Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/Q5WwxtJyNeZmninO_w84f9TDYI4.roa
File: Q5WwxtJyNeZmninO_w84f9TDYI4.roa (raw, json)
Hash identifier: nGM5sQxQMfAA1QZ5n9VsF3robG99+0+krCF3EJBPWUQ=
Subject key identifier: 43:95:B0:C6:D2:72:35:E6:66:9E:29:CE:FF:0F:38:7F:D4:C3:60:8E
Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial: 018CC6B88BF02B9ACBEE11F6A6BB0076AB20
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/Q5WwxtJyNeZmninO_w84f9TDYI4.roa
Signing time: Mon 01 Jan 2024 20:30:32 +0000
ROA not before: Mon 01 Jan 2024 20:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50324
IP address blocks: 89.39.128.0/21 maxlen: 32
178.19.208.0/20 maxlen: 32
185.28.184.0/22 maxlen: 32
176.126.216.0/22 maxlen: 32
2a04:a40::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:8b:f0:2b:9a:cb:ee:11:f6:a6:bb:00:76:ab:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Validity
Not Before: Jan 1 20:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4395b0c6d27235e6669e29ceff0f387fd4c3608e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:21:f5:db:35:53:a7:cc:91:49:7f:f6:c7:
a7:d9:fb:f9:8b:2a:b4:b2:0e:20:48:b5:d5:0d:52:
4f:35:d4:68:ce:9b:97:68:d3:3c:0b:09:30:9e:94:
8a:e4:b7:28:7a:80:bc:46:9e:6e:21:0d:4c:07:03:
fd:d6:61:1d:13:d9:f0:eb:ed:fc:4c:d5:17:9b:2a:
6f:43:84:b0:60:4a:9d:d1:0a:ce:be:5b:6e:be:31:
de:c2:0e:aa:85:b4:65:a1:d8:49:b8:42:78:8b:c9:
7b:65:d1:c0:8f:ed:ed:cd:4e:fd:26:4d:f0:03:2d:
3d:cc:39:3f:59:6f:a0:a1:80:bf:0a:0f:3a:76:65:
6e:9c:d7:b5:2d:8a:01:bd:44:75:fc:b9:66:9e:7c:
49:70:d4:8f:4f:b9:15:fc:07:82:37:96:c6:43:9b:
21:3f:ba:a3:37:e2:c6:52:d6:b9:0a:67:06:df:08:
72:ee:da:fe:ce:8e:bd:e9:a8:78:8f:99:94:cb:2a:
c6:0a:cf:11:bb:15:23:7d:49:56:cc:6f:86:ff:7e:
4b:f3:0c:76:c8:80:11:29:13:3a:ac:c5:2c:90:53:
3c:4e:36:60:c4:f0:b3:37:59:c7:d2:6a:eb:81:ac:
9a:47:92:fa:15:b9:9e:7f:97:e4:80:5a:9c:3f:36:
d7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:95:B0:C6:D2:72:35:E6:66:9E:29:CE:FF:0F:38:7F:D4:C3:60:8E
X509v3 Authority Key Identifier:
keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/Q5WwxtJyNeZmninO_w84f9TDYI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.128.0/21
176.126.216.0/22
178.19.208.0/20
185.28.184.0/22
IPv6:
2a04:a40::/29
Signature Algorithm: sha256WithRSAEncryption
7c:b0:bb:67:78:d4:f0:48:6b:1d:b3:66:e2:a8:17:c2:44:8c:
39:ba:5a:83:3b:f3:87:0c:0a:29:53:a0:af:2e:e9:49:d0:4c:
bc:cd:b7:2a:8b:bf:e8:61:7e:7c:1e:fb:74:25:fe:ca:5a:71:
1a:2f:5a:92:d6:e6:7f:51:7c:4e:12:6c:bd:cd:f0:30:cb:98:
a5:bb:f3:76:ee:42:7d:b7:61:ea:03:f8:b1:bb:94:db:d7:5e:
0c:75:67:45:74:f6:a2:d9:af:12:b7:8c:c6:b3:27:7d:b1:11:
fd:1f:90:81:1e:49:83:27:2f:a6:b0:ef:b6:91:15:66:de:d9:
1f:e6:1b:42:19:89:73:23:ba:8b:f4:9e:62:fe:7e:0e:e7:1c:
ad:a5:68:a3:90:b9:4a:fa:fa:69:76:db:00:e5:9e:26:0f:db:
05:07:4c:44:72:04:c7:9c:8b:4b:b1:92:0a:76:32:54:50:96:
55:63:11:91:23:b6:4c:43:e7:9d:a4:4c:cb:15:e8:bb:b0:cb:
c9:3b:42:18:c7:cc:28:57:1e:da:bf:12:c7:70:54:7a:ca:1f:
be:55:2d:2a:b4:ac:88:ff:01:e3:7c:2e:fa:ef:8d:eb:cb:b7:
00:7f:62:79:f6:92:a6:d9:2e:9a:9f:b9:7e:45:e7:fb:61:7c:
d6:95:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:20:41 2024 by rpki-client on console-ams.rpki-client.org