Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/QbZAqeXoqmYpLtoJzoXfF9QVpIg.roa
File: QbZAqeXoqmYpLtoJzoXfF9QVpIg.roa (raw, json)
Hash identifier: HkLyY5OKnW3IYRsHNkaSHTMiw2oVviyyeG3N27CBiNQ=
Subject key identifier: 41:B6:40:A9:E5:E8:AA:66:29:2E:DA:09:CE:85:DF:17:D4:15:A4:88
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 018F7BD323522ECEEDE3035B78FD63448D03
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/QbZAqeXoqmYpLtoJzoXfF9QVpIg.roa
Signing time: Wed 15 May 2024 10:36:25 +0000
ROA not before: Wed 15 May 2024 10:36:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4455
IP address blocks: 31.217.128.0/19 maxlen: 24
31.217.128.0/24 maxlen: 24
31.217.129.0/24 maxlen: 24
31.217.130.0/24 maxlen: 24
46.18.168.0/21 maxlen: 24
83.243.16.0/21 maxlen: 24
89.30.0.0/17 maxlen: 24
89.30.68.0/22 maxlen: 24
91.196.184.0/22 maxlen: 24
185.55.16.0/22 maxlen: 24
185.143.244.0/22 maxlen: 22
194.126.217.0/24 maxlen: 24
2a01:8200::/32 maxlen: 64
2a02:27f0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:d3:23:52:2e:ce:ed:e3:03:5b:78:fd:63:44:8d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: May 15 10:36:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41b640a9e5e8aa66292eda09ce85df17d415a488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:8d:9f:9c:18:24:93:6b:b0:69:52:ee:0d:
e2:57:b0:48:5a:bd:02:0b:2e:98:56:e0:2b:ab:ef:
08:3d:c5:74:5a:16:a9:de:e0:f2:26:26:19:dc:b1:
9c:10:85:9f:17:cc:03:70:65:ed:41:f3:be:ba:50:
16:b7:f6:cf:bc:92:6c:83:b3:d7:10:19:13:9e:f9:
1b:de:6b:7c:d5:dc:fb:ea:ff:81:db:6b:e8:1d:3f:
f7:95:58:fc:e9:2a:0d:5b:f4:03:db:70:ed:a3:7b:
55:01:97:37:3b:50:53:c9:fe:b9:b1:60:66:f2:74:
f4:56:8b:9c:c3:15:0d:b7:60:23:44:0b:20:e8:54:
7d:f6:e7:52:70:40:37:1f:26:da:80:82:55:5d:5f:
c4:15:93:bb:eb:95:ae:d0:6f:6c:6a:bf:99:88:31:
00:cd:05:6e:8d:82:12:e7:2d:4d:fe:ef:f3:ae:aa:
76:b3:37:13:c6:bf:b3:a9:b9:af:26:95:85:3e:88:
a2:4d:ca:dd:57:ef:4c:7f:1d:bf:97:fb:53:f2:05:
d4:d7:69:7c:ac:aa:c0:8d:ea:71:ee:e6:b4:74:f4:
05:17:cf:69:59:50:3c:42:a3:82:aa:2a:86:54:bb:
38:ad:1e:43:40:7d:5a:fc:95:39:42:22:80:41:62:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B6:40:A9:E5:E8:AA:66:29:2E:DA:09:CE:85:DF:17:D4:15:A4:88
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/QbZAqeXoqmYpLtoJzoXfF9QVpIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.128.0/19
46.18.168.0/21
83.243.16.0/21
89.30.0.0/17
91.196.184.0/22
185.55.16.0/22
185.143.244.0/22
194.126.217.0/24
IPv6:
2a01:8200::/32
2a02:27f0::/32
Signature Algorithm: sha256WithRSAEncryption
b3:f6:1d:77:f9:27:3c:de:19:8c:03:df:ff:83:ea:ff:f5:ab:
9c:bf:77:76:c4:40:04:33:0b:98:48:a8:22:d9:d4:eb:fa:40:
52:c0:5b:c0:33:a3:f3:15:74:b7:c2:69:45:56:69:78:1f:ab:
fe:46:b6:f8:d6:40:8e:2f:6f:0b:00:e8:ff:67:04:e8:ce:64:
df:7c:6a:4c:e5:34:a2:d1:bd:78:59:de:a4:6d:29:2a:c9:cf:
9d:88:1f:8c:f3:15:ce:1e:0e:cc:9d:d4:32:4d:d3:ab:6b:dd:
b0:74:2a:17:12:3c:e3:b0:04:ec:10:e8:b3:70:54:ce:0a:5d:
de:b1:74:da:86:d9:6f:d0:a4:9d:10:c3:9c:9b:12:15:40:7c:
ac:26:b2:37:70:95:4b:e2:5e:32:3c:8f:e0:9c:2a:c7:4c:a6:
3a:15:79:fa:54:eb:d7:68:a8:6f:2b:ec:ac:1c:19:15:7c:f0:
59:9b:e8:ea:e1:2c:41:e2:53:b7:eb:f0:89:7a:fd:a2:2c:8c:
c1:c5:f8:9d:66:b7:1d:0d:b2:ac:83:37:27:13:a1:86:27:e5:
74:4f:b9:4a:16:bf:36:0c:93:fe:5f:e7:4a:46:ca:fe:2b:44:
7b:08:b4:73:02:ba:dd:14:ab:67:db:54:76:83:c3:4c:ec:61:
26:1c:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:17:36 2024 by rpki-client on console-fra.rpki-client.org