20:78:ae:9f:05:80:31:17:
95:80:5c:d0:2b:44:d8:c3:58:ea:83:6b:55:8e:0b:26:de:65:
fd:2c:2e:14:89:8b:e1:ae:19:4d:8a:6b:2c:7f:42:bb:5e:a9:
e0:b6:01:15:19:40:e2:7d:81:11:83:d6:be:8d:ac:1e:bb:d1:
c3:78:53:97:69:bd:a7:68:35:bd:eb:a0:f9:e4:cc:1a:81:c5:
c8:0e:c3:90:38:fd:99:33:cb:c7:0d:a0:f6:83:6f:99:ab:4e:
df:3d:55:6e:e6:7a:6e:da:0f:11:3a:c0:f9:e7:b9:af:ce:db:
4d:c0:b5:25:b1:02:aa:6a:0c:4c:b7:99:db:8b:88:7c:3a:be:
b3:11:5a:f4:b1:37:35:f8:4d:60:0b:a1:2e:f3:ae:2a:3a:31:
28:a9:ad:fa:e8:b2:20:0e:4b:48:f9:e8:a7:ce:2c:79:35:3a:
14:2b:32:f1:c1:97:04:89:6f:13:3f:04:01:07:22:0c:a0:df:
73:ea:ce:d0:f6:49:e8:bc:af:ad:47:bd:28:e2:f8:c4:f9:ad:
e3:ec:77:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:45:13 2024 by rpki-client on console-ams.rpki-client.org