Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/oZLqXVLxj4lhyj3tm_CaixN2xKw.roa
File: oZLqXVLxj4lhyj3tm_CaixN2xKw.roa (raw, json)
Hash identifier: WGJibfut0HNwds3JCmWl/TY7yeghS0cZJbSZxzqBPD8=
Subject key identifier: A1:92:EA:5D:52:F1:8F:89:61:CA:3D:ED:9B:F0:9A:8B:13:76:C4:AC
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 0192C50FC122AEDB2849AE188D648459D957
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/oZLqXVLxj4lhyj3tm_CaixN2xKw.roa
Signing time: Fri 25 Oct 2024 19:03:16 +0000
ROA not before: Fri 25 Oct 2024 19:03:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12329
IP address blocks: 62.221.232.0/21 maxlen: 24
62.221.240.0/21 maxlen: 24
81.173.6.0/24 maxlen: 24
156.67.59.0/24 maxlen: 24
185.154.112.0/22 maxlen: 24
185.249.168.0/22 maxlen: 24
212.23.128.0/19 maxlen: 24
2001:7d8::/32 maxlen: 48
2a07:8c80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c5:0f:c1:22:ae:db:28:49:ae:18:8d:64:84:59:d9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Oct 25 19:03:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a192ea5d52f18f8961ca3ded9bf09a8b1376c4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:5c:18:5b:fc:f4:6e:00:6d:94:85:f4:7c:
64:29:28:52:ca:58:c9:2b:0d:9a:b0:37:de:92:92:
fb:76:4d:08:f7:97:b1:c1:7f:c0:5c:e9:f6:c4:99:
93:c4:83:93:af:ed:c2:ec:3c:de:8c:ae:b9:3b:bf:
52:5c:69:0e:1c:c4:a0:06:94:44:1b:ba:6d:99:1e:
48:21:81:29:50:4c:66:47:e4:19:f6:ec:4e:03:36:
48:15:12:b0:0d:18:45:1a:bc:77:55:ef:95:91:e3:
c3:78:4a:3a:e1:2a:bf:c8:e8:1d:b4:fa:e3:f1:f7:
bb:d7:34:d8:d9:22:de:2c:19:f7:ea:1b:ec:e6:a1:
96:20:a5:9d:59:89:ca:84:24:15:3f:e7:d5:e4:d2:
d7:43:1d:0a:41:47:58:21:ea:c3:29:ad:18:a8:c4:
23:da:75:38:bf:ab:32:b0:38:2f:f6:f0:cd:d7:52:
ba:d6:23:0c:05:a1:a4:96:31:dc:90:c2:b5:5d:96:
4e:4a:68:66:9d:68:79:0d:c9:c3:03:df:78:52:ae:
0b:a6:4d:8e:4e:e2:bb:c8:ef:3b:59:c7:1f:dd:9c:
1c:7f:89:64:b0:39:6b:0d:8a:a5:14:2c:3b:09:01:
2a:80:fd:4f:60:b6:c7:1b:6a:2f:64:3a:f4:e1:c2:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:92:EA:5D:52:F1:8F:89:61:CA:3D:ED:9B:F0:9A:8B:13:76:C4:AC
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/oZLqXVLxj4lhyj3tm_CaixN2xKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.221.232.0-62.221.247.255
81.173.6.0/24
156.67.59.0/24
185.154.112.0/22
185.249.168.0/22
212.23.128.0/19
IPv6:
2001:7d8::/32
2a07:8c80::/29
Signature Algorithm: sha256WithRSAEncryption
45:27:79:2c:6e:20:32:66:0e:b4:2d:17:e6:d8:62:d0:22:8d:
1d:dd:e1:51:de:a1:9c:00:3e:d2:8d:8c:a9:f6:d5:08:bf:ba:
a3:f1:0e:d0:91:fa:08:b6:cc:94:8d:1a:de:29:bb:32:9b:64:
75:63:e0:90:51:d7:44:aa:ce:de:ba:ef:e5:f5:44:44:79:0e:
c6:4a:c2:15:8c:a1:98:cd:4e:dc:91:69:5c:13:e4:db:80:0a:
a6:12:d6:28:4d:c3:ca:b6:5f:37:ff:83:d4:14:48:ae:32:79:
91:af:3e:81:35:f3:49:c0:c6:a7:00:a2:b1:36:02:53:ab:e5:
29:86:db:d5:2c:83:08:6d:10:16:15:3a:c3:c0:67:eb:c4:e7:
74:c0:9d:fa:53:f2:e3:19:f6:00:cc:f0:d1:77:ea:80:e2:78:
0c:81:83:70:5c:85:ff:da:06:c7:48:08:b5:d9:5b:30:4b:28:
1c:2b:b3:d6:69:37:ea:0f:e4:8b:00:56:ad:2e:2b:00:7d:3e:
19:1a:69:7a:65:b7:78:19:b2:f6:d7:d3:db:2d:23:6d:0e:a9:
8e:bc:81:17:b5:d9:84:8b:e8:21:7b:76:86:fd:f9:5e:25:59:
3c:82:f7:95:8b:75:0a:37:6c:c4:29:2d:43:60:07:7d:5d:f7:
c0:f5:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:06:21 2024 by rpki-client on console-ams.rpki-client.org