Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/qy-4b_0163Sh1mJ5pzaLbjmoSPA.roa
File: qy-4b_0163Sh1mJ5pzaLbjmoSPA.roa (raw, json)
Hash identifier: opwybC/sQKwrf/huLRZg4dn4kRlwamnbf0CoZt9M3po=
Subject key identifier: AB:2F:B8:6F:FD:35:EB:74:A1:D6:62:79:A7:36:8B:6E:39:A8:48:F0
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 018CCA2A8D833C2A2C134CC20344439152CF
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/qy-4b_0163Sh1mJ5pzaLbjmoSPA.roa
Signing time: Tue 02 Jan 2024 12:33:55 +0000
ROA not before: Tue 02 Jan 2024 12:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 80.253.96.0/19 maxlen: 24
92.60.240.0/20 maxlen: 24
89.167.128.0/17 maxlen: 24
83.245.0.0/17 maxlen: 24
217.79.160.0/20 maxlen: 24
213.228.192.0/18 maxlen: 24
2a02:9e8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:8d:83:3c:2a:2c:13:4c:c2:03:44:43:91:52:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 2 12:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab2fb86ffd35eb74a1d66279a7368b6e39a848f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e0:5a:06:c9:43:1b:5c:a1:1c:92:be:17:8d:
28:78:4e:78:17:b6:7d:3e:3d:8e:c5:f7:56:41:47:
c2:32:63:e5:d5:cb:2a:5f:90:5f:13:2a:31:76:d0:
d2:0e:c2:18:86:38:e5:64:d9:5a:32:2e:bf:27:f6:
7d:30:e2:a9:51:e7:d9:71:fa:5c:77:0f:fe:c0:ae:
de:87:a1:9c:89:ca:98:f6:4b:9f:17:a5:e0:52:65:
3b:69:9b:04:f1:40:da:4c:72:22:de:b5:6c:f4:1e:
47:b9:24:c7:c7:19:e5:11:6d:77:25:98:6f:02:39:
c9:df:9d:cc:fc:96:1a:68:34:4d:f4:13:a1:f6:d1:
be:07:6b:52:69:9b:5e:be:6f:ea:76:b2:53:ff:56:
f3:0a:f7:fb:5f:cb:a7:4e:bb:7e:e8:00:07:66:cc:
0a:9d:29:51:3c:d0:93:16:d5:0c:66:e3:dd:0e:4e:
4f:b1:80:6c:e4:14:f4:28:3d:27:01:d2:d1:e9:20:
2c:23:48:ac:d8:3e:bd:69:41:58:0e:50:e1:71:a3:
60:58:d7:4d:cb:78:de:d7:06:f0:de:65:2b:17:80:
4d:90:b7:af:da:38:f5:c6:8e:20:62:cf:54:66:62:
52:84:ae:89:ff:85:91:e7:00:63:fc:9a:0e:65:95:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2F:B8:6F:FD:35:EB:74:A1:D6:62:79:A7:36:8B:6E:39:A8:48:F0
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/qy-4b_0163Sh1mJ5pzaLbjmoSPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.96.0/19
83.245.0.0/17
89.167.128.0/17
92.60.240.0/20
213.228.192.0/18
217.79.160.0/20
IPv6:
2a02:9e8::/32
Signature Algorithm: sha256WithRSAEncryption
0c:8e:57:f2:0a:ba:6a:f0:fa:d7:d8:c0:77:86:0b:d1:0f:f3:
41:0c:cb:1f:d6:1c:1e:cc:b5:ee:9b:27:c2:7a:b6:f8:72:bb:
d5:5f:37:d9:34:e0:f0:37:91:3d:f4:08:3c:b0:c8:40:b8:da:
86:07:28:f7:e7:4a:d4:86:4c:f9:e0:f5:11:92:23:29:1c:cb:
23:93:2b:0d:ab:c2:8b:2b:7b:3b:ae:55:eb:27:d6:8e:8d:8c:
bc:dc:59:44:45:eb:1b:1e:30:02:09:47:20:69:ed:23:d1:3b:
d0:e0:21:73:26:a6:b8:93:42:6f:a1:c2:73:58:3a:32:6d:5a:
18:92:d4:56:88:fd:d2:1d:d3:a2:60:54:e1:61:34:6c:42:4e:
78:0b:85:15:8f:8e:1c:a0:01:49:02:68:3f:02:96:ee:2d:23:
d8:e9:a7:8c:4d:34:80:ac:da:22:9a:a1:b8:bf:58:a8:ab:74:
50:60:de:32:26:f2:ca:2c:0d:4e:4f:bd:9e:46:15:c3:21:f4:
d8:17:fa:bd:4d:02:6d:68:c0:af:f7:ef:c7:44:8f:fc:3c:f6:
26:fd:f0:7f:df:21:21:d5:50:d5:34:b3:60:f7:fc:9b:11:d8:
d4:12:0e:32:a5:4d:cd:58:a5:9c:9f:15:7d:83:d1:dc:c6:bb:
98:5a:e1:fd
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAYzKKo2DPCosE0zCA0RDkVLPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjQwMTAyMTIzMzU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjJmYjg2ZmZkMzVlYjc0YTFkNjYyNzlhNzM2OGI2ZTM5YTg0OGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeBaBslDG1yhHJK+F40oeE54F7Z9
Pj2OxfdWQUfCMmPl1csqX5BfEyoxdtDSDsIYhjjlZNlaMi6/J/Z9MOKpUefZcfpc
dw/+wK7eh6GcicqY9kufF6XgUmU7aZsE8UDaTHIi3rVs9B5HuSTHxxnlEW13JZhv
AjnJ353M/JYaaDRN9BOh9tG+B2tSaZtevm/qdrJT/1bzCvf7X8unTrt+6AAHZswK
nSlRPNCTFtUMZuPdDk5PsYBs5BT0KD0nAdLR6SAsI0is2D69aUFYDlDhcaNgWNdN
y3je1wbw3mUrF4BNkLev2jj1xo4gYs9UZmJShK6J/4WR5wBj/JoOZZUFGQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFKsvuG/9Net0odZieac2i245qEjwMB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvcXktNGJfMDE2M1NoMW1KNXB6YUxiam1vU1BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQFUP1gAwQH
U/UAAwQHWaeAAwQEXDzwAwQG1eTAAwQE2U+gMA0EAgACMAcDBQAqAgnoMA0GCSqG
SIb3DQEBCwUAA4IBAQAMjlfyCrpq8PrX2MB3hgvRD/NBDMsf1hwezLXumyfCerb4
crvVXzfZNODwN5E99Ag8sMhAuNqGByj350rUhkz54PURkiMpHMsjkysNq8KLK3s7
rlXrJ9aOjYy83FlEResbHjACCUcgae0j0TvQ4CFzJqa4k0JvocJzWDoybVoYktRW
iP3SHdOiYFThYTRsQk54C4UVj44coAFJAmg/ApbuLSPY6aeMTTSArNoimqG4v1io
q3RQYN4yJvLKLA1OT72eRhXDIfTYF/q9TQJtaMCv9+/HRI/8PPYm/fB/3yEh1VDV
NLNg9/ybEdjUEg4ypU3NWKWcnxV9g9HcxruYWuH9
-----END CERTIFICATE-----
Generated at Sat May 4 04:57:38 2024 by rpki-client on console-fra.rpki-client.org