Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/QFKTkLJZa2QR8f_NXd4xCmOerd0.roa
File: QFKTkLJZa2QR8f_NXd4xCmOerd0.roa (raw, json)
Hash identifier: 8Yu7DyWs3CG3h9skfL4FT5MWHm81NOhqkuRHjoj4+GE=
Subject key identifier: 40:52:93:90:B2:59:6B:64:11:F1:FF:CD:5D:DE:31:0A:63:9E:AD:DD
Certificate issuer: /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial: 018CC5DC049DAB73ACE6350688D128DBD00F
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/QFKTkLJZa2QR8f_NXd4xCmOerd0.roa
Signing time: Mon 01 Jan 2024 16:29:39 +0000
ROA not before: Mon 01 Jan 2024 16:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202468
IP address blocks: 5.253.24.0/22 maxlen: 24
5.253.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:04:9d:ab:73:ac:e6:35:06:88:d1:28:db:d0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
Validity
Not Before: Jan 1 16:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40529390b2596b6411f1ffcd5dde310a639eaddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:ae:6f:bf:57:56:82:ca:4b:fa:19:d3:dc:
26:22:55:6e:37:51:e8:a3:87:c9:3d:3c:c7:a9:2f:
fe:a5:c3:a6:69:a5:b6:92:6f:8c:a5:3c:46:0a:7d:
ef:08:c0:91:6d:0c:c5:23:2c:c7:f3:81:4d:a8:58:
fc:ee:41:81:7d:1b:ce:13:87:a9:5f:d4:07:28:5b:
b9:1e:24:5f:bf:1c:12:1a:8f:34:25:25:fd:c3:5a:
87:3e:fb:99:2f:4f:56:f5:cc:0c:36:b9:93:15:d9:
5b:27:cd:02:a2:46:0b:be:8b:7e:72:bf:25:e3:c5:
4d:3c:a0:9e:18:e6:6a:fc:83:ba:df:5a:27:7a:96:
cc:31:1a:62:0d:a7:f3:f2:92:c8:93:fb:dc:d2:07:
7b:b7:e9:a3:ae:02:98:5a:2e:aa:98:22:f6:eb:37:
50:52:2a:74:a3:ca:fc:e3:45:a5:ec:88:35:d2:11:
a8:df:5e:4f:fe:2d:fb:ce:b7:5d:6f:3d:e7:f0:81:
0f:e4:09:00:1b:d0:dd:be:9b:83:a0:35:e4:95:0d:
b3:4f:3b:32:f5:c0:20:f2:61:0a:7a:bc:be:aa:c2:
72:e8:5b:b3:b9:32:6e:af:fd:d5:ed:36:a9:91:65:
b8:11:16:58:74:b5:9c:33:70:58:ce:b7:30:0d:3a:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:52:93:90:B2:59:6B:64:11:F1:FF:CD:5D:DE:31:0A:63:9E:AD:DD
X509v3 Authority Key Identifier:
keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/QFKTkLJZa2QR8f_NXd4xCmOerd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:fa:4b:56:62:c7:24:b6:95:ce:0a:27:d2:23:df:67:dc:d5:
e9:c8:40:f3:1c:d5:f9:ae:18:f9:ad:84:0e:a6:d4:22:17:a3:
8b:68:b0:0f:b4:17:e1:62:91:ac:29:29:82:e3:c0:23:2d:22:
d9:29:4c:cf:61:c1:9d:64:d2:d4:40:cf:9d:68:3f:5f:d3:f5:
74:ff:39:0f:57:63:e9:13:db:bd:15:1f:33:c5:c5:7b:d8:cb:
fd:e5:3c:13:2b:d7:a2:05:0b:af:fa:c4:57:46:34:6c:2d:31:
20:2b:0f:6e:7d:d5:d7:a5:06:81:dc:c5:46:2b:d4:65:2b:20:
30:56:f8:9d:f6:14:d4:56:ca:4d:d8:40:34:bd:1e:3a:08:da:
bb:74:f7:6e:00:a2:55:58:42:cb:19:35:3b:88:e7:2d:d2:db:
dd:11:2b:ad:9e:db:cd:9e:ca:e1:a2:4c:3b:dd:79:e4:a3:44:
46:c0:70:8e:cd:1c:97:ce:1f:1b:fa:e5:f6:fc:72:d3:f8:a6:
35:de:89:f2:c2:e3:57:eb:c6:c4:28:8b:07:1e:3f:e1:93:9e:
45:38:af:fb:df:cd:fd:69:08:2c:69:fa:ed:07:9d:91:53:b1:
6d:34:d7:45:ef:dc:a9:e0:6c:e6:3c:71:8d:ae:ea:a6:c1:eb:
03:c6:b1:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3ASdq3Os5jUGiNEo29APMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2YzMzcyZGY1N2M4MTRhYmE4YjUxYTkwNzg2MWQ5MmI5
ZTRmNTUwHhcNMjQwMTAxMTYyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDUyOTM5MGIyNTk2YjY0MTFmMWZmY2Q1ZGRlMzEwYTYzOWVhZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIOub79XVoLKS/oZ09wmIlVuN1Ho
o4fJPTzHqS/+pcOmaaW2km+MpTxGCn3vCMCRbQzFIyzH84FNqFj87kGBfRvOE4ep
X9QHKFu5HiRfvxwSGo80JSX9w1qHPvuZL09W9cwMNrmTFdlbJ80CokYLvot+cr8l
48VNPKCeGOZq/IO631onepbMMRpiDafz8pLIk/vc0gd7t+mjrgKYWi6qmCL26zdQ
Uip0o8r840Wl7Ig10hGo315P/i37zrddbz3n8IEP5AkAG9DdvpuDoDXklQ2zTzsy
9cAg8mEKery+qsJy6FuzuTJur/3V7TapkWW4ERZYdLWcM3BYzrcwDTpLgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEBSk5CyWWtkEfH/zV3eMQpjnq3dMB8GA1UdIwQY
MBaAFBN/M3LfV8gUq6i1GpB4Ydkrnk9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM4emN0OVh5QlNycUxVYWtIaGgyU3VlVDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84YjE0MWItNDk0ZS00NjZiLWEyMmMt
YTIyNGZlZmFjMjE4LzEvUUZLVGtMSlphMlFSOGZfTlhkNHhDbU9lcmQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84YjE0MWItNDk0ZS00NjZiLWEyMmMtYTIyNGZlZmFjMjE4
LzEvRTM4emN0OVh5QlNycUxVYWtIaGgyU3VlVDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBf0YMA0G
CSqGSIb3DQEBCwUAA4IBAQCM+ktWYscktpXOCifSI99n3NXpyEDzHNX5rhj5rYQO
ptQiF6OLaLAPtBfhYpGsKSmC48AjLSLZKUzPYcGdZNLUQM+daD9f0/V0/zkPV2Pp
E9u9FR8zxcV72Mv95TwTK9eiBQuv+sRXRjRsLTEgKw9ufdXXpQaB3MVGK9RlKyAw
Vvid9hTUVspN2EA0vR46CNq7dPduAKJVWELLGTU7iOct0tvdESutntvNnsrhokw7
3Xnko0RGwHCOzRyXzh8b+uX2/HLT+KY13onywuNX68bEKIsHHj/hk55FOK/73839
aQgsafrtB52RU7FtNNdF79yp4GzmPHGNruqmwesDxrFI
-----END CERTIFICATE-----
Generated at Sun Jun 23 14:56:01 2024 by rpki-client on console-ams.rpki-client.org