Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/QFXGVuzGtPAe2QqL2Ej6N_cba6c.roa
File: QFXGVuzGtPAe2QqL2Ej6N_cba6c.roa (raw, json)
Hash identifier: JtZegYdbqggcw/4o6Ray35tLdWisFaW+gybIGQ+PLJQ=
Subject key identifier: 40:55:C6:56:EC:C6:B4:F0:1E:D9:0A:8B:D8:48:FA:37:F7:1B:6B:A7
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 0191677A208CD32E2B4A71D005503F69C93C
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/QFXGVuzGtPAe2QqL2Ej6N_cba6c.roa
Signing time: Sun 18 Aug 2024 21:52:22 +0000
ROA not before: Sun 18 Aug 2024 21:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57363
IP address blocks: 91.231.234.0/24 maxlen: 24
91.231.235.0/24 maxlen: 24
91.231.236.0/24 maxlen: 24
91.231.237.0/24 maxlen: 24
91.231.239.0/24 maxlen: 24
91.238.108.0/24 maxlen: 24
91.238.109.0/24 maxlen: 24
91.238.110.0/24 maxlen: 24
91.240.168.0/24 maxlen: 24
91.240.169.0/24 maxlen: 24
91.240.170.0/24 maxlen: 24
91.240.171.0/24 maxlen: 24
151.236.64.0/24 maxlen: 24
151.236.65.0/24 maxlen: 24
151.236.67.0/24 maxlen: 24
151.236.68.0/24 maxlen: 24
151.236.70.0/24 maxlen: 24
151.236.72.0/24 maxlen: 24
151.236.73.0/24 maxlen: 24
151.236.74.0/24 maxlen: 24
151.236.75.0/24 maxlen: 24
151.236.76.0/24 maxlen: 24
151.236.77.0/24 maxlen: 24
151.236.78.0/24 maxlen: 24
151.236.80.0/24 maxlen: 24
151.236.81.0/24 maxlen: 24
151.236.83.0/24 maxlen: 24
151.236.84.0/24 maxlen: 24
151.236.85.0/24 maxlen: 24
151.236.86.0/24 maxlen: 24
151.236.87.0/24 maxlen: 24
151.236.88.0/24 maxlen: 24
151.236.89.0/24 maxlen: 24
151.236.90.0/24 maxlen: 24
151.236.91.0/24 maxlen: 24
151.236.95.0/24 maxlen: 24
151.236.96.0/24 maxlen: 24
151.236.99.0/24 maxlen: 24
151.236.100.0/24 maxlen: 24
151.236.102.0/24 maxlen: 24
151.236.106.0/24 maxlen: 24
151.236.107.0/24 maxlen: 24
151.236.109.0/24 maxlen: 24
151.236.110.0/23 maxlen: 23
151.236.111.0/24 maxlen: 24
151.236.113.0/24 maxlen: 24
151.236.122.0/23 maxlen: 23
151.236.123.0/24 maxlen: 24
151.236.125.0/24 maxlen: 24
185.31.112.0/24 maxlen: 24
185.31.114.0/24 maxlen: 24
185.31.115.0/24 maxlen: 24
2a02:aec0:1::/48 maxlen: 48
2a02:aec0:2::/48 maxlen: 48
2a02:aec0:3::/48 maxlen: 48
2a02:aec0:5::/48 maxlen: 48
2a02:aec0:6::/48 maxlen: 48
2a02:aec0:7::/48 maxlen: 48
2a02:aec0:8::/48 maxlen: 48
2a02:aec0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:67:7a:20:8c:d3:2e:2b:4a:71:d0:05:50:3f:69:c9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Aug 18 21:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4055c656ecc6b4f01ed90a8bd848fa37f71b6ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:dc:7e:5e:dc:a3:7b:75:8a:dd:bd:f9:ea:
e6:75:ad:5b:c0:bb:48:60:a8:e6:f4:3b:b6:72:b4:
04:1b:e2:27:84:18:bf:58:0e:3e:78:c2:56:9d:f4:
2b:95:ab:b5:c1:f5:6b:cd:1d:a1:68:63:29:f9:29:
d5:66:70:f4:fc:f5:64:d1:79:1d:72:92:a9:e7:fe:
f8:5a:c1:5f:94:fb:a3:6c:93:c3:45:f7:2b:f3:6e:
90:06:3c:b8:9c:dc:47:ca:66:80:b9:e5:8a:ea:0e:
89:56:80:e6:22:14:da:26:a3:22:8d:78:4c:c9:4d:
c9:b2:fb:d1:9f:c2:20:26:53:78:74:f5:77:1b:bf:
67:4a:25:77:9c:26:6c:f6:83:49:9b:94:75:d4:94:
d2:1d:8c:ce:19:95:04:72:2f:53:3b:ca:d3:8f:77:
c0:57:90:7e:ee:87:37:43:ff:17:20:8a:10:e0:09:
0d:f9:e6:93:7c:c0:e4:b1:0c:87:f9:d4:18:27:aa:
6d:9d:e0:2a:b6:cf:83:c0:c8:47:7e:42:cc:9b:53:
e8:11:79:ee:bb:bc:f2:18:c7:2a:77:2c:fb:20:8d:
0f:e3:3d:64:7f:6d:0e:25:89:f2:65:8d:3c:1a:d0:
4a:8c:6a:c7:24:1b:30:ca:15:35:df:78:a3:9c:e6:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:C6:56:EC:C6:B4:F0:1E:D9:0A:8B:D8:48:FA:37:F7:1B:6B:A7
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/QFXGVuzGtPAe2QqL2Ej6N_cba6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.234.0-91.231.237.255
91.231.239.0/24
91.238.108.0-91.238.110.255
91.240.168.0/22
151.236.64.0/23
151.236.67.0-151.236.68.255
151.236.70.0/24
151.236.72.0-151.236.78.255
151.236.80.0/23
151.236.83.0-151.236.91.255
151.236.95.0-151.236.96.255
151.236.99.0-151.236.100.255
151.236.102.0/24
151.236.106.0/23
151.236.109.0-151.236.111.255
151.236.113.0/24
151.236.122.0/23
151.236.125.0/24
185.31.112.0/24
185.31.114.0/23
IPv6:
2a02:aec0:1::-2a02:aec0:3:ffff:ffff:ffff:ffff:ffff
2a02:aec0:5::-2a02:aec0:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
60:c1:aa:31:12:41:5e:4c:23:39:1d:84:cf:e7:36:87:15:fb:
15:56:91:0d:65:b5:86:62:c0:a2:5e:f7:80:78:1e:5a:f3:bb:
5a:70:c3:da:b4:56:5b:f9:8a:e8:4b:75:b5:cc:22:94:30:a6:
15:36:1f:6d:2b:13:cc:35:dc:8e:84:08:a3:ee:ae:03:5d:92:
aa:8d:aa:28:31:cd:a6:1d:71:66:3d:fa:a4:ae:5e:5c:83:df:
95:43:f0:eb:d7:a9:fe:30:fa:1b:bd:b7:44:0b:b5:3e:80:2a:
b2:82:3b:09:b2:c5:c7:bb:54:de:38:80:9e:ed:d8:31:cb:62:
a2:be:bf:53:70:52:bb:ff:fe:01:7c:fb:b1:17:5a:6c:88:7e:
ae:c3:b0:bc:81:0e:3e:1d:31:ee:31:8a:10:9d:92:4c:f0:64:
d6:f2:e8:13:45:ac:43:3c:36:19:b4:a2:66:90:07:c4:7c:db:
ab:60:b5:c9:96:d7:09:d4:ac:cd:b4:d0:58:e7:59:b6:71:eb:
c4:54:1f:64:c6:d5:d4:fc:5c:7c:f0:1f:a0:eb:e8:81:4d:ce:
74:24:7f:fb:92:71:db:18:37:24:4c:05:ed:36:19:1a:6f:66:
62:b3:18:dd:19:98:08:24:35:c9:49:33:81:8c:a5:cd:58:ad:
83:99:d6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:18:46 2024 by rpki-client on console-fra.rpki-client.org