Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/QPrRLWnzVbkF5DW4vhrKTwvLON8.roa
File: QPrRLWnzVbkF5DW4vhrKTwvLON8.roa (raw, json)
Hash identifier: I2fjDujIe0Ot+/kbSitYmC79ua50sh7hS1c+P9lmiOg=
Subject key identifier: 40:FA:D1:2D:69:F3:55:B9:05:E4:35:B8:BE:1A:CA:4F:0B:CB:38:DF
Certificate issuer: /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial: 018CC5DCC874AC685218E95E7F3F358C9DA4
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/QPrRLWnzVbkF5DW4vhrKTwvLON8.roa
Signing time: Mon 01 Jan 2024 16:30:29 +0000
ROA not before: Mon 01 Jan 2024 16:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57031
IP address blocks: 89.22.2.0/24 maxlen: 24
89.22.4.0/24 maxlen: 24
89.22.0.0/24 maxlen: 24
89.22.3.0/24 maxlen: 24
89.22.6.0/24 maxlen: 24
89.22.5.0/24 maxlen: 24
89.22.7.0/24 maxlen: 24
2001:67c:7c2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c8:74:ac:68:52:18:e9:5e:7f:3f:35:8c:9d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Validity
Not Before: Jan 1 16:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40fad12d69f355b905e435b8be1aca4f0bcb38df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:17:12:aa:28:2e:01:d1:f6:64:3b:ce:da:
82:82:ea:7f:6f:60:c1:dc:b8:e2:8e:4a:10:51:16:
b2:58:b7:cf:0b:d4:04:90:98:17:eb:f8:f0:93:03:
41:81:88:84:27:ca:76:f6:17:ac:8a:7c:99:32:ba:
b7:2f:75:e6:b7:5a:dd:f3:af:76:cc:80:48:7c:ed:
70:e8:d5:9a:f8:37:b9:df:6c:c9:0a:17:d5:42:5d:
38:6c:25:ae:b4:24:45:96:33:4e:1d:c3:fe:6d:08:
9f:e9:57:a6:a0:46:66:5c:95:ca:40:8c:a7:d8:ea:
c9:23:aa:a9:2a:d7:a3:c0:ee:12:03:67:94:d2:6b:
55:97:cb:11:2c:e2:08:c3:2d:2c:1f:f1:66:0d:4b:
e1:0d:ef:96:32:fa:fb:b1:e6:01:6b:bc:fd:45:29:
76:75:75:08:9d:af:57:ec:4b:3e:fa:c6:45:fc:42:
87:a1:74:ea:49:c5:1b:6e:de:08:ce:8c:70:f2:5a:
81:c5:53:ff:63:4c:5e:98:b0:ed:33:0c:69:88:dc:
f0:6d:49:18:a0:b0:b7:1e:a0:ce:2a:90:9f:65:99:
43:34:fa:83:34:4c:49:ec:72:31:38:9d:35:48:52:
ad:53:ee:a2:f8:94:99:68:3a:0b:2c:f4:d3:3a:10:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FA:D1:2D:69:F3:55:B9:05:E4:35:B8:BE:1A:CA:4F:0B:CB:38:DF
X509v3 Authority Key Identifier:
keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/QPrRLWnzVbkF5DW4vhrKTwvLON8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.0.0/24
89.22.2.0-89.22.7.255
IPv6:
2001:67c:7c2::/48
Signature Algorithm: sha256WithRSAEncryption
a1:a0:f8:01:d5:22:e1:db:d1:32:50:d4:63:2a:ab:8a:d2:58:
de:d8:b5:50:68:dc:b4:f7:08:a0:1d:7e:8b:63:48:6b:c5:f1:
84:f1:2b:91:1d:8c:74:a4:aa:ad:d4:42:56:01:36:39:00:6d:
6f:09:9e:8a:3a:7a:c7:bb:fa:a7:62:50:3a:1f:e8:8d:dc:45:
ae:ec:d9:46:ea:8c:ae:c2:03:b3:bf:54:64:13:ed:73:37:a3:
d2:2c:f8:52:e4:b5:3e:c5:b5:f2:23:c7:d2:6c:55:7e:a2:00:
7a:51:31:2e:1a:04:6c:2f:68:9c:bc:05:c0:54:77:be:01:4f:
99:cc:f8:82:94:2d:bf:66:72:b3:0b:4e:e4:16:74:3c:76:29:
96:a1:b5:50:94:36:a5:9b:b2:72:ea:c5:45:78:e5:11:7c:f4:
3f:dd:db:6e:76:61:6c:29:57:05:55:49:3d:04:15:5e:d3:3b:
49:bb:a8:9f:86:cb:19:93:ee:30:6b:a2:58:c9:44:41:16:2b:
e1:05:a2:5d:a2:62:95:72:0a:7d:bc:72:4e:6e:24:23:52:7b:
0b:3c:27:18:d8:d1:9e:af:af:b4:85:4e:5e:86:91:6d:33:a1:
1e:62:3d:ce:dc:ba:e9:18:a3:2f:da:48:26:25:33:75:78:1b:
94:d5:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:24 2024 by rpki-client on console-fra.rpki-client.org