Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/VQZ2QoUYDZY7ZrwA2Enl7zuT6D4.roa
File: VQZ2QoUYDZY7ZrwA2Enl7zuT6D4.roa (raw, json)
Hash identifier: XgR+S4w9OkHvt1seA+1bi1q3B3hYJtmohi1Tsw5YLuU=
Subject key identifier: 55:06:76:42:85:18:0D:96:3B:66:BC:00:D8:49:E5:EF:3B:93:E8:3E
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 01922E2FF96C64EECC064C5221FB1C775FB1
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/VQZ2QoUYDZY7ZrwA2Enl7zuT6D4.roa
Signing time: Thu 26 Sep 2024 11:55:48 +0000
ROA not before: Thu 26 Sep 2024 11:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3949
IP address blocks: 171.22.145.0/24 maxlen: 24
185.243.129.0/24 maxlen: 24
2a01:f180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:2f:f9:6c:64:ee:cc:06:4c:52:21:fb:1c:77:5f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Sep 26 11:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5506764285180d963b66bc00d849e5ef3b93e83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2d:38:7b:01:c1:65:94:46:72:c5:03:83:f0:
80:62:46:24:3e:2e:59:8f:35:29:96:7b:ac:d8:60:
ed:3f:7d:47:f8:bb:49:9a:59:4a:b0:61:03:49:ea:
42:17:27:f8:52:c4:cb:e0:05:06:62:a5:b4:a1:c7:
9f:10:8d:7b:ee:e7:e2:a0:73:b2:03:09:72:8d:c8:
ff:0a:6d:19:ed:9d:d6:c9:3f:13:4e:ba:4e:4f:fc:
60:5b:d2:df:c2:f8:c2:06:fe:5b:7c:3f:27:1a:25:
23:73:2a:ac:3e:2b:d6:61:20:80:a8:38:34:5d:f2:
97:0b:ac:59:8d:12:36:86:2e:6c:26:ef:59:93:59:
37:61:84:f2:c0:46:c6:77:51:c1:fc:29:bb:f4:eb:
2f:40:de:6a:5b:61:ad:00:98:91:f0:09:fe:41:55:
ed:ea:05:c4:49:e1:09:ec:c7:db:b1:ef:5f:04:8c:
9a:7d:d8:98:3e:76:cb:4e:f1:79:b9:63:01:55:1d:
c2:85:88:24:89:35:c9:8b:ee:8f:d8:f7:f5:6d:10:
9a:85:66:a6:ef:33:b1:22:14:38:63:f1:4c:00:2e:
77:c1:91:30:a7:d6:b3:21:9b:26:b9:30:40:34:33:
d8:30:7e:6a:af:65:7a:07:4f:d6:5e:1c:af:eb:f5:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:06:76:42:85:18:0D:96:3B:66:BC:00:D8:49:E5:EF:3B:93:E8:3E
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/VQZ2QoUYDZY7ZrwA2Enl7zuT6D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.145.0/24
185.243.129.0/24
IPv6:
2a01:f180::/48
Signature Algorithm: sha256WithRSAEncryption
77:08:9d:95:d8:4e:a3:a6:a1:0c:57:bf:2e:b3:0c:9f:8f:f5:
83:eb:51:6f:6d:d4:6b:96:f8:19:18:3b:83:eb:3e:1c:60:5d:
92:4d:9c:c7:2c:c0:41:41:c7:07:0c:b4:a2:67:85:4d:e6:59:
c5:5e:c8:57:c1:8b:47:b2:f4:8c:55:08:ae:f0:9b:fe:fd:9b:
70:48:7f:28:43:1b:2e:75:e0:18:9c:48:4d:99:21:ca:1d:98:
02:2f:ac:59:ad:00:62:d5:61:19:2c:75:57:fb:b8:41:92:22:
de:b6:a7:2f:8b:99:1f:f6:be:b7:75:d4:f6:30:5e:1f:02:d7:
8f:a1:f0:54:8f:61:2b:6d:7a:78:3d:ec:d8:09:3b:49:18:ec:
92:67:e0:2d:a1:6e:4d:98:d0:61:aa:3d:aa:49:47:49:c8:0d:
41:74:e3:79:d3:77:70:54:4c:06:d3:8b:83:bf:59:03:7a:8a:
f2:76:78:82:8c:81:ba:6b:db:58:9a:bc:8b:be:be:e1:61:22:
01:bd:a7:17:29:f4:7f:36:f2:da:af:c6:5c:6b:ad:b7:32:36:
30:6d:3c:40:df:9d:3c:f1:b5:ec:b9:7d:27:af:69:27:fb:39:
59:e2:54:0e:22:f5:55:25:20:a7:76:d4:82:85:3e:5b:64:a6:
f0:e5:86:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:58:33 2024 by rpki-client on console-ams.rpki-client.org