Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KoqQi4E0LcB8s13HdRyl87Mhfdo.roa
File: KoqQi4E0LcB8s13HdRyl87Mhfdo.roa (raw, json)
Hash identifier: x64okAI7JfDomfBP6W9enJRX1BkJgQahhC1FgHPHpkU=
Subject key identifier: 2A:8A:90:8B:81:34:2D:C0:7C:B3:5D:C7:75:1C:A5:F3:B3:21:7D:DA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E7F0331652246D7740F51ED8256B82798
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KoqQi4E0LcB8s13HdRyl87Mhfdo.roa
Signing time: Wed 27 Mar 2024 08:24:59 +0000
ROA not before: Wed 27 Mar 2024 08:24:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204729
IP address blocks: 81.161.238.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7f:03:31:65:22:46:d7:74:0f:51:ed:82:56:b8:27:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 27 08:24:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a8a908b81342dc07cb35dc7751ca5f3b3217dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:a0:f7:66:fb:2f:30:12:5f:09:83:2a:df:
ab:6c:f0:2d:09:d6:ce:5e:87:d0:26:7a:f7:70:58:
d3:a1:fb:50:9d:ab:b9:27:6b:e7:f0:f8:eb:f4:5a:
07:66:4f:4f:7d:57:94:3e:f0:a9:25:fc:09:29:f5:
83:ad:56:c6:c2:6a:a4:28:64:f3:6b:a6:17:e3:df:
1c:e0:b7:86:77:a4:23:b3:40:16:17:58:a6:15:e8:
4b:b4:81:99:11:00:7e:d2:bd:af:6d:f0:d0:b3:ca:
28:d1:26:1e:84:aa:ab:7c:2f:1c:03:18:27:a0:e9:
26:0c:fa:06:28:5d:ee:c7:61:aa:e6:06:05:69:ce:
48:72:e7:83:14:45:59:8a:0a:36:82:ee:76:dc:8a:
41:0c:9a:71:80:0b:10:3a:96:3d:98:d7:ce:38:d1:
16:ac:dd:35:b6:2c:35:93:05:78:7a:64:e2:8d:89:
4b:63:43:29:f5:88:04:f2:05:d1:a8:c9:a2:bd:8e:
a1:d8:96:6b:6e:ab:4d:44:01:61:02:b8:94:7f:dd:
a1:e4:9f:62:56:e1:8b:db:dd:82:f4:36:f4:7e:a3:
f2:8f:e9:7d:85:5a:05:a0:86:77:2f:87:ad:dc:d2:
2b:4e:6b:b5:9c:33:88:86:93:07:c5:07:8e:8e:bf:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8A:90:8B:81:34:2D:C0:7C:B3:5D:C7:75:1C:A5:F3:B3:21:7D:DA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KoqQi4E0LcB8s13HdRyl87Mhfdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.238.0/24
85.31.47.0/24
178.215.224.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:2c:bd:8f:66:fd:40:2b:23:85:6e:8c:76:ed:43:00:50:a6:
99:67:f7:55:a2:3e:a5:7b:7b:d8:e4:71:e0:a9:6a:4e:90:ff:
d7:a3:d5:f3:c6:71:83:e7:20:ef:95:5c:57:8c:67:d1:4f:62:
2f:55:27:83:ea:5a:ff:25:3b:f0:8f:cb:03:c1:d6:71:f8:7d:
f2:55:c0:4b:41:4a:45:9b:c2:40:ee:c3:fa:62:69:41:9e:72:
6b:b3:5b:22:d7:ba:ee:10:71:6b:9e:70:1a:3b:24:f6:85:79:
78:5f:30:29:60:7c:84:fe:3e:cb:57:84:f1:3a:78:e6:2d:75:
3b:5e:97:55:03:fc:8a:b8:66:1c:2b:da:cb:b3:51:f9:36:4c:
e4:9d:c5:f0:5e:f7:02:30:e8:90:87:84:15:5c:2c:07:b0:dd:
b6:43:e7:5c:77:e5:55:a0:2b:e7:06:6b:1b:7e:05:a1:59:7a:
f4:0b:87:0d:8c:c9:09:67:2f:dc:43:e3:b4:f4:22:d4:45:82:
4d:e2:72:fa:63:83:9c:f7:01:e0:28:e0:f0:f7:fb:27:9b:6f:
4d:4e:6c:5f:60:af:9a:6b:65:36:da:58:a5:c2:a3:fd:cb:5b:
85:2f:06:26:bf:5a:5a:15:28:16:c1:72:39:f0:9d:a8:52:f1:
1b:fb:e5:1c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY5/AzFlIkbXdA9R7YJWuCeYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMzI3MDgyNDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYThhOTA4YjgxMzQyZGMwN2NiMzVkYzc3NTFjYTVmM2IzMjE3ZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV+g92b7LzASXwmDKt+rbPAtCdbO
XofQJnr3cFjToftQnau5J2vn8Pjr9FoHZk9PfVeUPvCpJfwJKfWDrVbGwmqkKGTz
a6YX498c4LeGd6Qjs0AWF1imFehLtIGZEQB+0r2vbfDQs8oo0SYehKqrfC8cAxgn
oOkmDPoGKF3ux2Gq5gYFac5IcueDFEVZigo2gu523IpBDJpxgAsQOpY9mNfOONEW
rN01tiw1kwV4emTijYlLY0Mp9YgE8gXRqMmivY6h2JZrbqtNRAFhAriUf92h5J9i
VuGL292C9Db0fqPyj+l9hVoFoIZ3L4et3NIrTmu1nDOIhpMHxQeOjr8sQQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCqKkIuBNC3AfLNdx3UcpfOzIX3aMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvS29xUWk0RTBMY0I4czEzSGRSeWw4N01oZmRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUaHuAwQA
VR8vAwQAstfgMA0GCSqGSIb3DQEBCwUAA4IBAQBtLL2PZv1AKyOFbox27UMAUKaZ
Z/dVoj6le3vY5HHgqWpOkP/Xo9XzxnGD5yDvlVxXjGfRT2IvVSeD6lr/JTvwj8sD
wdZx+H3yVcBLQUpFm8JA7sP6YmlBnnJrs1si17ruEHFrnnAaOyT2hXl4XzApYHyE
/j7LV4TxOnjmLXU7XpdVA/yKuGYcK9rLs1H5NkzkncXwXvcCMOiQh4QVXCwHsN22
Q+dcd+VVoCvnBmsbfgWhWXr0C4cNjMkJZy/cQ+O09CLURYJN4nL6Y4Oc9wHgKODw
9/snm29NTmxfYK+aa2U22lilwqP9y1uFLwYmv1paFSgWwXI58J2oUvEb++Uc
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:45 2024 by rpki-client on console-ams.rpki-client.org