Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/71qVwY5qrT2g6VhQlQvQ9IM9q3M.roa
File: 71qVwY5qrT2g6VhQlQvQ9IM9q3M.roa (raw, json)
Hash identifier: cgcb1YkfkdFVKUOKqRnVLMVBegRHXaJV+lpw/pOFPoI=
Subject key identifier: EF:5A:95:C1:8E:6A:AD:3D:A0:E9:58:50:95:0B:D0:F4:83:3D:AB:73
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 018CC26D72F760375F3C2C0F7CDA9BABA692
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/71qVwY5qrT2g6VhQlQvQ9IM9q3M.roa
Signing time: Mon 01 Jan 2024 00:30:01 +0000
ROA not before: Mon 01 Jan 2024 00:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 192.129.28.0/23 maxlen: 23
192.129.31.0/24 maxlen: 24
192.129.26.0/23 maxlen: 23
141.39.0.0/16 maxlen: 16
192.76.176.0/24 maxlen: 24
188.1.0.0/16 maxlen: 16
195.37.0.0/16 maxlen: 16
192.108.71.0/24 maxlen: 24
192.108.67.0/24 maxlen: 24
192.108.70.0/24 maxlen: 24
192.108.69.0/24 maxlen: 24
194.94.0.0/15 maxlen: 15
193.174.0.0/15 maxlen: 15
212.201.0.0/16 maxlen: 16
2001:638::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:72:f7:60:37:5f:3c:2c:0f:7c:da:9b:ab:a6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Jan 1 00:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef5a95c18e6aad3da0e95850950bd0f4833dab73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:0d:91:ba:e4:32:67:8a:a7:36:70:b2:f9:
c6:79:a4:69:a2:b9:55:3b:21:bc:a1:da:18:11:33:
a2:8b:c0:3c:bc:e9:ba:33:4f:a8:f1:aa:2a:b6:cb:
f6:9f:52:03:71:d2:bf:80:7d:3e:ed:2f:1a:a3:cf:
b9:4e:d4:d3:07:8c:b8:20:cc:36:d9:50:3e:ee:e4:
9e:d3:fc:28:cf:fa:49:02:dd:e3:f9:b9:b1:d5:7c:
cc:87:ac:1d:f9:32:fd:35:27:16:a7:a7:54:3c:a1:
da:01:5b:b5:d3:0b:b3:7f:e7:07:3a:86:85:44:4c:
af:00:95:7a:f0:71:01:80:c8:09:b0:6f:d0:08:2d:
6a:2a:70:11:ee:ac:02:cd:1a:6c:21:03:d8:fb:10:
46:30:33:e0:6f:70:22:0e:75:42:93:1f:2c:29:cb:
b9:32:ad:62:44:9f:3a:23:59:54:79:b2:52:f9:5e:
3e:7f:6d:2f:54:52:1a:d7:d5:09:c9:05:4e:63:84:
de:1d:fd:e1:18:33:c5:4a:cc:36:2b:9a:60:d5:8e:
4a:32:c9:df:ab:7f:53:ef:7e:0a:22:8b:6d:27:d7:
5f:9c:bc:5e:c3:9a:17:1b:76:b3:c3:84:35:e9:f7:
79:8c:12:40:2b:fb:a5:36:1a:ee:67:b6:46:06:1d:
09:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:95:C1:8E:6A:AD:3D:A0:E9:58:50:95:0B:D0:F4:83:3D:AB:73
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/71qVwY5qrT2g6VhQlQvQ9IM9q3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.39.0.0/16
188.1.0.0/16
192.76.176.0/24
192.108.67.0/24
192.108.69.0-192.108.71.255
192.129.26.0-192.129.29.255
192.129.31.0/24
193.174.0.0/15
194.94.0.0/15
195.37.0.0/16
212.201.0.0/16
IPv6:
2001:638::/32
Signature Algorithm: sha256WithRSAEncryption
2c:c5:53:97:05:d6:07:3c:71:9c:24:a1:bb:d5:d6:5e:c0:23:
53:9b:0a:a0:3b:50:a1:93:29:57:08:70:b5:28:c0:18:46:74:
4f:46:c5:5d:14:be:ee:ba:5b:40:68:25:d6:0c:39:8a:53:79:
d8:a1:c3:e3:eb:c4:af:ae:da:b4:9b:ec:1b:b3:33:89:bc:9c:
c5:ad:67:15:1c:68:f9:30:f5:4f:75:3e:5d:37:32:8b:f9:de:
9e:78:f8:3b:04:e3:63:33:08:c8:7b:ca:bc:4d:38:83:31:fa:
48:e1:a8:06:f3:77:eb:a4:71:a0:57:c5:ee:ba:a6:5a:2f:0e:
b9:8f:9d:47:07:6e:99:b5:f7:6a:9e:24:9d:e7:2f:7a:47:ce:
a3:fb:2c:2a:11:a2:ed:0f:ac:a9:5c:e7:1e:c3:69:c9:03:2c:
08:cf:f5:24:92:dd:5b:3c:e1:a9:03:3c:dc:00:3e:ad:80:9c:
76:34:6a:c3:ec:84:42:e6:49:ff:89:c5:d5:6e:10:04:9d:11:
0c:8c:07:13:3a:fd:b0:3f:11:81:1b:74:d9:1f:04:b9:18:97:
61:5d:21:cd:28:69:05:fb:13:53:6d:48:2a:8e:5b:14:bd:69:
75:83:21:99:df:7c:ed:7e:99:64:5e:27:07:e0:5f:f5:77:10:
1e:80:d7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:23:30 2024 by rpki-client on console-ams.rpki-client.org