Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/CQLP4uP_J3o1shttMtmssmr6HxE.roa
File: CQLP4uP_J3o1shttMtmssmr6HxE.roa (raw, json)
Hash identifier: Rd+w0VPoCg7noGMpJCiZ4lHdAlX9tbB+VZEWPNp4PnA=
Subject key identifier: 09:02:CF:E2:E3:FF:27:7A:35:B2:1B:6D:32:D9:AC:B2:6A:FA:1F:11
Certificate issuer: /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Certificate serial: 018CC795434ECF0F802B1BDCCC1B0243C396
Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/CQLP4uP_J3o1shttMtmssmr6HxE.roa
Signing time: Tue 02 Jan 2024 00:31:37 +0000
ROA not before: Tue 02 Jan 2024 00:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34326
IP address blocks: 193.138.190.0/24 maxlen: 24
193.138.189.0/24 maxlen: 24
193.138.188.0/24 maxlen: 24
77.240.244.0/22 maxlen: 22
178.236.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:43:4e:cf:0f:80:2b:1b:dc:cc:1b:02:43:c3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Validity
Not Before: Jan 2 00:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0902cfe2e3ff277a35b21b6d32d9acb26afa1f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:3b:45:13:8d:37:d9:e9:43:a9:98:3a:00:
ac:d2:f8:a0:08:9e:2b:89:fb:62:fb:19:64:56:0a:
f7:1d:64:69:57:85:33:fa:85:bf:8f:1b:34:2f:6a:
cc:ee:a1:1d:44:0e:ad:5b:d9:a1:55:31:a3:2d:73:
7a:25:83:47:53:4c:85:a3:15:9d:36:ec:a1:17:51:
6c:a8:31:e4:35:54:8b:93:c8:cf:1e:d6:66:f4:43:
a0:9e:ab:f1:86:31:06:99:73:3c:f0:9c:f2:d0:b6:
4e:97:c4:49:38:34:0d:f2:2b:eb:7e:c2:7f:71:75:
55:ef:0d:0d:5b:f3:bd:f6:9d:4c:1e:c2:20:94:9e:
ac:ff:c3:ae:f5:c7:a1:2b:91:a4:dd:c3:70:6f:8c:
24:f4:6b:72:db:8e:38:dc:b6:2b:59:2a:9d:92:1e:
0d:6d:ae:1c:79:ed:49:b0:f8:6d:30:83:a7:6a:9b:
64:12:e4:2c:34:99:e7:da:08:93:90:a4:17:00:5c:
63:91:cb:43:68:43:9a:ad:b7:1f:9b:72:d0:d7:31:
7d:6d:e9:5c:ce:19:91:ad:d4:f4:00:4e:0f:ea:0e:
dc:c2:36:46:64:d2:8e:a9:d0:41:c9:65:dd:91:a2:
d6:7d:f0:c8:37:8a:c6:dd:da:0c:1b:96:73:9f:26:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:02:CF:E2:E3:FF:27:7A:35:B2:1B:6D:32:D9:AC:B2:6A:FA:1F:11
X509v3 Authority Key Identifier:
keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/CQLP4uP_J3o1shttMtmssmr6HxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.244.0/22
178.236.192.0/22
193.138.188.0-193.138.190.255
Signature Algorithm: sha256WithRSAEncryption
d6:96:8d:c7:1a:de:bf:76:df:4d:23:a7:6d:32:e3:10:a8:7a:
32:c3:a7:a3:c4:b5:f2:cf:2e:d8:9c:fe:0a:5a:c2:9c:6c:49:
ea:ca:61:73:86:07:87:03:04:04:dd:e9:3b:38:66:7a:1e:ab:
5d:a3:1b:9f:00:92:b8:cd:4e:db:75:5d:2c:98:d3:02:83:cc:
b0:f1:ee:34:94:fc:36:95:f5:ed:a2:6f:90:8f:82:1d:f5:9a:
0d:7a:85:ae:f7:f3:57:76:32:e8:5c:a5:0c:c3:06:47:e6:45:
16:a2:f6:e5:11:1f:cf:01:a5:d1:36:65:f0:a2:9a:5b:51:72:
da:ff:fb:a5:77:73:c4:f5:00:15:65:a1:aa:44:f9:e7:e0:43:
4d:0b:b5:e9:23:56:59:7d:ba:4d:3f:18:76:06:49:42:cf:cb:
88:32:82:a9:8d:af:10:53:6b:d8:4f:6c:8b:c9:19:5c:81:3c:
ba:72:e6:76:20:17:14:f2:6c:8d:18:0d:80:3b:47:be:5e:30:
67:f9:86:79:44:c3:40:90:71:8a:32:f4:14:9d:de:28:a8:53:
c3:b7:73:71:6a:18:0b:94:88:88:8b:72:84:21:4f:59:e9:41:
ef:2a:8f:5d:3a:e3:25:ee:94:1e:79:e0:eb:08:2a:8b:61:7b:
a3:f4:45:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:34:50 2024 by rpki-client on console-ams.rpki-client.org