Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/qv-lK2kL_R4fXWhOg4IAVVMTZ0A.roa
File: qv-lK2kL_R4fXWhOg4IAVVMTZ0A.roa (raw, json)
Hash identifier: 0dqRdLKTerK8ALZsX9i6AGb+vhlW6Upb0dQjSHiJ688=
Subject key identifier: AA:FF:A5:2B:69:0B:FD:1E:1F:5D:68:4E:83:82:00:55:53:13:67:40
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649D46CB5EA193854AF4ED8734BF0DC
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/qv-lK2kL_R4fXWhOg4IAVVMTZ0A.roa
Signing time: Mon 01 Jan 2024 18:29:36 +0000
ROA not before: Mon 01 Jan 2024 18:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16045
IP address blocks: 89.215.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:d4:6c:b5:ea:19:38:54:af:4e:d8:73:4b:f0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aaffa52b690bfd1e1f5d684e8382005553136740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:01:9a:ce:af:c2:1d:d9:81:c8:23:33:f2:
30:be:f0:8b:0a:66:dc:37:47:f1:b9:92:8a:82:5a:
44:35:d2:17:af:00:9b:cb:48:7c:50:70:31:c9:b2:
37:a7:c8:4c:dd:a8:b5:de:c3:5c:9e:34:b8:26:0c:
9a:03:c8:37:c9:af:0d:10:76:13:9e:fa:ef:ef:26:
88:e3:3d:b9:ff:e5:0a:07:78:1c:0f:92:26:15:b6:
75:ae:51:7b:c9:16:2a:05:97:f2:30:c9:16:73:f6:
03:4a:01:8c:26:6c:58:23:92:0d:3b:50:27:9f:4b:
48:49:98:28:6d:4e:0e:82:d4:c8:63:7e:f2:da:84:
8f:4d:d8:7a:0a:ae:ec:80:1f:8d:3b:21:98:f8:af:
a7:f6:24:aa:e7:29:9a:2e:b1:33:85:de:5d:19:9d:
6a:15:e9:87:ff:4c:cd:d7:fe:ae:9e:05:d3:99:ab:
c0:97:f6:d2:7f:b9:b9:64:1d:bc:e7:a5:df:4b:86:
20:d9:fa:2e:42:1c:7c:42:50:7a:a1:95:cf:32:27:
e9:bc:5c:fc:c1:1a:06:dd:5c:cb:6a:03:9d:12:4b:
7a:75:4b:99:81:b8:f2:9b:71:b9:89:c2:e7:92:e4:
2d:89:5f:17:4c:61:16:5f:9f:38:04:90:5c:fe:cd:
54:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FF:A5:2B:69:0B:FD:1E:1F:5D:68:4E:83:82:00:55:53:13:67:40
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/qv-lK2kL_R4fXWhOg4IAVVMTZ0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.215.213.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ba:60:8c:99:89:5e:3e:ca:67:73:12:97:d1:f2:d7:0e:f4:
50:20:c0:b5:59:06:18:dd:88:9d:7a:0b:53:47:04:ad:a4:9c:
b4:19:fc:5f:1d:66:55:dd:46:4b:8e:0b:57:47:15:69:1b:04:
94:38:2b:da:f7:67:92:da:24:92:c0:65:c6:4c:bb:98:ba:2a:
f9:36:2d:fb:4e:03:78:94:42:61:bf:5e:81:3d:b6:cb:cc:39:
aa:8e:c9:33:20:74:c3:c3:88:0b:67:dd:d6:7a:0f:07:be:0c:
f7:b6:d0:f6:a4:03:f8:9d:6f:a0:dd:6d:b6:9d:1a:c9:4f:61:
73:b3:09:37:55:f7:93:1f:41:94:b1:bd:9c:74:f0:d5:ed:d5:
a0:3d:5f:00:b4:9b:fc:22:d3:97:db:35:0a:b6:a4:3d:60:40:
c6:64:9b:ac:a3:50:f8:3f:8f:10:81:72:9a:a1:fc:61:39:8c:
3f:6c:24:ec:d7:76:b3:c9:d9:18:ef:18:ec:85:00:2a:d8:db:
b3:46:1a:4f:c0:8f:11:4b:41:9e:fb:3d:71:22:33:ef:33:c7:
7c:cf:52:9b:2f:07:94:72:d7:6f:49:ab:e5:90:6d:dd:d5:5c:
12:c8:88:da:65:09:70:ef:70:01:83:32:85:bf:cf:19:97:3c:
0e:29:16:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSdRsteoZOFSvTthzS/DcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjQwMTAxMTgyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWZmYTUyYjY5MGJmZDFlMWY1ZDY4NGU4MzgyMDA1NTUzMTM2NzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0EBms6vwh3ZgcgjM/IwvvCLCmbc
N0fxuZKKglpENdIXrwCby0h8UHAxybI3p8hM3ai13sNcnjS4JgyaA8g3ya8NEHYT
nvrv7yaI4z25/+UKB3gcD5ImFbZ1rlF7yRYqBZfyMMkWc/YDSgGMJmxYI5INO1An
n0tISZgobU4OgtTIY37y2oSPTdh6Cq7sgB+NOyGY+K+n9iSq5ymaLrEzhd5dGZ1q
FemH/0zN1/6ungXTmavAl/bSf7m5ZB2856XfS4Yg2fouQhx8QlB6oZXPMifpvFz8
wRoG3VzLagOdEkt6dUuZgbjym3G5icLnkuQtiV8XTGEWX584BJBc/s1UPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKr/pStpC/0eH11oToOCAFVTE2dAMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvcXYtbEsya0xfUjRmWFdoT2c0SUFWVk1UWjBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdfVMA0G
CSqGSIb3DQEBCwUAA4IBAQBCumCMmYlePspncxKX0fLXDvRQIMC1WQYY3YidegtT
RwStpJy0GfxfHWZV3UZLjgtXRxVpGwSUOCva92eS2iSSwGXGTLuYuir5Ni37TgN4
lEJhv16BPbbLzDmqjskzIHTDw4gLZ93Weg8Hvgz3ttD2pAP4nW+g3W22nRrJT2Fz
swk3VfeTH0GUsb2cdPDV7dWgPV8AtJv8ItOX2zUKtqQ9YEDGZJuso1D4P48QgXKa
ofxhOYw/bCTs13azydkY7xjshQAq2NuzRhpPwI8RS0Ge+z1xIjPvM8d8z1KbLweU
ctdvSavlkG3d1VwSyIjaZQlw73ABgzKFv88ZlzwOKRYj
-----END CERTIFICATE-----
Generated at Mon May 6 12:05:03 2024 by rpki-client on console-fra.rpki-client.org