Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/QSTDBe_OkfhehLr-MUEN1rXYCyM.roa
File: QSTDBe_OkfhehLr-MUEN1rXYCyM.roa (raw, json)
Hash identifier: 695BcYv5tl3OeHB6c01DB33BURZq+u6IfDQZSJVfSMg=
Subject key identifier: 41:24:C3:05:EF:CE:91:F8:5E:84:BA:FE:31:41:0D:D6:B5:D8:0B:23
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 018CC49307235BA75FE78E1F8DA29D0B5087
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/QSTDBe_OkfhehLr-MUEN1rXYCyM.roa
Signing time: Mon 01 Jan 2024 10:30:19 +0000
ROA not before: Mon 01 Jan 2024 10:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197881
IP address blocks: 91.227.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:07:23:5b:a7:5f:e7:8e:1f:8d:a2:9d:0b:50:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Jan 1 10:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4124c305efce91f85e84bafe31410dd6b5d80b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:39:7a:7f:86:9a:34:14:8d:1d:c3:81:e0:
80:0a:66:51:14:f8:1c:19:82:15:74:9a:0e:98:60:
03:43:de:70:b3:f1:7a:9d:9a:17:94:e2:75:29:48:
45:2b:e9:d0:61:fa:63:d6:c0:93:ae:0c:f2:99:91:
3e:9a:fb:af:bd:c2:62:a3:51:8e:5b:c7:48:14:75:
a8:32:74:38:74:ff:1b:0d:43:e3:21:1b:18:3e:f1:
d5:dc:68:fd:7d:f1:69:da:7d:d8:c5:26:a7:fd:05:
e3:8d:ac:d4:30:74:49:8b:d1:fb:26:c6:26:b9:6e:
1b:af:54:c0:2a:6e:c0:51:ab:e9:33:c3:dc:9d:29:
f7:59:f0:02:32:93:3c:16:e1:bf:67:59:ab:5f:35:
35:53:5b:a2:a4:ac:bd:d3:b8:b8:1a:61:fe:44:db:
11:0b:b9:17:97:1e:2d:67:ad:d2:08:a7:6a:21:35:
6d:8b:f8:86:c4:4e:02:6d:a4:d1:eb:6c:3b:ae:3c:
f3:e7:83:8c:ff:c9:fd:73:14:f9:e8:d4:50:85:6e:
2f:78:23:0f:a7:85:9e:7b:b6:8f:ab:86:d7:70:90:
a3:71:3b:99:84:c1:d9:8c:95:4d:bb:8f:a9:be:d6:
84:f3:b2:bd:d4:e3:f7:0c:ed:dc:2c:53:4a:1e:81:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:24:C3:05:EF:CE:91:F8:5E:84:BA:FE:31:41:0D:D6:B5:D8:0B:23
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/QSTDBe_OkfhehLr-MUEN1rXYCyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.110.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:b2:cc:c3:d4:0f:0f:83:d7:e0:23:7d:b4:80:42:3c:a9:3e:
e4:21:47:a1:89:f5:c4:d6:ac:e9:fe:c1:e6:06:da:7e:33:69:
38:a0:3f:3d:80:5d:e2:b7:b0:c1:af:d5:a9:b7:46:92:f5:a0:
48:23:9e:45:8a:1f:b9:27:e1:ce:49:62:da:c0:8b:27:96:a3:
0b:16:b9:d2:d6:d1:96:62:78:11:93:c1:d9:4a:7a:fc:4c:f7:
d8:c9:f3:1a:e5:5c:cc:7c:64:e3:47:0c:54:81:8b:37:79:e1:
9d:93:4a:3f:bb:06:5a:0a:e8:e5:a7:f4:0d:75:b8:5c:a6:e3:
a2:c1:32:79:88:b5:8d:01:72:cc:85:17:ca:12:ca:5b:8b:42:
91:44:65:dc:5a:4f:e1:c8:25:63:10:f7:fd:ba:bc:2c:1d:fe:
a7:16:40:60:7e:ad:fb:17:6e:73:25:dc:82:83:eb:1a:c7:ea:
e3:7b:99:90:c0:02:8e:00:18:ab:46:da:09:56:4a:a8:e1:79:
f7:66:55:89:4c:e6:27:a2:80:ab:33:3f:79:f1:fd:af:76:19:
9d:17:c2:e4:71:c4:f1:54:70:7a:ec:14:6e:87:8f:51:6b:85:
a7:21:bc:85:8b:71:58:14:ba:63:06:d5:cd:d7:15:b5:b1:d9:
fc:62:5c:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkwcjW6df544fjaKdC1CHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Zjc4MzYxYTA3N2IwZDc4OTEzNWNjZDY4YjEyNjFkYjEz
OGY5NTAwHhcNMjQwMTAxMTAzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTI0YzMwNWVmY2U5MWY4NWU4NGJhZmUzMTQxMGRkNmI1ZDgwYjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM45en+GmjQUjR3DgeCACmZRFPgc
GYIVdJoOmGADQ95ws/F6nZoXlOJ1KUhFK+nQYfpj1sCTrgzymZE+mvuvvcJio1GO
W8dIFHWoMnQ4dP8bDUPjIRsYPvHV3Gj9ffFp2n3YxSan/QXjjazUMHRJi9H7JsYm
uW4br1TAKm7AUavpM8PcnSn3WfACMpM8FuG/Z1mrXzU1U1uipKy907i4GmH+RNsR
C7kXlx4tZ63SCKdqITVti/iGxE4CbaTR62w7rjzz54OM/8n9cxT56NRQhW4veCMP
p4Wee7aPq4bXcJCjcTuZhMHZjJVNu4+pvtaE87K91OP3DO3cLFNKHoFb3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEEkwwXvzpH4XoS6/jFBDda12AsjMB8GA1UdIwQY
MBaAFDT3g2Ggd7DXiRNczWixJh2xOPlQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBlRFlhQjNzTmVKRTF6TmFMRW1IYkU0LVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85ZGY5ZjItYTIwYS00MjljLTgyZTgt
YTU3MTY4NjVmZDM1LzEvUVNUREJlX09rZmhlaExyLU1VRU4xclhZQ3lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85ZGY5ZjItYTIwYS00MjljLTgyZTgtYTU3MTY4NjVmZDM1
LzEvTlBlRFlhQjNzTmVKRTF6TmFMRW1IYkU0LVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+NuMA0G
CSqGSIb3DQEBCwUAA4IBAQBLsszD1A8Pg9fgI320gEI8qT7kIUehifXE1qzp/sHm
Btp+M2k4oD89gF3it7DBr9Wpt0aS9aBII55Fih+5J+HOSWLawIsnlqMLFrnS1tGW
YngRk8HZSnr8TPfYyfMa5VzMfGTjRwxUgYs3eeGdk0o/uwZaCujlp/QNdbhcpuOi
wTJ5iLWNAXLMhRfKEspbi0KRRGXcWk/hyCVjEPf9urwsHf6nFkBgfq37F25zJdyC
g+sax+rje5mQwAKOABirRtoJVkqo4Xn3ZlWJTOYnooCrMz958f2vdhmdF8LkccTx
VHB67BRuh49Ra4WnIbyFi3FYFLpjBtXN1xW1sdn8Ylz9
-----END CERTIFICATE-----
Generated at Fri Jun 21 17:47:43 2024 by rpki-client on console-ams.rpki-client.org