Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/mqmGBwbbm27yeAeqT_vkQTPOwMg.roa
File: mqmGBwbbm27yeAeqT_vkQTPOwMg.roa (raw, json)
Hash identifier: Y0HjEXilvhKWRhjYGZ6xahhczlUpJ4L6t3QFISuSqx0=
Subject key identifier: 9A:A9:86:07:06:DB:9B:6E:F2:78:07:AA:4F:FB:E4:41:33:CE:C0:C8
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 01923F7A8CF6BE70F4AD6728241991E89E20
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/mqmGBwbbm27yeAeqT_vkQTPOwMg.roa
Signing time: Sun 29 Sep 2024 20:30:48 +0000
ROA not before: Sun 29 Sep 2024 20:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 92.39.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3f:7a:8c:f6:be:70:f4:ad:67:28:24:19:91:e8:9e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Sep 29 20:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9aa9860706db9b6ef27807aa4ffbe44133cec0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:b4:06:88:72:b2:a2:df:f1:9a:c4:98:26:
d1:f5:95:ab:b2:17:6c:fc:af:94:2c:51:94:ea:c6:
61:be:a4:81:bc:06:97:f5:ec:cc:8d:db:5e:dd:bc:
68:cf:2c:a2:0d:6a:8b:da:8a:d5:8b:51:2b:20:77:
e3:e2:1c:d0:d3:9a:6b:d7:4f:67:a3:d9:ab:ff:5a:
3e:a3:c9:a2:0a:1e:90:ce:4b:70:58:6a:f9:55:20:
d8:88:cc:36:c1:47:1a:cf:16:28:70:32:07:74:84:
29:5b:cb:0e:f1:7c:f4:e0:65:93:2a:fd:b5:01:01:
67:ee:e4:f3:5d:5f:7f:22:7f:f9:2a:a2:49:00:0e:
bb:0e:8b:42:1c:b6:36:3b:d3:e0:38:0b:b5:3a:57:
57:0d:3d:ac:d8:7e:f0:60:78:bb:64:7d:2d:ed:15:
a3:4c:d0:6a:6a:7e:6d:7f:cb:08:de:15:fb:bc:88:
d4:65:8f:eb:ad:57:66:fe:22:9d:a0:33:84:cf:13:
9b:a5:14:38:86:3a:12:fa:c9:78:35:99:ed:de:f3:
0c:8d:d5:5a:a7:d3:ff:b8:a1:fb:47:69:1d:06:4c:
b7:99:07:80:24:95:6b:9b:81:aa:bb:bc:40:19:d0:
3a:88:21:b8:ea:43:6f:47:82:d6:b8:87:49:a2:c0:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A9:86:07:06:DB:9B:6E:F2:78:07:AA:4F:FB:E4:41:33:CE:C0:C8
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/mqmGBwbbm27yeAeqT_vkQTPOwMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.48.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:f5:3e:d9:64:22:47:f5:7b:a2:b4:85:cd:3f:15:37:bc:5b:
12:27:67:02:bf:9a:70:05:f6:e1:11:d5:57:70:d7:db:4e:67:
50:00:4c:71:57:94:d1:aa:2d:02:8f:70:7a:9f:50:f0:b8:63:
fd:38:17:bb:d7:d5:9a:20:fe:30:89:56:fd:cc:ff:1a:2f:06:
47:f2:0d:81:48:54:03:03:5c:9e:7e:06:63:7f:10:71:6e:d9:
a6:cb:13:ea:37:b7:74:f2:0f:8f:21:6d:4d:f3:1f:f4:6c:8b:
db:5c:31:ad:0c:c8:d3:97:5b:c1:1d:fe:55:c7:b9:5c:bb:69:
6c:f9:f8:b6:4d:e8:97:65:90:36:f4:91:28:33:03:46:1a:20:
ec:01:43:27:28:c7:25:ed:e1:1b:04:f5:87:5f:02:b8:75:07:
39:c0:af:23:2f:97:db:f6:8c:d9:f4:56:95:01:d7:5b:5a:ed:
78:0d:87:02:5a:c8:48:20:5e:ae:75:07:5c:2e:21:dd:79:11:
6c:7b:9e:1f:63:92:4d:42:76:5e:83:21:d8:16:03:db:a2:ed:
06:24:c1:f8:0d:9b:1a:c6:e5:ff:0a:fb:ac:44:f6:87:40:41:
22:53:ac:b8:15:70:2b:62:aa:0c:35:36:15:95:85:a9:7f:e0:
e1:4c:65:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZI/eoz2vnD0rWcoJBmR6J4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzUxMTRhZGMyY2Y4ZWRlYTUwNTk1N2U3OWU4OTA0NDI2
NmMyNGUwHhcNMjQwOTI5MjAzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWE5ODYwNzA2ZGI5YjZlZjI3ODA3YWE0ZmZiZTQ0MTMzY2VjMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxma0BohysqLf8ZrEmCbR9ZWrshds
/K+ULFGU6sZhvqSBvAaX9ezMjdte3bxozyyiDWqL2orVi1ErIHfj4hzQ05pr109n
o9mr/1o+o8miCh6QzktwWGr5VSDYiMw2wUcazxYocDIHdIQpW8sO8Xz04GWTKv21
AQFn7uTzXV9/In/5KqJJAA67DotCHLY2O9PgOAu1OldXDT2s2H7wYHi7ZH0t7RWj
TNBqan5tf8sI3hX7vIjUZY/rrVdm/iKdoDOEzxObpRQ4hjoS+sl4NZnt3vMMjdVa
p9P/uKH7R2kdBky3mQeAJJVrm4Gqu7xAGdA6iCG46kNvR4LWuIdJosDsUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJqphgcG25tu8ngHqk/75EEzzsDIMB8GA1UdIwQY
MBaAFFx1EUrcLPjt6lBZV+eeiQRCZsJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMt
YzVkYzA5NGRmOWM0LzEvbXFtR0J3YmJtMjd5ZUFlcVRfdmtRVFBPd01nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMtYzVkYzA5NGRmOWM0
LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXCcwMA0G
CSqGSIb3DQEBCwUAA4IBAQA69T7ZZCJH9XuitIXNPxU3vFsSJ2cCv5pwBfbhEdVX
cNfbTmdQAExxV5TRqi0Cj3B6n1DwuGP9OBe719WaIP4wiVb9zP8aLwZH8g2BSFQD
A1yefgZjfxBxbtmmyxPqN7d08g+PIW1N8x/0bIvbXDGtDMjTl1vBHf5Vx7lcu2ls
+fi2TeiXZZA29JEoMwNGGiDsAUMnKMcl7eEbBPWHXwK4dQc5wK8jL5fb9ozZ9FaV
AddbWu14DYcCWshIIF6udQdcLiHdeRFse54fY5JNQnZegyHYFgPbou0GJMH4DZsa
xuX/CvusRPaHQEEiU6y4FXArYqoMNTYVlYWpf+DhTGWf
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:13:40 2024 by rpki-client on console-ams.rpki-client.org