Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/qVuM86sETiyV5_mqiwOiZyBGbhs.roa
File: qVuM86sETiyV5_mqiwOiZyBGbhs.roa (raw, json)
Hash identifier: JIC47Buu82rkJBmDHvlO8zq+H901Cn/NDXAdHBMmW7s=
Subject key identifier: A9:5B:8C:F3:AB:04:4E:2C:95:E7:F9:AA:8B:03:A2:67:20:46:6E:1B
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 018CC87159540C1767570C92894665D75CB8
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/qVuM86sETiyV5_mqiwOiZyBGbhs.roa
Signing time: Tue 02 Jan 2024 04:32:00 +0000
ROA not before: Tue 02 Jan 2024 04:32:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208378
IP address blocks: 193.138.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:59:54:0c:17:67:57:0c:92:89:46:65:d7:5c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: Jan 2 04:32:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a95b8cf3ab044e2c95e7f9aa8b03a26720466e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a2:41:ba:94:d1:d1:d3:1f:1e:6c:46:a0:db:
59:eb:45:36:7d:57:10:c6:99:52:08:39:a9:73:56:
d2:ab:26:dd:76:77:15:65:da:ef:a9:4d:05:f9:3a:
55:ef:53:28:b6:a3:45:16:ef:eb:75:ed:c4:40:bf:
81:6e:50:8f:3a:de:f3:ad:2d:6f:7d:02:18:69:de:
de:1f:6e:1c:70:5a:a2:68:43:a2:98:8b:09:7a:c7:
b0:db:06:99:cb:b9:7b:a8:ad:b4:e4:f5:a0:23:0b:
b9:fe:b6:cd:bb:4e:43:41:8b:8d:a3:da:29:4d:fd:
03:50:11:7d:40:c3:c0:e2:9d:fb:34:0c:2e:23:40:
7f:8e:22:db:46:f0:6d:e2:9b:7b:8d:65:ec:fc:03:
a1:76:e6:a0:43:c2:36:55:cd:5b:e9:37:c5:d6:a6:
d7:9c:de:10:8a:cd:d4:88:9f:58:8f:f7:9a:a7:22:
8f:cb:e5:ee:2d:09:52:01:c8:b1:bc:c0:14:28:79:
43:0a:43:bb:ca:f8:4f:9b:93:9b:01:d2:70:c5:f0:
83:36:fd:4e:4c:f3:16:0f:5d:1a:cd:ea:98:22:09:
9b:f5:75:ca:a2:ff:1a:55:25:57:c9:8e:67:4e:87:
a8:9d:e7:0f:46:c0:e9:94:ac:29:df:52:26:9d:6d:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5B:8C:F3:AB:04:4E:2C:95:E7:F9:AA:8B:03:A2:67:20:46:6E:1B
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/qVuM86sETiyV5_mqiwOiZyBGbhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.29.0/24
Signature Algorithm: sha256WithRSAEncryption
57:69:c8:3b:54:86:74:33:44:6f:00:91:1e:f1:70:ac:27:17:
5b:50:cb:24:62:8c:c6:e9:13:58:90:37:91:96:f5:58:8e:73:
98:d8:0b:36:55:0f:d6:59:2b:b9:e4:41:5f:06:4a:47:99:0f:
4e:e8:bd:12:60:15:9c:3c:b6:b3:92:f2:2e:85:5f:83:48:14:
6e:c1:9f:5f:f1:74:03:51:72:1f:c2:f5:34:b5:47:d9:df:19:
06:77:6d:bb:89:1c:97:51:0b:e0:98:30:e4:f6:3c:72:5c:2b:
45:0f:a0:95:2f:b4:b2:c1:df:5a:81:61:21:fd:15:1d:fd:20:
47:5b:34:ca:69:08:bf:2c:a0:e6:f1:e4:83:48:1d:4b:30:1c:
94:20:39:b6:2c:ab:22:a2:22:60:eb:a6:d3:89:09:c6:f6:27:
29:9a:63:22:4c:56:4a:0b:cd:5b:b9:bc:58:39:c1:2d:55:69:
58:74:0e:41:b1:93:39:a1:44:3c:36:eb:a3:43:fe:14:b4:90:
a9:20:f9:29:b0:8a:98:25:09:e3:b3:c1:b2:25:ec:39:f1:3c:
87:52:c7:65:d4:e7:b4:af:57:10:c4:9e:05:56:20:d1:51:d2:
6e:de:c3:67:57:52:4c:a0:74:42:9c:f8:e1:be:b3:e8:1b:6d:
c6:be:07:18
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzIcVlUDBdnVwySiUZl11y4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2Y2NmVkNzQyOGEzOWU2M2YwZDI3MzYwMzdmNDMxYzQx
YWEzNGYwHhcNMjQwMTAyMDQzMjAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTViOGNmM2FiMDQ0ZTJjOTVlN2Y5YWE4YjAzYTI2NzIwNDY2ZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6JBupTR0dMfHmxGoNtZ60U2fVcQ
xplSCDmpc1bSqybddncVZdrvqU0F+TpV71MotqNFFu/rde3EQL+BblCPOt7zrS1v
fQIYad7eH24ccFqiaEOimIsJesew2waZy7l7qK205PWgIwu5/rbNu05DQYuNo9op
Tf0DUBF9QMPA4p37NAwuI0B/jiLbRvBt4pt7jWXs/AOhduagQ8I2Vc1b6TfF1qbX
nN4Qis3UiJ9Yj/eapyKPy+XuLQlSAcixvMAUKHlDCkO7yvhPm5ObAdJwxfCDNv1O
TPMWD10azeqYIgmb9XXKov8aVSVXyY5nToeonecPRsDplKwp31ImnW2FrwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKlbjPOrBE4slef5qosDomcgRm4bMB8GA1UdIwQY
MBaAFPnPZu10KKOeY/DSc2A39DHEGqNPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jOW03WFFvbzU1ajhOSnpZRGYwTWNRYW8wOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvZDc4NGVkLWJlNzUtNDA3Mi1hNzgw
LWU2MzM3MDNmY2JlZC8xL3FWdU04NnNFVGl5VjVfbXFpd09pWnlCR2Jocy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzEvZDc4NGVkLWJlNzUtNDA3Mi1hNzgwLWU2MzM3MDNmY2Jl
ZC8xLzEtYzltN1hRb281NWo4Tkp6WURmME1jUWFvMDguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBih0w
DQYJKoZIhvcNAQELBQADggEBAFdpyDtUhnQzRG8AkR7xcKwnF1tQyyRijMbpE1iQ
N5GW9ViOc5jYCzZVD9ZZK7nkQV8GSkeZD07ovRJgFZw8trOS8i6FX4NIFG7Bn1/x
dANRch/C9TS1R9nfGQZ3bbuJHJdRC+CYMOT2PHJcK0UPoJUvtLLB31qBYSH9FR39
IEdbNMppCL8soObx5INIHUswHJQgObYsqyKiImDrptOJCcb2JymaYyJMVkoLzVu5
vFg5wS1VaVh0DkGxkzmhRDw266ND/hS0kKkg+SmwipglCeOzwbIl7DnxPIdSx2XU
57SvVxDEngVWINFR0m7ew2dXUkygdEKc+OG+s+gbbca+Bxg=
-----END CERTIFICATE-----
Generated at Fri Jun 21 16:52:16 2024 by rpki-client on console-ams.rpki-client.org