Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/1-QpeJmrR6Jl0O-rTP-LKEPEDFlI.roa
File: 1-QpeJmrR6Jl0O-rTP-LKEPEDFlI.roa (raw, json)
Hash identifier: mSqhagxWo0XksuJqsmCaFfiH81POa77enyOJfbl/vaM=
Subject key identifier: F9:0A:5E:26:6A:D1:E8:99:74:3B:EA:D3:3F:E2:CA:10:F1:03:16:52
Certificate issuer: /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial: 018CC7950D1C6BF67A46AF7FA242B4229933
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/1-QpeJmrR6Jl0O-rTP-LKEPEDFlI.roa
Signing time: Tue 02 Jan 2024 00:31:23 +0000
ROA not before: Tue 02 Jan 2024 00:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25098
IP address blocks: 193.201.70.0/23 maxlen: 23
213.230.192.0/18 maxlen: 32
2a01:70::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0d:1c:6b:f6:7a:46:af:7f:a2:42:b4:22:99:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
Validity
Not Before: Jan 2 00:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f90a5e266ad1e899743bead33fe2ca10f1031652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:9e:18:5f:84:4d:88:d6:67:9a:ca:93:62:
20:d7:93:b9:c3:ae:fc:fa:34:7d:1a:f3:91:79:0b:
3e:44:5d:57:8e:75:1d:c9:21:53:b6:5f:7a:02:e8:
23:a5:12:7b:49:b1:88:85:67:6f:cc:2a:9e:d2:4b:
b0:78:b2:73:39:fe:20:9e:55:b8:ca:63:f8:4f:19:
95:65:8d:36:8d:c2:83:b3:15:3f:ad:d8:88:4e:1b:
98:86:cb:37:03:ea:60:40:66:a6:35:7d:a7:c9:5e:
bb:79:2c:ba:35:bd:b4:fd:35:8d:85:88:b8:d6:e6:
25:0e:fc:a4:0d:41:7d:89:a9:91:1c:04:db:a5:83:
46:89:ae:53:15:d1:32:86:ea:ab:08:ba:90:cd:e0:
b6:6c:f0:68:14:d0:e4:1f:36:04:c8:93:91:62:b5:
51:08:8c:76:7d:d1:7e:70:2b:9e:c1:3c:82:98:e6:
53:4e:f6:87:8c:38:d7:06:0c:54:b2:e6:3c:fc:58:
d6:0c:47:57:cf:61:3a:21:ae:f1:d6:d1:cb:df:d7:
fe:1f:bd:a2:99:8b:32:33:57:bf:d2:ea:c6:86:02:
c4:28:3d:a1:f1:b7:94:16:2f:a5:8b:ca:dd:69:6b:
cb:e5:ec:61:2d:91:17:88:c7:20:ec:f4:6b:9d:65:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0A:5E:26:6A:D1:E8:99:74:3B:EA:D3:3F:E2:CA:10:F1:03:16:52
X509v3 Authority Key Identifier:
keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/1-QpeJmrR6Jl0O-rTP-LKEPEDFlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.70.0/23
213.230.192.0/18
IPv6:
2a01:70::/32
Signature Algorithm: sha256WithRSAEncryption
20:67:62:e2:33:6d:3c:31:6b:e4:d6:c7:8f:d2:2e:ca:03:25:
24:fa:b4:ab:d5:af:6d:0a:b9:19:19:0f:71:60:13:7a:f3:2a:
8a:d6:ae:5f:d6:1c:c4:92:dc:f7:d6:50:24:55:0d:de:3d:10:
d2:13:d0:8e:31:f1:9b:1a:2e:2e:e2:3e:8c:46:29:c2:51:04:
42:77:ac:77:13:d5:e4:0d:14:cc:9f:58:5d:91:35:ce:f8:22:
84:ef:a7:70:e2:d5:c8:80:bb:c1:51:7e:6b:68:3f:cf:53:8f:
76:b3:48:83:b3:e2:d2:10:f9:fe:87:1d:a8:2c:5f:6b:94:d8:
75:1d:51:90:ed:2f:a2:d4:6d:59:be:6a:56:72:bb:63:74:50:
14:0d:a3:e7:a9:78:2e:5c:9c:a8:d3:5d:6e:04:0b:44:19:e3:
e1:6e:94:5e:bc:7a:e3:81:de:5a:cd:98:a1:a6:91:67:3c:b9:
aa:0d:c5:92:c5:43:09:47:e8:3d:85:9e:57:b0:6d:e0:0a:56:
51:e4:8f:09:ad:b9:b9:91:23:6a:d0:47:87:1e:d7:04:72:87:
83:3d:0a:0b:88:e9:bc:77:06:f0:b3:2a:db:f8:da:ed:2e:90:
cc:98:48:e5:cc:20:89:e2:50:0b:f3:18:50:66:91:bb:a0:02:
79:cd:fb:9e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYzHlQ0ca/Z6Rq9/okK0IpkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNzNjMWZmNTU0MDNkNDc5MjM0NjQ5M2Y3NjlmOGQwMzNi
ZWYwMmMwHhcNMjQwMTAyMDAzMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTBhNWUyNjZhZDFlODk5NzQzYmVhZDMzZmUyY2ExMGYxMDMxNjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcueGF+ETYjWZ5rKk2Ig15O5w678
+jR9GvOReQs+RF1XjnUdySFTtl96AugjpRJ7SbGIhWdvzCqe0kuweLJzOf4gnlW4
ymP4TxmVZY02jcKDsxU/rdiIThuYhss3A+pgQGamNX2nyV67eSy6Nb20/TWNhYi4
1uYlDvykDUF9iamRHATbpYNGia5TFdEyhuqrCLqQzeC2bPBoFNDkHzYEyJORYrVR
CIx2fdF+cCuewTyCmOZTTvaHjDjXBgxUsuY8/FjWDEdXz2E6Ia7x1tHL39f+H72i
mYsyM1e/0urGhgLEKD2h8beUFi+li8rdaWvL5exhLZEXiMcg7PRrnWWMSwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFPkKXiZq0eiZdDvq0z/iyhDxAxZSMB8GA1UdIwQY
MBaAFHNzwf9VQD1HkjRkk/dp+NAzvvAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzNQQl8xVkFQVWVTTkdTVDkybjQwRE8tOEN3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xYWZmMTAtZGQyOS00MzlmLThkMjMt
YmM5YTVmNjYwNWZjLzEvMS1RcGVKbXJSNkpsME8tclRQLUxLRVBFREZsSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDgvMWFmZjEwLWRkMjktNDM5Zi04ZDIzLWJjOWE1ZjY2MDVm
Yy8xL2MzUEJfMVZBUFVlU05HU1Q5Mm40MERPLThDdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAcHJRgME
BtXmwDANBAIAAjAHAwUAKgEAcDANBgkqhkiG9w0BAQsFAAOCAQEAIGdi4jNtPDFr
5NbHj9IuygMlJPq0q9WvbQq5GRkPcWATevMqitauX9YcxJLc99ZQJFUN3j0Q0hPQ
jjHxmxouLuI+jEYpwlEEQnesdxPV5A0UzJ9YXZE1zvgihO+ncOLVyIC7wVF+a2g/
z1OPdrNIg7Pi0hD5/ocdqCxfa5TYdR1RkO0votRtWb5qVnK7Y3RQFA2j56l4Llyc
qNNdbgQLRBnj4W6UXrx644HeWs2YoaaRZzy5qg3FksVDCUfoPYWeV7Bt4ApWUeSP
Ca25uZEjatBHhx7XBHKHgz0KC4jpvHcG8LMq2/ja7S6QzJhI5cwgieJQC/MYUGaR
u6ACec37ng==
-----END CERTIFICATE-----
Generated at Sat May 4 22:24:05 2024 by rpki-client on console-ams.rpki-client.org