Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/CGqcftP4jSQGgyZ7kYZwgoPIjUY.roa
File: CGqcftP4jSQGgyZ7kYZwgoPIjUY.roa (raw, json)
Hash identifier: E0Ttulw3fmOMOLmOGsIAz/vD8Y7rHub/jJjd7Guc0sQ=
Subject key identifier: 08:6A:9C:7E:D3:F8:8D:24:06:83:26:7B:91:86:70:82:83:C8:8D:46
Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial: 019344F5A6EBB8E2F41265E4A80703196B66
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/CGqcftP4jSQGgyZ7kYZwgoPIjUY.roa
Signing time: Tue 19 Nov 2024 15:06:09 +0000
ROA not before: Tue 19 Nov 2024 15:06:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49121
IP address blocks: 5.57.209.0/24 maxlen: 24
37.221.68.0/24 maxlen: 24
37.221.69.0/24 maxlen: 24
37.221.70.0/24 maxlen: 24
37.221.71.0/24 maxlen: 24
45.87.117.0/24 maxlen: 24
45.87.118.0/24 maxlen: 24
45.87.119.0/24 maxlen: 24
185.186.0.0/24 maxlen: 24
185.186.1.0/24 maxlen: 24
185.232.166.0/24 maxlen: 24
194.61.10.0/23 maxlen: 23
194.147.74.0/23 maxlen: 23
2a09:e200::/48 maxlen: 48
2a09:e200:e200::/48 maxlen: 48
2a09:e206:c1::/48 maxlen: 48
2a09:e207:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:f5:a6:eb:b8:e2:f4:12:65:e4:a8:07:03:19:6b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Validity
Not Before: Nov 19 15:06:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=086a9c7ed3f88d240683267b9186708283c88d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:d8:f8:ef:93:c9:83:c0:35:bd:31:24:2c:
6b:e1:21:14:8c:2b:46:44:4d:48:8e:22:66:92:23:
b4:62:88:b0:52:07:d5:36:a5:df:1b:22:c1:b6:b9:
4e:d0:76:f5:ad:5e:b0:70:fe:eb:7a:cc:65:74:4e:
d0:31:63:51:8f:27:c5:52:f3:44:19:4a:56:27:b2:
f3:a8:4f:89:f9:6b:1e:b4:ff:37:5e:8d:a5:61:3a:
ee:a8:b7:22:94:b2:d4:eb:76:cd:28:c3:23:aa:44:
2d:a5:34:a1:4a:0a:1a:b2:89:9e:29:c6:9e:35:b5:
eb:60:11:84:89:5d:4f:5e:90:e5:86:e8:e0:73:4e:
31:4c:e4:10:fd:27:5c:dd:28:a2:28:1f:19:92:9a:
74:f8:84:ef:b3:21:11:40:6b:6a:0f:df:15:81:0f:
26:3e:b4:89:01:cf:cc:42:e4:1a:c1:14:71:9d:a8:
bd:b4:f4:ba:d7:51:91:02:ab:0f:d8:b0:c4:2c:a8:
1c:35:84:75:89:36:eb:bd:b8:8c:14:7a:af:27:5d:
b5:36:ae:35:a2:75:ed:ae:a6:0d:87:70:c7:7f:f4:
0e:c2:54:d7:a4:42:53:d2:b6:10:93:1e:50:45:7e:
2d:5d:cd:29:9c:18:82:46:71:77:a0:7f:3c:9c:c7:
55:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6A:9C:7E:D3:F8:8D:24:06:83:26:7B:91:86:70:82:83:C8:8D:46
X509v3 Authority Key Identifier:
keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/CGqcftP4jSQGgyZ7kYZwgoPIjUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.209.0/24
37.221.68.0/22
45.87.117.0-45.87.119.255
185.186.0.0/23
185.232.166.0/24
194.61.10.0/23
194.147.74.0/23
IPv6:
2a09:e200::/48
2a09:e200:e200::/48
2a09:e206:c1::/48
2a09:e207:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
81:4d:15:8f:1d:da:8e:bf:06:95:c1:68:f9:8f:3a:31:a3:2e:
e2:1a:d3:8b:ef:3f:07:e0:be:53:d8:40:10:91:44:f6:55:85:
ec:30:c6:bc:55:cf:32:c2:24:ac:08:03:5c:17:f6:4f:bf:ed:
03:4e:a4:10:75:67:44:36:ea:b5:af:37:d7:19:84:6e:85:15:
b5:7f:a0:04:69:83:e8:aa:c9:ea:ca:dc:02:9f:90:cd:1c:75:
96:c6:79:48:0b:e7:16:37:7c:59:a7:8c:ee:02:e8:96:24:4f:
64:61:44:63:1a:ce:a4:85:2b:33:c5:c4:b7:dc:fb:1e:2e:11:
d7:4d:99:ce:4e:f3:22:f2:44:f5:bc:82:04:1b:a2:b8:1c:ea:
09:25:25:d6:36:4b:d9:de:d3:5e:55:0c:af:15:b3:e0:e9:c4:
e1:58:d1:d5:a1:22:3b:bb:48:a4:e0:2d:11:a8:a1:52:90:2b:
b3:eb:65:54:8f:51:cb:a2:57:42:b4:0a:b1:c9:3c:27:05:8d:
25:17:63:8f:09:76:f3:42:36:1e:55:d9:fd:39:c4:f1:ad:48:
6e:05:a6:fd:d5:cc:f2:e4:0a:ab:3c:61:eb:7a:b5:69:be:cb:
67:fa:99:63:88:8b:8a:ae:3a:ab:d6:33:df:99:0c:72:5c:dc:
ee:a3:5b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:14:54 2024 by rpki-client on console-fra.rpki-client.org