Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/QdORfaeZ0gQa4fmUZOYsQarIry0.roa
File: QdORfaeZ0gQa4fmUZOYsQarIry0.roa (raw, json)
Hash identifier: auAFHeibTpAdQZF2DtjIUsSSjOdjbQ82Mlmi5bcbSmA=
Subject key identifier: 41:D3:91:7D:A7:99:D2:04:1A:E1:F9:94:64:E6:2C:41:AA:C8:AF:2D
Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial: 0190E3C87A2FF5D1DDD2BC7934790AE099D0
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/QdORfaeZ0gQa4fmUZOYsQarIry0.roa
Signing time: Wed 24 Jul 2024 08:08:04 +0000
ROA not before: Wed 24 Jul 2024 08:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49813
IP address blocks: 5.63.128.0/21 maxlen: 21
5.63.131.0/24 maxlen: 24
5.63.132.0/22 maxlen: 24
5.63.134.0/24 maxlen: 24
109.105.128.0/20 maxlen: 20
109.105.133.0/24 maxlen: 24
109.105.135.0/24 maxlen: 24
109.105.137.0/24 maxlen: 24
109.105.138.0/24 maxlen: 24
109.105.139.0/24 maxlen: 24
109.105.144.0/21 maxlen: 24
109.105.144.0/23 maxlen: 24
109.105.144.0/24 maxlen: 24
109.105.146.0/24 maxlen: 24
109.105.147.0/24 maxlen: 24
109.105.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e3:c8:7a:2f:f5:d1:dd:d2:bc:79:34:79:0a:e0:99:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Validity
Not Before: Jul 24 08:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41d3917da799d2041ae1f99464e62c41aac8af2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:30:9c:a5:35:0d:65:e3:27:51:82:ed:e9:
c3:20:1f:ef:62:ca:b8:b9:77:12:fd:95:d5:8b:f9:
b5:1e:86:5a:b5:b1:4f:26:b5:94:ad:b1:96:26:76:
bc:8d:78:1e:d9:00:22:3c:41:a8:eb:9e:67:2f:8f:
7d:fd:fb:95:7b:af:5b:54:8b:f6:c7:dd:78:b1:65:
33:2a:77:b0:05:0c:93:c2:00:64:b0:38:c2:c9:8f:
89:44:f0:13:1c:12:fb:b6:bf:70:b3:05:7f:f1:33:
3f:87:10:3a:d0:ef:2e:74:18:bf:2b:08:4c:76:15:
74:1a:d5:50:c3:11:69:bf:01:95:5a:83:11:04:13:
f6:50:2d:2c:68:f8:51:b9:7c:62:13:35:b1:37:ce:
81:6a:1c:a9:90:b3:6b:44:c5:6d:23:10:a3:d5:73:
7c:ee:83:57:39:1a:72:50:33:5d:3e:2a:09:a9:4b:
f3:7a:31:f0:d6:75:9e:b8:a6:77:92:2d:7f:84:0f:
f9:ac:35:3a:2d:79:61:1f:d8:cb:51:14:24:2b:88:
56:97:80:d6:6d:b2:3e:50:89:af:ea:00:32:dc:91:
73:6f:28:29:c3:7a:06:1d:91:58:c2:9f:86:76:0d:
1a:c1:7a:00:b3:49:9b:4c:cf:cc:3a:af:a3:53:1e:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D3:91:7D:A7:99:D2:04:1A:E1:F9:94:64:E6:2C:41:AA:C8:AF:2D
X509v3 Authority Key Identifier:
keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/QdORfaeZ0gQa4fmUZOYsQarIry0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.128.0/21
109.105.128.0-109.105.151.255
Signature Algorithm: sha256WithRSAEncryption
1c:df:86:8e:09:52:ec:72:12:a4:af:8f:76:07:d5:56:09:b3:
a9:7a:3d:fc:b2:2a:49:64:c0:86:24:55:e6:80:a2:ba:35:a6:
a0:6e:5e:47:66:e1:28:8d:75:0f:80:94:58:a4:7d:92:f6:91:
6e:74:70:4e:52:39:28:41:f5:be:2c:c9:3f:51:bb:4b:1d:cd:
89:cd:25:aa:d5:13:c8:af:f8:dc:b3:7a:17:af:49:e2:0b:b8:
47:e1:5e:cd:cb:67:3f:61:a5:7a:08:3b:2d:2b:4f:1b:57:01:
c4:44:07:a2:aa:36:a0:ad:96:44:97:9c:64:fc:14:92:83:ae:
05:65:2c:8d:c7:98:50:a4:20:ab:45:d7:41:31:be:f9:2d:9d:
95:2f:20:c6:a2:a2:2f:13:71:c4:f0:0c:e3:14:f3:af:aa:c8:
01:75:dc:e0:f4:3a:55:16:12:22:45:82:09:40:c5:0e:e9:37:
01:4d:d8:2d:37:4c:1d:67:02:f8:0b:35:3a:b0:72:e0:79:1c:
ae:10:55:a1:3c:b6:9c:73:cd:f4:cc:6f:23:43:06:6c:91:16:
58:de:5a:57:f9:28:d1:2c:5f:ed:ab:46:82:6f:6c:82:7c:95:
fd:b6:52:64:f6:80:a6:06:52:c8:97:67:55:62:4d:19:4a:ef:
8e:d2:a5:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:51:44 2024 by rpki-client on console-fra.rpki-client.org