Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/qgawnQFIXYJl50B6ZQFyVx48vbk.roa
File: qgawnQFIXYJl50B6ZQFyVx48vbk.roa (raw, json)
Hash identifier: mvqusm75H+yc6j6kqtcNRpVqErhkwOKp8S5XjKzOPYk=
Subject key identifier: AA:06:B0:9D:01:48:5D:82:65:E7:40:7A:65:01:72:57:1E:3C:BD:B9
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56F0759931200064139CF3C3ABD2D42
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/qgawnQFIXYJl50B6ZQFyVx48vbk.roa
Signing time: Mon 01 Jan 2024 14:30:37 +0000
ROA not before: Mon 01 Jan 2024 14:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205343
IP address blocks: 89.252.242.0/23 maxlen: 23
89.252.206.0/24 maxlen: 24
89.252.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:07:59:93:12:00:06:41:39:cf:3c:3a:bd:2d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa06b09d01485d8265e7407a650172571e3cbdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:c6:19:70:1f:fc:cb:f4:d0:30:e2:19:d3:
b8:17:5b:8e:0d:aa:9c:52:06:7a:7a:a0:50:18:73:
a5:61:af:0e:f9:b9:ad:1e:1e:43:c2:04:b3:db:18:
b1:43:78:7a:c3:90:4b:e5:b8:05:6f:ab:90:1f:c3:
d8:1a:3c:eb:ec:51:23:e7:94:38:5d:d2:97:59:1f:
b2:58:ca:af:69:97:e0:28:95:13:81:7d:64:fd:94:
1c:be:c9:2b:be:89:40:ba:ca:6b:b3:98:92:7c:ac:
8c:88:18:93:22:d4:12:55:9e:fa:99:ca:5a:32:79:
12:be:8e:04:35:13:88:ce:a7:3c:90:a8:89:8c:7c:
a3:c9:44:ca:45:6e:65:f2:0e:a6:dc:bf:c2:4b:91:
c3:2a:19:fa:b1:cb:8f:be:48:5c:24:06:4f:f7:56:
bc:93:e8:85:f9:96:f8:60:94:12:5b:05:42:96:9c:
cb:b0:c3:86:fd:86:66:2b:83:eb:1f:cc:e5:3f:5e:
94:94:c6:3c:2f:4f:77:fd:85:e9:1a:45:bc:9a:ae:
bb:2e:fe:7a:38:c3:b4:22:ad:d1:4b:f7:aa:bb:0b:
66:2a:22:a1:09:d9:8f:c5:18:36:b6:a3:db:92:a9:
82:3b:3b:bf:ee:f7:57:55:33:0f:83:43:d4:9d:35:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:06:B0:9D:01:48:5D:82:65:E7:40:7A:65:01:72:57:1E:3C:BD:B9
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/qgawnQFIXYJl50B6ZQFyVx48vbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.206.0/23
89.252.242.0/23
Signature Algorithm: sha256WithRSAEncryption
dd:69:2d:4b:63:37:19:54:40:1f:04:9a:09:0c:fc:46:f7:0b:
eb:25:68:9c:4b:fd:c3:cd:a1:2f:c4:63:dc:ea:b1:4b:f9:83:
6c:ed:18:a0:2c:c9:ee:9c:16:d6:9d:43:82:64:21:a5:1a:d9:
7c:14:71:0f:ef:50:5a:90:d8:16:59:25:f3:dd:67:cd:e7:f7:
36:f5:09:e3:1d:2d:2e:e8:19:b4:1b:6f:a5:ee:e5:03:da:2c:
f8:f6:d3:6b:ca:c5:07:8c:15:75:b0:bb:6b:fc:60:64:c9:c4:
7d:d4:5d:a6:ec:05:72:a5:ad:7f:3b:d5:97:b5:37:ac:ca:22:
4c:3c:6f:35:33:76:05:3d:c9:43:24:31:70:ee:71:45:87:00:
79:9b:04:92:00:7e:84:27:c0:4e:0f:ef:cb:f6:e5:78:42:28:
5f:b5:a8:9d:e6:62:62:49:68:be:4b:cf:23:e6:09:5c:11:a8:
6d:64:eb:cc:f1:4f:51:20:f9:a8:86:7c:55:19:f3:d6:da:e3:
6c:54:20:d9:ce:d4:04:79:07:c8:30:fe:56:4f:d8:2d:5b:3d:
f3:20:1f:31:57:cd:8a:1f:77:bc:3f:b8:ea:9b:7b:3a:9c:05:
72:24:72:ad:4e:f2:cc:94:4e:52:db:76:ab:ed:dd:f7:6d:6f:
92:90:88:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:18:27 2024 by rpki-client on console-ams.rpki-client.org