Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwyKbbShUmexpLAba8HR0FCnZ18.roa
File: QwyKbbShUmexpLAba8HR0FCnZ18.roa (raw, json)
Hash identifier: j9uevlFC+uvwUn1KogVK8d4ZJhoXkyk8oJPI7lFSZb0=
Subject key identifier: 43:0C:8A:6D:B4:A1:52:67:B1:A4:B0:1B:6B:C1:D1:D0:50:A7:67:5F
Certificate issuer: /CN=4309599380c5c59dc06684920b694c3ea6d308a6
Certificate serial: 018DABFD03A242CCE0DDD8019CECA2321EDB
Authority key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwyKbbShUmexpLAba8HR0FCnZ18.roa
Signing time: Thu 15 Feb 2024 08:58:21 +0000
ROA not before: Thu 15 Feb 2024 08:58:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49020
IP address blocks: 185.139.12.0/24 maxlen: 24
185.139.13.0/24 maxlen: 24
185.139.14.0/24 maxlen: 24
185.139.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ab:fd:03:a2:42:cc:e0:dd:d8:01:9c:ec:a2:32:1e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4309599380c5c59dc06684920b694c3ea6d308a6
Validity
Not Before: Feb 15 08:58:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=430c8a6db4a15267b1a4b01b6bc1d1d050a7675f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:b4:8e:c5:d9:5f:ae:1a:67:3b:6a:44:6c:
bf:99:a3:15:81:83:de:77:7c:c1:24:da:b3:6c:c0:
e1:17:45:a9:ca:a0:04:ed:f0:10:4b:2f:dd:89:27:
62:5a:41:a7:4b:b5:8e:26:41:cf:2a:cf:45:26:89:
31:4c:67:72:e5:bd:df:b1:9a:ec:a6:3a:c3:e7:3f:
34:f5:c3:41:46:71:d7:a8:1d:03:a1:21:7b:22:db:
8f:49:a6:5d:74:77:df:e4:de:14:97:c0:22:d5:1a:
53:6b:88:8b:29:d4:13:45:5f:74:4c:a1:fa:03:42:
34:32:75:47:90:f6:8d:46:d9:52:4e:cb:6f:30:c6:
8f:fd:c4:ad:71:8b:05:bd:c2:cc:5b:f8:93:88:70:
ff:56:fd:4b:99:08:4d:01:3e:36:2c:a8:9a:d2:84:
60:38:95:75:67:95:eb:ca:aa:12:76:6f:b8:b2:af:
a6:dd:ab:cf:d9:2b:7b:a8:6a:4e:02:a6:4f:52:e4:
cf:1f:c1:10:bb:e9:25:58:26:86:99:be:d9:c9:ca:
ee:5c:ad:f3:1d:0b:45:48:c5:87:b1:2f:d2:00:c8:
ff:ab:60:91:ab:8f:b4:ed:ba:93:b1:62:92:ee:f3:
d0:a9:1a:d3:87:cd:08:18:d3:d1:bb:1d:87:5b:39:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0C:8A:6D:B4:A1:52:67:B1:A4:B0:1B:6B:C1:D1:D0:50:A7:67:5F
X509v3 Authority Key Identifier:
keyid:43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwyKbbShUmexpLAba8HR0FCnZ18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.12.0/22
Signature Algorithm: sha256WithRSAEncryption
fb:cd:a2:39:30:21:4f:55:8d:0e:da:96:a4:98:d4:6c:2d:86:
ff:08:57:a9:2b:04:7c:cd:de:b1:ad:01:b7:fc:9e:4c:03:96:
e1:ed:38:ca:f7:8f:a3:6a:a5:ca:24:de:53:84:5e:de:ed:21:
89:1b:73:6b:69:39:9f:d9:b7:86:a8:47:22:96:32:71:87:7a:
db:a6:f6:1b:23:73:4e:18:69:07:30:05:89:8a:4f:ed:2f:9d:
9e:7a:dd:9c:7b:67:ea:a3:37:3a:6e:5a:60:f7:9b:17:32:cc:
52:5b:62:b7:aa:a9:c1:c0:df:63:38:ff:83:eb:fd:5a:80:fb:
ec:9e:ce:46:7f:96:6b:97:b9:b6:cf:6f:56:d4:7d:32:8b:5d:
70:09:44:ca:0f:97:7b:52:d3:4b:0a:c7:7f:47:7f:4a:00:04:
48:18:94:46:20:03:97:23:c3:5a:1f:1c:92:b1:2f:68:48:7f:
80:dd:78:ad:46:0a:68:e6:84:54:c4:d8:b5:16:7d:f8:e9:51:
06:28:9d:5c:ce:4a:ff:d5:7a:9e:a1:b6:57:ac:17:5d:fb:5d:
da:f1:8f:2c:3a:3f:72:4f:b4:f1:e3:9d:37:1d:32:02:21:ad:
6d:20:96:db:c2:08:bf:e7:e2:7e:c3:2e:0e:6a:33:38:b3:c2:
9a:57:df:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2r/QOiQszg3dgBnOyiMh7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDk1OTkzODBjNWM1OWRjMDY2ODQ5MjBiNjk0YzNlYTZk
MzA4YTYwHhcNMjQwMjE1MDg1ODIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzBjOGE2ZGI0YTE1MjY3YjFhNGIwMWI2YmMxZDFkMDUwYTc2NzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3S0jsXZX64aZztqRGy/maMVgYPe
d3zBJNqzbMDhF0WpyqAE7fAQSy/diSdiWkGnS7WOJkHPKs9FJokxTGdy5b3fsZrs
pjrD5z809cNBRnHXqB0DoSF7ItuPSaZddHff5N4Ul8Ai1RpTa4iLKdQTRV90TKH6
A0I0MnVHkPaNRtlSTstvMMaP/cStcYsFvcLMW/iTiHD/Vv1LmQhNAT42LKia0oRg
OJV1Z5XryqoSdm+4sq+m3avP2St7qGpOAqZPUuTPH8EQu+klWCaGmb7ZycruXK3z
HQtFSMWHsS/SAMj/q2CRq4+07bqTsWKS7vPQqRrTh80IGNPRux2HWznPywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEMMim20oVJnsaSwG2vB0dBQp2dfMB8GA1UdIwQY
MBaAFEMJWZOAxcWdwGaEkgtpTD6m0wimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85YWIzN2QtNWE5OS00NDQ4LThlZjUt
N2I1Zjk4MTU1ZmU2LzEvUXd5S2JiU2hVbWV4cExBYmE4SFIwRkNuWjE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85YWIzN2QtNWE5OS00NDQ4LThlZjUtN2I1Zjk4MTU1ZmU2
LzEvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYsMMA0G
CSqGSIb3DQEBCwUAA4IBAQD7zaI5MCFPVY0O2pakmNRsLYb/CFepKwR8zd6xrQG3
/J5MA5bh7TjK94+jaqXKJN5ThF7e7SGJG3NraTmf2beGqEciljJxh3rbpvYbI3NO
GGkHMAWJik/tL52eet2ce2fqozc6blpg95sXMsxSW2K3qqnBwN9jOP+D6/1agPvs
ns5Gf5Zrl7m2z29W1H0yi11wCUTKD5d7UtNLCsd/R39KAARIGJRGIAOXI8NaHxyS
sS9oSH+A3XitRgpo5oRUxNi1Fn346VEGKJ1czkr/1XqeobZXrBdd+13a8Y8sOj9y
T7Tx4503HTICIa1tIJbbwgi/5+J+wy4OajM4s8KaV988
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:21:06 2024 by rpki-client on console-ams.rpki-client.org