Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/qP2MCw4CyiG-gnGQSv4Hep-0rC4.roa
File: qP2MCw4CyiG-gnGQSv4Hep-0rC4.roa (raw, json)
Hash identifier: BXhFHXxiWjqa1zAaYt5N1QwxwYxyHRufCOWF5LkCrgI=
Subject key identifier: A8:FD:8C:0B:0E:02:CA:21:BE:82:71:90:4A:FE:07:7A:9F:B4:AC:2E
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 0191122908DFFA05C0A760768D32183B44EB
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/qP2MCw4CyiG-gnGQSv4Hep-0rC4.roa
Signing time: Fri 02 Aug 2024 08:16:04 +0000
ROA not before: Fri 02 Aug 2024 08:16:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3360
IP address blocks: 195.66.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:29:08:df:fa:05:c0:a7:60:76:8d:32:18:3b:44:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Aug 2 08:16:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8fd8c0b0e02ca21be8271904afe077a9fb4ac2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:1e:1c:57:7e:65:da:7c:64:91:ee:9d:ce:
48:37:5d:0f:a1:78:46:a0:be:c6:10:e4:ea:21:34:
f9:36:31:8c:60:ea:6c:76:35:6b:36:c7:1a:64:4d:
b4:85:73:0c:32:87:70:49:f1:28:b0:83:63:29:81:
f5:c3:03:67:65:33:3f:71:5c:dc:95:cf:20:a8:8c:
c0:1b:a5:3d:d9:bd:3e:e5:9f:c0:36:6a:01:08:e8:
e7:55:03:eb:02:8d:b3:ea:f9:6b:d1:5c:6e:c2:64:
3e:1f:bd:37:14:16:de:26:23:35:b8:1c:80:9b:f9:
4d:74:98:c3:66:9d:8b:af:ba:93:50:bf:7d:12:2a:
f2:5f:1b:fe:85:26:20:e5:35:f0:c9:83:f2:2e:47:
11:33:ae:80:0f:39:a5:85:25:1e:25:b0:49:85:01:
8e:62:a1:09:48:1a:59:70:44:32:51:fb:69:ec:56:
6f:30:ee:c2:aa:da:0b:cd:2e:85:0d:6a:0b:bf:11:
e1:98:b7:d0:66:d5:79:58:01:d4:c0:43:d1:fd:6e:
2b:42:a8:68:39:0f:dd:05:5f:f4:35:53:84:ba:2b:
7f:4a:bf:0f:24:47:2d:42:88:1f:50:73:23:ea:7c:
e3:a3:32:c5:30:67:e1:da:c8:7c:87:45:9d:c9:d0:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FD:8C:0B:0E:02:CA:21:BE:82:71:90:4A:FE:07:7A:9F:B4:AC:2E
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/qP2MCw4CyiG-gnGQSv4Hep-0rC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.107.0/24
Signature Algorithm: sha256WithRSAEncryption
61:11:36:56:cc:d9:91:80:1f:27:fe:d6:45:25:d6:1e:45:0e:
7b:e1:1b:89:88:c9:23:35:b0:87:17:e8:82:d9:53:86:28:2c:
ea:ed:e0:01:2a:bf:19:1d:2f:2e:49:15:6b:8d:ef:ca:7b:9f:
c0:8c:3f:a4:1c:4d:ef:d0:16:c6:5c:25:75:81:ec:ea:e8:94:
76:56:9a:fb:51:d5:a5:05:b5:96:ab:72:64:64:40:8c:7e:11:
9d:c2:51:3e:71:8e:d8:fd:87:09:81:4a:9e:50:10:3c:d6:60:
ef:ee:f1:64:18:4b:96:78:72:e8:1c:42:f8:fe:78:7e:aa:dc:
b9:bb:28:04:ba:04:c8:07:c5:a2:60:1c:71:fe:fb:31:09:2d:
16:6b:6d:5b:1c:a2:7a:c6:b2:8c:16:e8:15:4a:24:73:2a:e1:
fe:be:69:87:9c:ad:b3:ec:10:41:36:c7:84:61:c1:e8:a4:bd:
b7:7e:5d:54:5c:45:a7:8a:39:71:17:7b:ff:2f:3a:ea:b7:75:
9d:f9:fa:b2:9e:86:26:a0:44:f2:07:34:fc:a8:ff:67:45:da:
80:cc:c3:27:ed:2f:62:53:06:a7:ba:63:7b:fb:b4:29:60:d0:
3f:b9:3c:83:30:56:67:a3:2f:72:b7:18:92:74:5d:14:84:78:
fc:46:39:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZESKQjf+gXAp2B2jTIYO0TrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOTkxOGVkMjE5ZTdkM2Q5MjI3MzdlY2RjNzMxZjBjYTYw
YTY4YjgwHhcNMjQwODAyMDgxNjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGZkOGMwYjBlMDJjYTIxYmU4MjcxOTA0YWZlMDc3YTlmYjRhYzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGQeHFd+Zdp8ZJHunc5IN10PoXhG
oL7GEOTqITT5NjGMYOpsdjVrNscaZE20hXMMModwSfEosINjKYH1wwNnZTM/cVzc
lc8gqIzAG6U92b0+5Z/ANmoBCOjnVQPrAo2z6vlr0VxuwmQ+H703FBbeJiM1uByA
m/lNdJjDZp2Lr7qTUL99EiryXxv+hSYg5TXwyYPyLkcRM66ADzmlhSUeJbBJhQGO
YqEJSBpZcEQyUftp7FZvMO7CqtoLzS6FDWoLvxHhmLfQZtV5WAHUwEPR/W4rQqho
OQ/dBV/0NVOEuit/Sr8PJEctQogfUHMj6nzjozLFMGfh2sh8h0WdydCF8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKj9jAsOAsohvoJxkEr+B3qftKwuMB8GA1UdIwQY
MBaAFPGZGO0hnn09kic37NxzHwymCmi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzIt
MzEzZWZlYjBiMTlkLzEvcVAyTUN3NEN5aUctZ25HUVN2NEhlcC0wckM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzItMzEzZWZlYjBiMTlk
LzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JrMA0G
CSqGSIb3DQEBCwUAA4IBAQBhETZWzNmRgB8n/tZFJdYeRQ574RuJiMkjNbCHF+iC
2VOGKCzq7eABKr8ZHS8uSRVrje/Ke5/AjD+kHE3v0BbGXCV1gezq6JR2Vpr7UdWl
BbWWq3JkZECMfhGdwlE+cY7Y/YcJgUqeUBA81mDv7vFkGEuWeHLoHEL4/nh+qty5
uygEugTIB8WiYBxx/vsxCS0Wa21bHKJ6xrKMFugVSiRzKuH+vmmHnK2z7BBBNseE
YcHopL23fl1UXEWnijlxF3v/Lzrqt3Wd+fqynoYmoETyBzT8qP9nRdqAzMMn7S9i
UwanumN7+7QpYNA/uTyDMFZnoy9ytxiSdF0UhHj8Rjmy
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:14:56 2024 by rpki-client on console-ams.rpki-client.org