Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/qxtYsmhGkiarZLgTqC4F2PBTK2s.roa
File: qxtYsmhGkiarZLgTqC4F2PBTK2s.roa (raw, json)
Hash identifier: LidcKyf0octob+706k49vG8yExZGXHh3hry4QaJs+bE=
Subject key identifier: AB:1B:58:B2:68:46:92:26:AB:64:B8:13:A8:2E:05:D8:F0:53:2B:6B
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 018CC5012DEA88C9B1C20A01712D08DC1C55
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/qxtYsmhGkiarZLgTqC4F2PBTK2s.roa
Signing time: Mon 01 Jan 2024 12:30:37 +0000
ROA not before: Mon 01 Jan 2024 12:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199468
IP address blocks: 185.173.8.0/22 maxlen: 22
194.163.224.0/20 maxlen: 24
5.133.42.0/24 maxlen: 24
5.133.40.0/24 maxlen: 24
5.133.43.0/24 maxlen: 24
5.133.40.0/21 maxlen: 21
5.133.41.0/24 maxlen: 24
2a04:ed00::/29 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2d:ea:88:c9:b1:c2:0a:01:71:2d:08:dc:1c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jan 1 12:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab1b58b268469226ab64b813a82e05d8f0532b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e9:92:7f:e6:c4:b0:a7:ce:4e:f3:c4:fa:84:
77:81:5a:36:aa:14:86:82:e9:77:5b:bc:bb:56:61:
5f:93:ba:de:8b:c8:89:85:06:3d:6a:00:d7:b3:a3:
8d:71:b9:7b:db:b1:ba:01:2b:dd:b9:8c:a6:b8:43:
08:24:97:cb:bb:76:9a:fa:f9:65:56:fc:b6:62:5e:
2e:39:f4:23:b0:48:e5:d4:68:30:94:12:c7:ac:c0:
02:ff:92:31:46:9a:fc:28:a3:56:45:8b:ff:a2:53:
dc:38:b1:e9:40:84:01:cb:ab:3a:bb:bb:94:27:a5:
66:5f:2a:04:bf:84:20:14:2c:df:76:07:a8:06:5c:
18:3f:5c:70:33:8e:3a:fc:b9:a1:c4:65:64:9e:e2:
92:e1:73:1f:9f:ca:99:aa:35:ec:89:34:8e:85:18:
79:66:24:9a:74:a9:08:e5:db:56:dc:4e:1c:ff:41:
d3:ec:5f:fc:a7:12:e3:73:32:83:de:19:bf:80:f9:
2b:64:a7:a3:b0:37:d0:1e:6f:e4:77:5e:c3:25:c9:
0d:49:a6:2d:8c:a5:49:3c:db:6c:08:e1:30:e9:49:
ca:83:08:f4:50:e0:1e:71:2b:b1:75:b6:53:5e:c1:
a9:8e:b8:ca:dd:92:68:a0:53:ef:29:13:8c:97:cc:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1B:58:B2:68:46:92:26:AB:64:B8:13:A8:2E:05:D8:F0:53:2B:6B
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/qxtYsmhGkiarZLgTqC4F2PBTK2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.40.0/21
185.173.8.0/22
194.163.224.0/20
IPv6:
2a04:ed00::/29
Signature Algorithm: sha256WithRSAEncryption
9e:4d:5f:ba:44:0a:44:99:11:a1:43:d1:45:23:ef:9a:eb:81:
1c:d7:27:c7:ec:4f:1e:b8:e5:09:a0:5d:12:2b:b1:1d:f2:0b:
0d:e8:d0:3c:bb:e0:3b:59:43:65:6c:2e:4e:23:31:ce:de:ad:
cf:85:d2:be:b9:8f:e0:2e:9c:47:dd:e9:46:6f:25:bd:90:71:
18:41:83:54:ba:36:d4:4d:e9:8b:b8:60:fc:e9:af:dd:79:33:
d5:1a:57:19:80:f4:7a:62:bc:ad:31:6c:36:56:f5:8d:1b:3d:
ca:c2:56:a9:e7:52:da:42:87:3c:8f:25:d0:93:55:18:93:8c:
32:42:41:e2:bb:e8:84:6b:8d:2b:1c:d7:24:84:bf:ae:77:bd:
85:f4:a7:62:bc:06:33:b5:01:f4:5a:a7:db:ca:10:9f:e7:46:
2a:e3:46:47:ea:0b:a3:58:53:6e:c6:e0:05:ec:a3:bc:b7:24:
73:7a:74:19:9b:fe:d0:51:32:d1:48:ae:41:33:7e:12:92:9c:
80:04:7a:98:e6:9c:a4:e6:c6:85:5d:ef:78:57:52:d7:cb:ba:
50:1b:17:46:60:a4:16:c0:20:de:f7:e2:a0:4b:fa:80:e0:01:
1a:63:fc:14:9d:01:a3:9c:fa:f2:64:b5:51:a1:d8:46:48:3f:
7f:87:f1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:32:32 2024 by rpki-client on console-ams.rpki-client.org