Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/_qYiwQ-buCSUW0zTN8d93i608yU.roa
File: _qYiwQ-buCSUW0zTN8d93i608yU.roa (raw, json)
Hash identifier: 7NiLNfoVJBb9TykbgKcZaAcZzWzUb+beK6kGP7Ciop0=
Subject key identifier: FE:A6:22:C1:0F:9B:B8:24:94:5B:4C:D3:37:C7:7D:DE:2E:B4:F3:25
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 018EA3ADE04E85AC85D0EBA3925320732529
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/_qYiwQ-buCSUW0zTN8d93i608yU.roa
Signing time: Wed 03 Apr 2024 11:17:44 +0000
ROA not before: Wed 03 Apr 2024 11:17:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49100
IP address blocks: 109.125.128.0/19 maxlen: 19
109.125.128.0/22 maxlen: 22
185.82.28.0/22 maxlen: 22
185.129.184.0/21 maxlen: 21
185.129.196.0/22 maxlen: 22
185.129.197.0/24 maxlen: 24
185.129.200.0/22 maxlen: 22
185.129.212.0/22 maxlen: 22
185.129.216.0/22 maxlen: 22
185.129.228.0/22 maxlen: 22
185.129.230.0/23 maxlen: 23
185.129.237.0/24 maxlen: 24
185.129.240.0/22 maxlen: 22
2a03:54a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:ad:e0:4e:85:ac:85:d0:eb:a3:92:53:20:73:25:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Apr 3 11:17:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fea622c10f9bb824945b4cd337c77dde2eb4f325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:7e:a3:ef:7b:4d:9f:87:68:fa:8c:f8:82:
21:ea:40:1f:c6:f0:63:ca:06:0d:ec:74:e7:2a:f6:
96:8c:1e:68:be:94:78:ee:1d:09:a1:b3:e5:fc:63:
06:28:66:64:96:4d:64:45:6b:cc:ce:07:d9:4d:6b:
73:2c:a3:42:7d:dd:d3:3b:73:10:73:93:02:7b:b5:
3a:83:f0:c9:b1:43:54:3a:81:81:94:d9:38:7f:a4:
75:d8:49:5a:00:3a:03:29:2c:12:57:01:1d:ff:87:
c1:cf:5c:a7:cf:c9:b7:77:3b:0f:12:02:17:49:3e:
d1:4d:77:2b:c3:8f:e6:c6:2c:ae:b4:85:d0:72:cb:
d2:a6:c9:d1:ad:b2:5e:1d:bf:e1:51:2e:a0:21:69:
ae:f6:63:96:06:38:1b:c6:7f:1b:fc:58:50:f9:f6:
ff:03:67:7d:b0:c6:32:83:ca:d5:da:ac:4d:18:df:
85:00:68:dc:b9:02:e8:86:70:d1:7a:f3:c4:1a:4e:
5b:dd:d4:88:67:3e:b9:50:e1:b8:9f:b5:eb:d8:e1:
bf:4d:44:72:2a:c1:21:3f:fe:a4:08:66:e9:8d:43:
63:b5:dd:ce:b3:bb:32:a6:ec:a0:5e:6f:58:e8:4e:
59:b3:30:d2:75:0f:71:e5:08:f9:06:75:41:59:78:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A6:22:C1:0F:9B:B8:24:94:5B:4C:D3:37:C7:7D:DE:2E:B4:F3:25
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/_qYiwQ-buCSUW0zTN8d93i608yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.125.128.0/19
185.82.28.0/22
185.129.184.0/21
185.129.196.0-185.129.203.255
185.129.212.0-185.129.219.255
185.129.228.0/22
185.129.237.0/24
185.129.240.0/22
IPv6:
2a03:54a0::/32
Signature Algorithm: sha256WithRSAEncryption
cc:d9:ef:0e:fb:28:61:f1:c8:42:8d:4c:f2:62:8e:12:78:4f:
01:0a:60:56:df:0b:d8:4d:f1:21:d8:2d:ae:2e:9d:65:70:cb:
80:66:96:86:c6:d6:ff:6b:ca:0e:a7:48:04:c8:4f:f5:d5:19:
2d:5c:cd:b2:15:8f:91:8f:81:f3:86:29:40:64:43:02:d1:b7:
fa:d9:04:3e:eb:2b:90:e1:58:a8:49:3c:af:35:08:2a:2f:6a:
ed:bd:31:85:2d:17:34:a8:7d:ea:2c:f9:f2:dc:79:86:81:e6:
65:10:0f:48:32:1e:2b:ef:6c:02:22:20:88:cb:08:95:70:40:
8e:79:f6:ad:fd:25:8f:c1:25:99:f8:0c:4b:1d:08:2b:4c:58:
de:01:d5:e0:57:1c:5b:7d:b6:7f:47:bf:a1:13:fb:dc:63:27:
a7:7a:88:1d:4c:37:5b:f7:b5:a7:4b:2f:9a:1c:f4:78:d1:76:
46:e1:ca:4b:b4:19:34:ba:76:f5:db:29:21:83:e5:c1:ac:1a:
6b:79:3e:42:1f:b6:09:35:c1:ec:9a:c2:66:f8:f1:59:8a:d8:
21:4b:d2:ae:8f:08:ed:7a:10:39:ff:92:31:22:e8:81:6d:8a:
bd:d5:65:2b:94:76:10:42:f3:96:57:98:6d:cd:97:8f:c3:99:
46:90:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:46:39 2024 by rpki-client on console-fra.rpki-client.org