Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/qq1K60NXeb5QAu2VFaTAZ1IJruA.roa
File: qq1K60NXeb5QAu2VFaTAZ1IJruA.roa (raw, json)
Hash identifier: fLl/BThO1b5LiI+6xftgguAkxNoS5P6DHXuFd+n1RFk=
Subject key identifier: AA:AD:4A:EB:43:57:79:BE:50:02:ED:95:15:A4:C0:67:52:09:AE:E0
Certificate issuer: /CN=5ab1996515884434b87882b5b972a6e529ffb00b
Certificate serial: 018CC424787E9B0C84AFDC2EC0A25FD34AF4
Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/qq1K60NXeb5QAu2VFaTAZ1IJruA.roa
Signing time: Mon 01 Jan 2024 08:29:33 +0000
ROA not before: Mon 01 Jan 2024 08:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8473
IP address blocks: 185.159.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:78:7e:9b:0c:84:af:dc:2e:c0:a2:5f:d3:4a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b
Validity
Not Before: Jan 1 08:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aaad4aeb435779be5002ed9515a4c0675209aee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:fb:93:8a:44:ee:6b:72:e4:46:d3:40:01:
9f:6b:0e:32:06:96:d7:27:fa:a6:83:00:51:5c:79:
d5:1a:8d:f3:9b:bf:3d:5a:7b:85:b3:c3:49:6b:34:
74:6a:0e:60:f8:83:06:0f:fe:29:d3:57:64:9d:1a:
91:f1:3b:89:5f:ee:20:e2:30:f1:8a:00:78:a5:0d:
67:ea:7c:33:1b:ae:34:18:ad:4f:62:33:99:4a:9d:
a8:59:57:9c:07:9b:93:8b:73:bd:d5:f1:d5:24:1a:
43:db:78:15:94:21:6d:63:71:1f:5a:16:cb:83:dc:
25:67:5f:61:43:73:64:d5:2b:33:85:ef:6f:12:04:
36:36:c3:d7:ef:33:3d:26:26:b6:1b:53:8d:c1:b4:
04:a6:ee:44:de:d8:dd:52:11:0d:33:17:86:19:5a:
b4:4c:46:08:7d:8e:d8:c8:0e:4d:3a:38:82:b9:a0:
4e:d6:bb:ce:1b:ee:ef:32:39:9f:b8:46:05:5a:af:
5a:88:d9:4b:16:46:40:46:89:08:07:4d:a8:da:f1:
52:da:c2:dc:f5:9c:ea:a6:4d:f4:3e:d6:44:b0:35:
19:73:99:55:59:36:b3:04:5b:65:4d:4b:de:4d:c5:
12:91:85:a5:6c:df:2e:9c:03:bc:53:1f:db:4a:ca:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AD:4A:EB:43:57:79:BE:50:02:ED:95:15:A4:C0:67:52:09:AE:E0
X509v3 Authority Key Identifier:
keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/qq1K60NXeb5QAu2VFaTAZ1IJruA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.156.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8b:8b:1c:83:24:e7:5f:3d:e8:35:f7:9c:17:1d:4c:8f:38:
4a:39:1c:79:50:ec:b8:b7:cb:11:6a:0c:f5:46:2f:4d:5b:d7:
e5:40:59:42:9a:67:07:28:3c:07:f0:53:53:8d:f9:74:04:a0:
75:1c:af:8b:17:8c:ac:29:62:ae:42:5a:d2:1b:48:f0:c6:27:
79:ae:76:d7:3d:03:0d:57:c8:6a:00:cd:49:aa:3d:18:72:f9:
de:32:26:b4:0e:b4:a4:99:df:ac:a8:5b:05:3d:60:99:4e:3b:
63:26:d6:6d:c8:ae:f4:68:a1:7e:50:da:b5:e9:fe:36:a8:e1:
7e:5e:4c:0f:26:11:a3:e2:e6:3f:6e:ff:a7:94:41:3a:f0:0d:
b4:17:e7:cd:00:16:d8:1a:12:58:b1:ac:a0:57:1e:ee:a8:8f:
af:7c:4d:bd:20:0c:5b:df:d0:c1:e8:8e:f1:e0:70:19:17:f7:
6b:9e:0e:03:ad:76:bf:d0:21:67:ad:d6:ba:1a:e8:71:55:d5:
dc:04:09:39:e5:b8:e0:e5:04:66:d3:09:88:0f:18:4a:98:c9:
d6:04:06:77:6e:23:31:c5:78:d8:55:57:33:96:10:f9:e3:44:
bd:23:eb:de:a2:0a:b9:33:63:09:76:3e:79:45:34:a3:49:36:
86:5c:97:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJHh+mwyEr9wuwKJf00r0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYjE5OTY1MTU4ODQ0MzRiODc4ODJiNWI5NzJhNmU1Mjlm
ZmIwMGIwHhcNMjQwMTAxMDgyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWFkNGFlYjQzNTc3OWJlNTAwMmVkOTUxNWE0YzA2NzUyMDlhZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfn7k4pE7mty5EbTQAGfaw4yBpbX
J/qmgwBRXHnVGo3zm789WnuFs8NJazR0ag5g+IMGD/4p01dknRqR8TuJX+4g4jDx
igB4pQ1n6nwzG640GK1PYjOZSp2oWVecB5uTi3O91fHVJBpD23gVlCFtY3EfWhbL
g9wlZ19hQ3Nk1Sszhe9vEgQ2NsPX7zM9Jia2G1ONwbQEpu5E3tjdUhENMxeGGVq0
TEYIfY7YyA5NOjiCuaBO1rvOG+7vMjmfuEYFWq9aiNlLFkZARokIB02o2vFS2sLc
9Zzqpk30PtZEsDUZc5lVWTazBFtlTUveTcUSkYWlbN8unAO8Ux/bSsq1RQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKqtSutDV3m+UALtlRWkwGdSCa7gMB8GA1UdIwQY
MBaAFFqxmWUViEQ0uHiCtblypuUp/7ALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3JHWlpSV0lSRFM0ZUlLMXVYS201U25fc0FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85NGM5MTktZTZlYS00ZTE4LWFmMTIt
ZWQ1YjAxZDI1MjhjLzEvcXExSzYwTlhlYjVRQXUyVkZhVEFaMUlKcnVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85NGM5MTktZTZlYS00ZTE4LWFmMTItZWQ1YjAxZDI1Mjhj
LzEvV3JHWlpSV0lSRFM0ZUlLMXVYS201U25fc0FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ+cMA0G
CSqGSIb3DQEBCwUAA4IBAQCQi4scgyTnXz3oNfecFx1MjzhKORx5UOy4t8sRagz1
Ri9NW9flQFlCmmcHKDwH8FNTjfl0BKB1HK+LF4ysKWKuQlrSG0jwxid5rnbXPQMN
V8hqAM1Jqj0YcvneMia0DrSkmd+sqFsFPWCZTjtjJtZtyK70aKF+UNq16f42qOF+
XkwPJhGj4uY/bv+nlEE68A20F+fNABbYGhJYsaygVx7uqI+vfE29IAxb39DB6I7x
4HAZF/drng4DrXa/0CFnrda6GuhxVdXcBAk55bjg5QRm0wmIDxhKmMnWBAZ3biMx
xXjYVVczlhD540S9I+veogq5M2MJdj55RTSjSTaGXJcq
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:21:07 2024 by rpki-client on console-ams.rpki-client.org