Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/7QUyNMwUCfUEjIYKr_VcJT9AjFU.roa
File: 7QUyNMwUCfUEjIYKr_VcJT9AjFU.roa (raw, json)
Hash identifier: kOOvXEjEnaiNXRGKHlzwxLygxsOtFCWF+oJ94Aa2Cg4=
Subject key identifier: ED:05:32:34:CC:14:09:F5:04:8C:86:0A:AF:F5:5C:25:3F:40:8C:55
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 018CC2DAD944C0C91C3AC675C35F6ACB4580
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/7QUyNMwUCfUEjIYKr_VcJT9AjFU.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8412
IP address blocks: 81.223.0.0/16 maxlen: 17
85.124.0.0/14 maxlen: 15
213.229.0.0/18 maxlen: 19
83.64.0.0/15 maxlen: 16
195.58.160.0/19 maxlen: 20
62.99.128.0/17 maxlen: 18
91.118.0.0/15 maxlen: 16
212.41.224.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d9:44:c0:c9:1c:3a:c6:75:c3:5f:6a:cb:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed053234cc1409f5048c860aaff55c253f408c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:c2:f1:fd:4e:bc:87:c4:bd:68:d9:82:39:
ae:68:6f:a0:c2:e3:2d:49:56:7c:eb:31:40:80:25:
ba:0e:2f:09:22:ea:6a:e9:df:8e:1b:57:19:8d:a3:
cc:10:13:a4:5d:64:87:f4:8c:52:d3:0c:f7:7b:4e:
37:94:2a:95:9e:e0:2d:df:03:c0:4a:86:58:ca:89:
70:26:7a:d2:8a:d6:01:77:0e:8b:ec:a3:8b:e2:6c:
ee:af:6d:59:5c:3c:d0:04:63:fd:3a:cf:34:67:f0:
07:f3:79:18:0c:3b:b0:6a:a9:42:8a:0a:76:30:12:
88:f3:67:94:4a:e1:b3:af:04:75:91:e3:15:a9:f3:
a7:0a:e5:24:4e:3d:82:e1:f6:0c:8c:06:15:50:82:
cd:91:7d:0e:30:d3:c7:5f:e3:a0:37:e4:cf:a7:8f:
38:f4:d7:8d:4a:f2:0a:3c:1b:b5:30:f6:ab:ce:27:
09:41:75:c6:75:f7:33:17:a1:41:87:2b:b5:55:83:
e1:13:28:48:b3:62:97:c1:22:72:74:b7:c0:8d:1f:
82:3d:0a:c8:ee:ef:ad:ea:62:ec:86:0c:e5:6f:7a:
2e:43:4e:9b:e0:df:b9:1c:fc:ff:5b:48:25:81:1e:
ab:8b:85:49:d9:4a:f1:53:2e:e4:41:17:c2:22:89:
e1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:05:32:34:CC:14:09:F5:04:8C:86:0A:AF:F5:5C:25:3F:40:8C:55
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/7QUyNMwUCfUEjIYKr_VcJT9AjFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.99.128.0/17
81.223.0.0/16
83.64.0.0/15
85.124.0.0/14
91.118.0.0/15
195.58.160.0/19
212.41.224.0/19
213.229.0.0/18
Signature Algorithm: sha256WithRSAEncryption
29:19:c0:9c:cf:f6:fb:95:ee:39:99:d4:1e:41:52:46:21:de:
96:b9:bd:2b:1a:32:b7:79:81:24:2b:94:53:db:b6:a1:f8:71:
1c:b5:f7:8c:74:78:72:c3:b9:37:a1:fe:07:5d:59:05:e8:b4:
56:b9:4b:8c:0a:d1:3a:81:e4:68:49:cc:25:b3:98:d2:71:57:
1c:2c:ba:fd:56:23:64:35:9c:c7:4f:92:c2:72:dd:83:19:75:
36:71:f2:69:08:c1:1f:76:16:4b:99:a4:49:0d:0c:7c:d7:44:
12:f0:30:26:8a:07:07:2a:94:4b:53:9a:65:c4:d9:2d:80:92:
61:b1:00:bb:b9:a0:68:c0:da:dc:22:d5:75:17:ed:b7:e9:4f:
d9:de:aa:22:fc:d2:99:2c:47:67:3d:8d:73:c8:97:2b:3d:fc:
aa:c6:f1:47:0d:b3:b1:e0:8f:4e:a1:88:41:39:03:2f:44:2e:
6d:f5:4d:62:2a:75:7f:26:52:0c:9e:48:e8:32:9b:f1:ea:27:
1c:6c:b3:b6:e3:5f:34:af:73:ed:c6:2a:85:d9:eb:52:0c:fa:
4f:0a:d2:77:b8:fc:bc:2c:a7:e7:2b:dd:a1:d5:dd:f7:bd:3e:
1b:d6:48:06:62:34:e1:5c:4b:80:d4:ac:02:3b:36:82:29:dc:
d2:fb:68:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:13:26 2024 by rpki-client on console-ams.rpki-client.org