Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/QKk8eVjyD13E0T0iDTSFmvxh-As.roa
File: QKk8eVjyD13E0T0iDTSFmvxh-As.roa (raw, json)
Hash identifier: Yd0YvsMKlQX2qBRQbSkKqtNmYzMaYnyY3Ib9vcIxeME=
Subject key identifier: 40:A9:3C:79:58:F2:0F:5D:C4:D1:3D:22:0D:34:85:9A:FC:61:F8:0B
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 018D4A4829A7430064D0F877884D9204558A
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/QKk8eVjyD13E0T0iDTSFmvxh-As.roa
Signing time: Sat 27 Jan 2024 09:37:39 +0000
ROA not before: Sat 27 Jan 2024 09:37:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 213.134.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4a:48:29:a7:43:00:64:d0:f8:77:88:4d:92:04:55:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Jan 27 09:37:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40a93c7958f20f5dc4d13d220d34859afc61f80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:95:20:5b:43:c9:da:a5:71:a3:ba:bc:69:9a:
d9:e3:8c:5f:b8:d9:59:bc:d1:98:30:1b:1b:e8:f7:
7d:71:3a:30:81:33:ab:32:cd:00:4e:a0:93:68:ca:
22:83:8f:3a:06:8d:10:80:b8:81:38:8b:18:16:c3:
bf:cc:7a:8b:83:31:52:5d:a9:4f:b1:93:0b:e1:e6:
69:15:6b:f1:2b:2a:3a:71:21:11:ff:11:11:48:dd:
b6:2c:a3:53:f0:68:07:57:94:e9:14:1c:fb:66:de:
5a:10:00:d2:b2:ad:4e:f7:a7:94:fc:9f:97:6d:3c:
a3:26:eb:86:1e:e0:9c:7b:f0:24:a2:31:d1:13:fc:
7f:83:c4:d7:f0:79:e2:cc:30:c2:a3:7e:2c:bc:f0:
49:e7:90:92:46:f2:ba:f5:d8:50:f9:b9:50:1e:51:
cd:bd:6c:8f:be:d6:70:95:be:d4:28:f1:c2:df:23:
b2:c5:92:88:7a:a4:cf:13:28:06:20:60:d1:59:90:
55:2a:5e:3a:a6:14:e3:b3:d3:5a:fb:0f:a0:a6:8c:
61:22:d9:f2:84:f7:e7:de:48:d7:2b:26:d8:c7:69:
b8:6f:4e:0b:f8:d1:ec:09:d3:8c:c7:2e:fc:b6:6e:
18:c0:1d:e7:fa:5a:f8:9e:05:0e:cd:01:e9:6b:73:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A9:3C:79:58:F2:0F:5D:C4:D1:3D:22:0D:34:85:9A:FC:61:F8:0B
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/QKk8eVjyD13E0T0iDTSFmvxh-As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.17.0/24
Signature Algorithm: sha256WithRSAEncryption
89:45:8d:40:2a:20:e1:59:6d:07:69:41:5f:d9:8f:eb:d2:b2:
83:c0:60:f4:bb:95:f5:e3:95:58:d7:72:8b:8b:1b:2e:e7:7f:
3c:3b:06:e6:cd:47:28:6d:10:81:4d:a4:39:0f:4b:63:af:bf:
88:97:59:67:86:69:a3:57:a0:bc:e4:4c:3f:d9:fd:ba:ed:f5:
6c:52:93:e0:78:c3:0b:0c:35:3f:e9:ae:ca:79:43:df:bb:6b:
63:59:0e:25:f3:30:c9:6e:a5:d8:b2:aa:e7:6e:c8:ad:52:f7:
1d:2f:50:41:b0:60:9a:c6:75:e0:ff:5a:92:c0:93:20:37:bf:
2a:2a:c5:2b:99:8c:64:7c:83:79:92:c2:35:d2:70:3c:88:b4:
ad:ce:de:ec:5b:0a:4a:0c:31:f2:75:df:3c:88:9b:21:8c:7e:
b2:d0:3e:df:be:ab:23:be:91:64:57:a0:e7:c8:61:92:ef:1e:
c5:cf:8c:77:88:46:c0:5c:2e:e2:bb:36:2c:60:f8:4f:82:a1:
25:0f:e1:f7:89:ef:bc:04:96:ca:90:b9:2a:78:9c:f3:78:35:
8c:d6:2b:a5:3f:b5:37:6d:26:38:32:59:c1:98:3d:80:c7:d8:
33:90:2f:e5:cb:18:a5:04:fb:1f:df:bf:2c:70:c5:ad:7f:fc:
b6:15:df:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1KSCmnQwBk0Ph3iE2SBFWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGYwMzNmNzgyZWFmMzJhYjA5MDg4Nzc1ZDY0YWM0Yjk0
YjViMTEwHhcNMjQwMTI3MDkzNzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGE5M2M3OTU4ZjIwZjVkYzRkMTNkMjIwZDM0ODU5YWZjNjFmODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZUgW0PJ2qVxo7q8aZrZ44xfuNlZ
vNGYMBsb6Pd9cTowgTOrMs0ATqCTaMoig486Bo0QgLiBOIsYFsO/zHqLgzFSXalP
sZML4eZpFWvxKyo6cSER/xERSN22LKNT8GgHV5TpFBz7Zt5aEADSsq1O96eU/J+X
bTyjJuuGHuCce/AkojHRE/x/g8TX8HnizDDCo34svPBJ55CSRvK69dhQ+blQHlHN
vWyPvtZwlb7UKPHC3yOyxZKIeqTPEygGIGDRWZBVKl46phTjs9Na+w+gpoxhItny
hPfn3kjXKybYx2m4b04L+NHsCdOMxy78tm4YwB3n+lr4ngUOzQHpa3POlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFECpPHlY8g9dxNE9Ig00hZr8YfgLMB8GA1UdIwQY
MBaAFGRPAz94Lq8yqwkIh3XWSsS5S1sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMt
NDkxNWZlN2Y5MmNlLzEvUUtrOGVWanlEMTNFMFQwaURUU0ZtdnhoLUFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMtNDkxNWZlN2Y5MmNl
LzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YYRMA0G
CSqGSIb3DQEBCwUAA4IBAQCJRY1AKiDhWW0HaUFf2Y/r0rKDwGD0u5X145VY13KL
ixsu5388OwbmzUcobRCBTaQ5D0tjr7+Il1lnhmmjV6C85Ew/2f267fVsUpPgeMML
DDU/6a7KeUPfu2tjWQ4l8zDJbqXYsqrnbsitUvcdL1BBsGCaxnXg/1qSwJMgN78q
KsUrmYxkfIN5ksI10nA8iLStzt7sWwpKDDHydd88iJshjH6y0D7fvqsjvpFkV6Dn
yGGS7x7Fz4x3iEbAXC7iuzYsYPhPgqElD+H3ie+8BJbKkLkqeJzzeDWM1iulP7U3
bSY4MlnBmD2Ax9gzkC/lyxilBPsf378scMWtf/y2Fd9G
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:46:52 2024 by rpki-client on console-ams.rpki-client.org