Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2QZe0D462ClGn2XLTB4BlROiV9E.roa
File: 2QZe0D462ClGn2XLTB4BlROiV9E.roa (raw, json)
Hash identifier: BffzISpN06nC7iZ8T8Io7/UMYX6cBEFzXN3z13mCbVE=
Subject key identifier: D9:06:5E:D0:3E:3A:D8:29:46:9F:65:CB:4C:1E:01:95:13:A2:57:D1
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018EBE3169DF394186D59A651A78CFA4AD32
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2QZe0D462ClGn2XLTB4BlROiV9E.roa
Signing time: Mon 08 Apr 2024 14:51:33 +0000
ROA not before: Mon 08 Apr 2024 14:51:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198037
IP address blocks: 192.124.189.0/24 maxlen: 24
193.124.89.0/24 maxlen: 24
194.87.25.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:31:69:df:39:41:86:d5:9a:65:1a:78:cf:a4:ad:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 8 14:51:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9065ed03e3ad829469f65cb4c1e019513a257d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:5d:60:e5:c0:2c:c9:6c:61:12:47:74:80:
90:8e:3d:e4:05:6e:38:28:49:5b:48:7f:6b:4f:66:
f3:80:e8:01:57:ac:9c:42:30:99:6a:d3:46:f5:36:
a5:b3:84:c4:bf:39:8d:b1:6d:4d:cb:8a:ef:28:81:
38:85:cd:6c:6a:a1:0b:e4:be:23:d6:76:0a:95:82:
91:ba:76:2b:e6:27:45:e8:91:34:55:32:9b:15:13:
5f:7b:1c:22:06:ec:43:d9:3e:3e:9a:59:93:14:15:
ff:ca:a4:ab:a8:28:70:89:ac:71:f6:97:fa:ee:49:
03:cf:10:41:78:09:43:43:37:47:ac:b3:a6:72:3d:
ad:d2:bc:b6:ab:8a:44:8b:a4:3e:78:ce:f4:ab:c5:
f1:e5:8f:e7:1b:7e:83:f0:12:a7:0f:5b:99:9a:f0:
bb:33:9b:e0:d2:32:dd:da:dd:29:81:5d:e9:bb:4e:
e7:ed:bb:c6:2c:ae:d2:52:a8:8b:60:93:99:83:04:
53:e4:09:e1:ce:20:26:7c:32:85:db:4c:a3:22:53:
54:77:72:7a:70:6c:4e:f7:82:b0:b4:5e:c5:7c:89:
43:5c:97:3c:56:36:88:b8:de:ba:11:b9:68:32:bb:
84:0e:de:19:4b:60:64:cb:f5:d2:41:32:da:9d:d2:
4d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:06:5E:D0:3E:3A:D8:29:46:9F:65:CB:4C:1E:01:95:13:A2:57:D1
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2QZe0D462ClGn2XLTB4BlROiV9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.189.0/24
193.124.89.0/24
194.87.25.0/24
194.87.73.0/24
195.133.84.0/24
Signature Algorithm: sha256WithRSAEncryption
58:bd:e4:91:46:58:e2:fc:ba:3f:fb:e3:b1:e7:53:24:ba:24:
85:9e:68:c2:20:19:e0:ad:c0:7d:b9:ef:71:ef:74:b1:6a:7e:
02:f6:6f:02:be:81:c5:38:1f:9d:4a:e0:84:0e:e5:fa:05:92:
30:01:8a:46:d8:42:91:8d:e1:6f:6b:68:21:09:d1:28:78:9e:
a4:c5:3c:d1:12:d3:0b:f6:64:fa:9b:0d:40:10:9e:01:05:5c:
5f:80:13:ae:de:db:be:0c:95:53:5e:74:d7:ca:ef:38:33:21:
52:27:20:0e:99:22:48:64:46:c9:0d:0e:25:c4:bd:06:7b:1e:
f6:66:9f:7f:87:6d:33:44:56:5a:77:70:c8:d2:e2:27:c0:86:
95:25:17:4a:34:38:6b:6a:06:98:1e:e7:1e:ad:a2:41:77:c2:
bb:ab:81:ab:f7:53:35:0d:69:e7:7c:3a:49:86:48:47:da:17:
09:f1:4b:0f:2e:73:db:f8:95:fe:b6:47:05:46:fa:b3:4e:31:
ca:09:51:87:88:e1:b5:41:11:8d:ef:c5:e6:c1:e0:32:de:3c:
f0:70:49:79:48:54:cc:0a:45:28:88:17:bf:25:ae:aa:37:60:
22:ab:61:27:b4:b8:fa:eb:78:37:ed:ed:07:68:73:9e:9c:4f:
74:0c:55:f3
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY6+MWnfOUGG1ZplGnjPpK0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwNDA4MTQ1MTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTA2NWVkMDNlM2FkODI5NDY5ZjY1Y2I0YzFlMDE5NTEzYTI1N2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+hdYOXALMlsYRJHdICQjj3kBW44
KElbSH9rT2bzgOgBV6ycQjCZatNG9Tals4TEvzmNsW1Ny4rvKIE4hc1saqEL5L4j
1nYKlYKRunYr5idF6JE0VTKbFRNfexwiBuxD2T4+mlmTFBX/yqSrqChwiaxx9pf6
7kkDzxBBeAlDQzdHrLOmcj2t0ry2q4pEi6Q+eM70q8Xx5Y/nG36D8BKnD1uZmvC7
M5vg0jLd2t0pgV3pu07n7bvGLK7SUqiLYJOZgwRT5AnhziAmfDKF20yjIlNUd3J6
cGxO94KwtF7FfIlDXJc8VjaIuN66EbloMruEDt4ZS2Bky/XSQTLandJN1wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNkGXtA+OtgpRp9ly0weAZUTolfRMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMlFaZTBENDYyQ2xHbjJYTFRCNEJsUk9pVjlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwHy9AwQA
wXxZAwQAwlcZAwQAwldJAwQAw4VUMA0GCSqGSIb3DQEBCwUAA4IBAQBYveSRRlji
/Lo/++Ox51MkuiSFnmjCIBngrcB9ue9x73Sxan4C9m8CvoHFOB+dSuCEDuX6BZIw
AYpG2EKRjeFva2ghCdEoeJ6kxTzREtML9mT6mw1AEJ4BBVxfgBOu3tu+DJVTXnTX
yu84MyFSJyAOmSJIZEbJDQ4lxL0Gex72Zp9/h20zRFZad3DI0uInwIaVJRdKNDhr
agaYHuceraJBd8K7q4Gr91M1DWnnfDpJhkhH2hcJ8UsPLnPb+JX+tkcFRvqzTjHK
CVGHiOG1QRGN78XmweAy3jzwcEl5SFTMCkUoiBe/Ja6qN2Aiq2EntLj663g37e0H
aHOenE90DFXz
-----END CERTIFICATE-----
Generated at Fri May 17 23:34:10 2024 by rpki-client on console-fra.rpki-client.org