Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/QNIebKS3Iy5QlHLcsPxahAJ6L6M.roa
File: QNIebKS3Iy5QlHLcsPxahAJ6L6M.roa (raw, json)
Hash identifier: LqDFB798eoGnlzVzo1bI8mUsPUc0bX/Cehn+8eL6pdU=
Subject key identifier: 40:D2:1E:6C:A4:B7:23:2E:50:94:72:DC:B0:FC:5A:84:02:7A:2F:A3
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 018CC9BC920169BCC703DF1D682B7DD115A0
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/QNIebKS3Iy5QlHLcsPxahAJ6L6M.roa
Signing time: Tue 02 Jan 2024 10:33:47 +0000
ROA not before: Tue 02 Jan 2024 10:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208933
IP address blocks: 45.15.30.0/23 maxlen: 23
45.15.28.0/22 maxlen: 22
45.15.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:92:01:69:bc:c7:03:df:1d:68:2b:7d:d1:15:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Jan 2 10:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40d21e6ca4b7232e509472dcb0fc5a84027a2fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:42:b0:d2:b6:ae:44:72:2c:9b:36:e2:29:ab:
f2:7f:65:73:1d:ca:e5:ea:82:d8:6c:81:68:7b:32:
aa:70:ec:e6:cf:1b:71:ec:b9:2f:e1:0d:42:4c:64:
cb:92:56:62:d2:32:ce:e6:82:07:5a:d0:97:28:5b:
a6:98:38:c2:14:82:02:5b:c7:98:3b:55:56:9c:f8:
d8:29:6a:ac:37:ec:26:b2:63:4e:21:c5:a5:6c:6a:
7f:a6:e4:d9:83:06:da:4b:84:ec:e1:22:53:cd:39:
65:75:8d:a6:e8:6a:44:aa:a1:c6:60:12:21:2d:28:
aa:3f:ad:fe:da:f2:30:6a:4f:f0:2e:4d:e1:c6:78:
75:92:10:c6:3a:12:eb:3b:6c:99:2d:a3:d3:34:d3:
70:92:c5:59:b4:2e:51:52:f9:9c:cc:ab:c0:ed:88:
7f:a3:59:82:85:a9:f0:25:a4:7d:3f:b9:9d:82:dc:
77:09:d1:90:3b:95:d3:41:c2:90:01:e3:5a:03:fc:
e4:c0:e6:c0:15:b0:cd:b6:81:6b:55:c8:0c:62:f3:
bf:69:4d:0b:bd:39:92:7b:e5:48:17:b7:42:1c:43:
22:36:2d:18:e1:fa:3e:57:e1:1e:56:fa:6c:15:04:
6e:4b:a2:28:bc:ce:b9:7b:40:01:be:4c:1d:e6:4a:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D2:1E:6C:A4:B7:23:2E:50:94:72:DC:B0:FC:5A:84:02:7A:2F:A3
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/QNIebKS3Iy5QlHLcsPxahAJ6L6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.28.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:67:d5:2e:84:6a:e5:da:a7:bf:39:a6:88:ab:13:65:d9:fa:
f6:1f:db:5a:e8:27:17:06:f3:77:23:27:c8:66:6d:fa:3e:2f:
60:4c:46:bf:8b:39:d7:8d:10:e1:31:ec:aa:3c:09:44:3c:42:
7b:76:c9:49:81:30:76:d2:79:8b:04:de:22:ba:67:73:64:fb:
df:2c:1d:de:9e:54:50:25:81:49:65:33:80:7b:b9:5c:6a:4b:
49:98:85:9a:55:fb:0e:64:38:22:b7:72:4b:97:a3:cc:99:bc:
79:e2:61:d3:99:8b:c4:52:fe:57:90:a0:fe:b4:98:53:e6:fc:
0c:5e:06:13:78:3a:cb:85:57:7d:db:af:57:c5:6d:d9:a2:cb:
85:d1:92:2c:33:03:ca:ec:ab:f6:64:37:d4:ca:58:a0:04:46:
7b:91:3f:0c:40:13:d0:06:a7:b8:17:c3:79:9a:29:03:6a:f2:
b6:81:cb:55:19:e2:4a:1e:a5:17:5f:fd:53:25:93:81:69:fb:
0c:ba:15:8e:ce:11:c9:b3:88:92:92:79:97:9f:3f:21:a1:82:
44:f5:ab:1f:87:ef:40:d3:c8:59:6d:80:5e:14:43:d8:e0:e2:
65:7f:cc:07:54:ba:36:be:e8:8d:01:b9:fe:e5:11:12:74:fc:
13:00:1a:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvJIBabzHA98daCt90RWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzM2VlYzAzZWExMjI3MTMyNzhiNDA2NmVjZjJiZmVhYTE1
NjNjMGQwHhcNMjQwMTAyMTAzMzQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGQyMWU2Y2E0YjcyMzJlNTA5NDcyZGNiMGZjNWE4NDAyN2EyZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Kw0rauRHIsmzbiKavyf2VzHcrl
6oLYbIFoezKqcOzmzxtx7Lkv4Q1CTGTLklZi0jLO5oIHWtCXKFummDjCFIICW8eY
O1VWnPjYKWqsN+wmsmNOIcWlbGp/puTZgwbaS4Ts4SJTzTlldY2m6GpEqqHGYBIh
LSiqP63+2vIwak/wLk3hxnh1khDGOhLrO2yZLaPTNNNwksVZtC5RUvmczKvA7Yh/
o1mChanwJaR9P7mdgtx3CdGQO5XTQcKQAeNaA/zkwObAFbDNtoFrVcgMYvO/aU0L
vTmSe+VIF7dCHEMiNi0Y4fo+V+EeVvpsFQRuS6IovM65e0ABvkwd5kpH7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEDSHmyktyMuUJRy3LD8WoQCei+jMB8GA1UdIwQY
MBaAFKM+7APqEicTJ4tAZuzyv+qhVjwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZTNhYzAtYmUzMy00YTM3LWEwZDct
NTlhNWVlM2FkOWE4LzEvUU5JZWJLUzNJeTVRbEhMY3NQeGFoQUo2TDZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZTNhYzAtYmUzMy00YTM3LWEwZDctNTlhNWVlM2FkOWE4
LzEvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ8cMA0G
CSqGSIb3DQEBCwUAA4IBAQAeZ9UuhGrl2qe/OaaIqxNl2fr2H9ta6CcXBvN3IyfI
Zm36Pi9gTEa/iznXjRDhMeyqPAlEPEJ7dslJgTB20nmLBN4iumdzZPvfLB3enlRQ
JYFJZTOAe7lcaktJmIWaVfsOZDgit3JLl6PMmbx54mHTmYvEUv5XkKD+tJhT5vwM
XgYTeDrLhVd9269XxW3ZosuF0ZIsMwPK7Kv2ZDfUyligBEZ7kT8MQBPQBqe4F8N5
mikDavK2gctVGeJKHqUXX/1TJZOBafsMuhWOzhHJs4iSknmXnz8hoYJE9asfh+9A
08hZbYBeFEPY4OJlf8wHVLo2vuiNAbn+5RESdPwTABrN
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:58 2024 by rpki-client on console-fra.rpki-client.org