Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/Qg2NqY8EGMDRRLx-t8NhPa4MMqc.roa
File: Qg2NqY8EGMDRRLx-t8NhPa4MMqc.roa (raw, json)
Hash identifier: YIX8x6mCHks0PlDvHNunPTXP/0M+rtpZA79HXbHAdp0=
Subject key identifier: 42:0D:8D:A9:8F:04:18:C0:D1:44:BC:7E:B7:C3:61:3D:AE:0C:32:A7
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 0192E879FC42EE3CAE5DD78C0540DADF639D
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/Qg2NqY8EGMDRRLx-t8NhPa4MMqc.roa
Signing time: Fri 01 Nov 2024 16:06:01 +0000
ROA not before: Fri 01 Nov 2024 16:06:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7488
IP address blocks: 185.34.144.0/22 maxlen: 22
185.92.188.0/22 maxlen: 22
185.170.76.0/22 maxlen: 22
195.34.70.0/23 maxlen: 23
2a14:7a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e8:79:fc:42:ee:3c:ae:5d:d7:8c:05:40:da:df:63:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Nov 1 16:06:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=420d8da98f0418c0d144bc7eb7c3613dae0c32a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:de:12:0a:38:da:cf:71:96:b8:e5:bf:70:
c8:6a:89:b8:38:7d:09:51:e6:0f:88:ce:59:69:a0:
91:31:87:5e:30:b0:ee:38:55:5f:eb:eb:63:6d:7b:
fd:31:5c:91:81:19:73:52:02:51:b4:2e:51:86:b1:
a1:e7:b0:bc:d0:92:53:a3:b0:71:a3:5d:5e:bd:5a:
46:64:38:59:c5:49:53:bc:a9:a1:42:21:ce:bd:5f:
29:84:cb:f1:f3:be:bd:a7:ab:27:5d:a8:28:1c:b6:
84:b7:2e:82:01:ed:3f:e5:ea:f9:0a:76:28:77:7b:
bb:91:1c:26:59:62:4b:50:08:c4:d3:4d:89:6e:21:
e6:47:1c:52:e4:0e:46:78:42:31:f6:6f:4d:f1:e6:
5e:74:6f:4e:21:26:5a:31:b5:28:d3:67:fd:20:47:
9c:59:53:16:1d:27:26:46:b9:fb:65:73:56:da:bb:
92:64:18:6d:4b:99:4d:55:c7:5d:ea:27:ad:97:f7:
5b:e4:e2:39:36:c9:a1:c9:db:fb:f0:9b:bb:42:b2:
c3:86:79:0b:29:a6:ec:18:a3:75:9f:ae:7e:09:02:
56:df:1e:81:bc:0b:58:8a:90:3d:29:5b:2c:0f:b9:
1c:4b:5f:20:6a:57:c2:22:49:a6:05:07:53:0a:15:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0D:8D:A9:8F:04:18:C0:D1:44:BC:7E:B7:C3:61:3D:AE:0C:32:A7
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/Qg2NqY8EGMDRRLx-t8NhPa4MMqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.144.0/22
185.92.188.0/22
185.170.76.0/22
195.34.70.0/23
IPv6:
2a14:7a40::/29
Signature Algorithm: sha256WithRSAEncryption
05:ed:60:95:50:44:f8:ba:73:bf:33:f2:bb:33:5d:6a:f2:34:
ea:0f:92:04:f4:cc:c3:04:56:68:a2:54:eb:28:1c:84:3a:57:
79:9b:18:2b:8c:22:60:d1:23:ef:7a:3b:78:47:9a:7e:53:e0:
fb:4e:16:a0:1a:d2:3f:1f:56:be:ff:20:42:6e:83:40:bf:a6:
4e:05:ea:12:d8:de:9e:58:f9:91:c3:d3:0e:03:1a:6f:8e:6d:
5c:b1:54:4e:37:50:5d:71:e0:cc:fd:b3:7c:84:cb:1b:d2:d1:
62:3c:d8:60:1a:02:b0:26:5b:a7:6f:01:24:08:61:d2:d2:f1:
37:29:15:92:d0:e6:9a:d9:e2:dc:c5:db:b1:c0:a0:28:b7:9b:
25:23:8a:52:35:94:64:c5:b8:08:a2:10:ae:7b:41:0f:0c:a6:
b5:bf:df:89:d1:77:2e:01:c9:15:b9:4e:92:47:ba:13:c7:e9:
97:b6:a7:4a:84:f4:08:c7:ca:27:e9:0e:04:0f:db:e2:b4:3b:
d1:29:c0:ec:b5:92:4f:53:64:f1:95:95:4b:32:de:e7:85:fc:
12:b7:5c:b8:4d:ab:80:05:7e:55:93:54:4b:93:a2:07:cf:4d:
5e:f3:85:ce:35:5b:79:68:83:d9:ab:22:6f:49:a8:a7:b4:b1:
41:6b:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:28:50 2024 by rpki-client on console-fra.rpki-client.org