Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/Qs_RiRNJiiWWWKRtTd0hw6YZwRU.roa
File: Qs_RiRNJiiWWWKRtTd0hw6YZwRU.roa (raw, json)
Hash identifier: wNebrkPaIOFXpD2DySn0pmwD36JI9WS8Wq8dkKCPit8=
Subject key identifier: 42:CF:D1:89:13:49:8A:25:96:58:A4:6D:4D:DD:21:C3:A6:19:C1:15
Certificate issuer: /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Certificate serial: 018CC500166C49951DFE09325953405AB873
Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/Qs_RiRNJiiWWWKRtTd0hw6YZwRU.roa
Signing time: Mon 01 Jan 2024 12:29:26 +0000
ROA not before: Mon 01 Jan 2024 12:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 193.238.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:16:6c:49:95:1d:fe:09:32:59:53:40:5a:b8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Validity
Not Before: Jan 1 12:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42cfd18913498a259658a46d4ddd21c3a619c115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:58:37:6c:78:42:9d:d3:7d:e1:f6:af:10:
ff:98:ca:ef:dc:bf:36:f6:d1:16:06:f8:25:bf:49:
21:34:9c:ae:d9:37:7d:d8:34:fb:c4:4f:bb:d5:6d:
09:7c:05:26:fd:f3:a8:65:b0:09:b6:28:02:7b:5d:
6b:c8:8a:ce:0b:78:b3:54:15:7f:06:a6:b3:49:91:
58:57:83:15:5d:6f:8d:2d:d1:61:98:5f:e1:24:ed:
7d:2d:54:17:43:54:3c:ce:0e:ac:0f:15:04:d6:c0:
b4:31:b0:be:3a:7a:34:24:a5:cf:79:ad:78:bb:c4:
72:a7:7d:80:89:d5:76:87:20:b3:7c:fe:d3:89:fb:
65:45:16:36:2d:0a:8b:89:c8:aa:9e:f1:1a:4b:f3:
e1:7a:d7:5e:83:83:f4:be:66:22:47:61:1a:7c:b3:
72:6b:1f:f7:a9:e2:ba:6d:b7:a7:f5:a2:64:b3:27:
3e:eb:6e:39:42:5b:6d:21:7d:d8:3b:1a:b8:27:5f:
8b:bd:98:b0:fb:69:a6:ed:3d:f8:3a:9b:26:c5:0c:
4e:ed:6d:e6:24:26:4d:ca:02:95:a3:d5:4a:49:33:
87:15:1b:ae:07:29:bd:10:07:b5:ec:5b:76:5a:eb:
63:5f:8e:73:29:20:76:de:7b:ef:5a:c1:fe:98:5c:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CF:D1:89:13:49:8A:25:96:58:A4:6D:4D:DD:21:C3:A6:19:C1:15
X509v3 Authority Key Identifier:
keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/Qs_RiRNJiiWWWKRtTd0hw6YZwRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:85:b9:86:0c:16:72:9b:7d:5d:2c:cc:6d:20:a9:9a:fb:b5:
47:76:87:e7:e8:f2:93:03:4c:a6:99:1e:ae:50:24:64:82:d5:
73:43:af:80:cb:4a:72:cf:5b:6b:d8:ab:51:25:e8:bb:72:97:
bc:0b:75:13:7a:8c:de:a7:09:cb:b8:a3:1e:19:97:01:ef:c6:
ed:3e:a8:83:96:15:8b:84:6d:37:4c:5f:45:fb:51:fe:d2:14:
fe:ac:2e:13:53:de:ea:08:54:c7:95:94:eb:cd:14:95:0c:fd:
94:f8:7c:db:9b:5f:63:70:eb:91:e2:0a:11:46:74:fc:fb:3d:
2c:8e:7e:86:03:b6:b1:68:14:c1:5a:b6:4c:dc:9f:c5:1e:77:
fc:80:11:65:9d:a0:e2:5c:59:ad:77:f6:f6:13:90:aa:5a:80:
a2:dd:b2:4c:9c:f2:dd:76:64:fd:f2:71:4e:47:99:60:9d:2a:
35:e7:41:6f:0f:89:e1:ea:f9:3f:e4:2f:cd:1f:7a:49:5a:ef:
e0:24:d2:e7:b1:88:3f:47:3f:d0:21:4a:aa:44:b9:b3:3c:00:
29:82:dc:f3:9f:c9:66:7e:df:7b:aa:b9:0d:d9:3d:1e:97:f6:
3e:c0:bd:03:fa:df:f7:af:f5:22:2e:90:1f:60:5c:c2:eb:18:
47:b3:1f:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFABZsSZUd/gkyWVNAWrhzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTIyOGQ3MTNiZWM2ZDRjOWFiY2VjMmYwMGEyOGU4MjFm
YzI3YmYwHhcNMjQwMTAxMTIyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmNmZDE4OTEzNDk4YTI1OTY1OGE0NmQ0ZGRkMjFjM2E2MTljMTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ9YN2x4Qp3TfeH2rxD/mMrv3L82
9tEWBvglv0khNJyu2Td92DT7xE+71W0JfAUm/fOoZbAJtigCe11ryIrOC3izVBV/
BqazSZFYV4MVXW+NLdFhmF/hJO19LVQXQ1Q8zg6sDxUE1sC0MbC+Ono0JKXPea14
u8Ryp32AidV2hyCzfP7TiftlRRY2LQqLiciqnvEaS/Phetdeg4P0vmYiR2EafLNy
ax/3qeK6bben9aJksyc+6245QlttIX3YOxq4J1+LvZiw+2mm7T34OpsmxQxO7W3m
JCZNygKVo9VKSTOHFRuuBym9EAe17Ft2WutjX45zKSB23nvvWsH+mFwACQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFELP0YkTSYolllikbU3dIcOmGcEVMB8GA1UdIwQY
MBaAFJviKNcTvsbUyavOwvAKKOgh/Ce/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1JbzF4Ty14dFRKcTg3QzhBb282Q0g4Sjc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83OWYxNWEtNWNiYS00ZDQwLWIzMGIt
ZTM1YTIyM2I0OWM3LzEvUXNfUmlSTkppaVdXV0tSdFRkMGh3Nllad1JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83OWYxNWEtNWNiYS00ZDQwLWIzMGItZTM1YTIyM2I0OWM3
LzEvbS1JbzF4Ty14dFRKcTg3QzhBb282Q0g4Sjc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwe58MA0G
CSqGSIb3DQEBCwUAA4IBAQA7hbmGDBZym31dLMxtIKma+7VHdofn6PKTA0ymmR6u
UCRkgtVzQ6+Ay0pyz1tr2KtRJei7cpe8C3UTeozepwnLuKMeGZcB78btPqiDlhWL
hG03TF9F+1H+0hT+rC4TU97qCFTHlZTrzRSVDP2U+Hzbm19jcOuR4goRRnT8+z0s
jn6GA7axaBTBWrZM3J/FHnf8gBFlnaDiXFmtd/b2E5CqWoCi3bJMnPLddmT98nFO
R5lgnSo150FvD4nh6vk/5C/NH3pJWu/gJNLnsYg/Rz/QIUqqRLmzPAApgtzzn8lm
ft97qrkN2T0el/Y+wL0D+t/3r/UiLpAfYFzC6xhHsx//
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:29:43 2024 by rpki-client on console-fra.rpki-client.org