Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Q0EpOpbMx0436uoo_Bg9AxxtIJE.roa
File: Q0EpOpbMx0436uoo_Bg9AxxtIJE.roa (raw, json)
Hash identifier: wfRm8vVzwhX8cLAm+sg4QNXNUaRfRyENc4LDojAUhwk=
Subject key identifier: 43:41:29:3A:96:CC:C7:4E:37:EA:EA:28:FC:18:3D:03:1C:6D:20:91
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 018CC9BC324B29B52B0E340BC129B8C79D26
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Q0EpOpbMx0436uoo_Bg9AxxtIJE.roa
Signing time: Tue 02 Jan 2024 10:33:23 +0000
ROA not before: Tue 02 Jan 2024 10:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58269
IP address blocks: 185.8.60.0/22 maxlen: 22
91.220.43.0/24 maxlen: 24
2a03:3440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:32:4b:29:b5:2b:0e:34:0b:c1:29:b8:c7:9d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Jan 2 10:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4341293a96ccc74e37eaea28fc183d031c6d2091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:2c:94:cb:56:d6:85:eb:24:e1:bf:51:a0:
09:db:df:ce:b5:c3:8a:e9:b1:fb:4a:30:81:ca:be:
2e:7a:62:33:12:8c:5c:40:0d:bb:76:e1:d4:7b:5b:
23:85:ec:d8:89:a6:c0:e4:6e:ab:3e:c1:bc:5a:5a:
fe:3f:47:e7:c5:74:d3:4d:08:03:8b:bf:1f:21:2e:
15:ba:57:66:f7:a9:79:68:14:75:ad:1c:0c:6b:32:
8a:01:f4:69:57:71:f0:d7:c1:d0:b8:52:c8:87:30:
6b:9a:23:21:e0:04:25:54:d7:3a:c3:80:6d:13:22:
9b:ab:df:b2:c7:3d:52:57:cf:28:e6:5f:5a:11:13:
d8:12:e5:7d:60:52:59:cf:5d:ac:a1:86:9d:c7:f4:
eb:a9:1f:6c:58:b1:f6:f7:bb:0d:5b:7a:74:9e:e7:
76:89:7e:8c:78:6a:30:e3:e8:59:64:d7:e1:5c:ab:
d6:36:6f:23:77:a3:21:ba:6d:c6:c5:dc:4e:af:30:
59:e9:de:cb:70:5b:e1:70:d1:d1:4f:03:e3:92:d6:
dc:69:3e:1c:a5:57:f5:58:e5:97:7d:ad:01:d4:0d:
0c:e6:aa:07:c8:c7:7b:22:9e:27:f2:7a:52:51:f5:
4f:ed:bc:e2:11:05:7b:d1:f8:16:b6:8d:d7:fe:cf:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:29:3A:96:CC:C7:4E:37:EA:EA:28:FC:18:3D:03:1C:6D:20:91
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Q0EpOpbMx0436uoo_Bg9AxxtIJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.43.0/24
185.8.60.0/22
IPv6:
2a03:3440::/32
Signature Algorithm: sha256WithRSAEncryption
9e:fa:98:a5:f4:bc:58:02:a8:f6:57:68:a9:77:83:ab:79:c9:
60:e9:df:1e:03:e9:aa:69:41:0f:ef:aa:c8:79:c5:88:98:82:
b6:02:da:c6:66:1c:be:22:1d:ba:cc:46:3c:e4:1c:0f:27:c6:
c9:06:aa:46:2b:1d:ed:0a:ca:21:37:69:c4:50:1a:7f:24:c5:
8d:10:a6:2d:a0:a8:e9:c2:da:81:1e:5b:c7:7b:a0:75:19:d4:
59:6c:19:17:9d:d8:0f:a6:14:1c:09:73:d0:24:98:e9:8b:e4:
40:52:6a:cd:1b:da:38:4b:65:de:2d:9d:19:e0:22:a2:8b:0f:
0d:fe:9b:d3:1c:64:e2:6f:80:40:66:5e:be:e0:67:8f:a6:be:
01:03:36:9f:eb:a1:49:22:8d:8c:14:fb:ea:b2:e2:f2:aa:a9:
58:5d:3c:dc:35:4a:13:5f:b5:e3:38:b9:8d:89:96:fe:eb:a8:
50:a6:dd:52:56:55:da:af:20:6e:39:fe:49:9f:fb:5a:5b:95:
ab:86:21:71:52:b3:a0:51:27:c6:c0:97:e5:83:ca:48:59:d8:
89:5d:b3:ab:c5:aa:0b:2a:3d:53:5b:7c:d4:1d:7c:a8:9e:96:
54:43:f4:1b:62:d0:05:6c:02:f6:5f:eb:f2:a8:1c:41:71:e5:
6a:3a:00:8a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzJvDJLKbUrDjQLwSm4x50mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjg0MjI1NGJiZDZiZjMzZTA5ZDA1YTQ1OGYwMGEwNDg0
Y2YxNmYwHhcNMjQwMTAyMTAzMzIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzQxMjkzYTk2Y2NjNzRlMzdlYWVhMjhmYzE4M2QwMzFjNmQyMDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4wslMtW1oXrJOG/UaAJ29/OtcOK
6bH7SjCByr4uemIzEoxcQA27duHUe1sjhezYiabA5G6rPsG8Wlr+P0fnxXTTTQgD
i78fIS4Vuldm96l5aBR1rRwMazKKAfRpV3Hw18HQuFLIhzBrmiMh4AQlVNc6w4Bt
EyKbq9+yxz1SV88o5l9aERPYEuV9YFJZz12soYadx/TrqR9sWLH297sNW3p0nud2
iX6MeGow4+hZZNfhXKvWNm8jd6Mhum3GxdxOrzBZ6d7LcFvhcNHRTwPjktbcaT4c
pVf1WOWXfa0B1A0M5qoHyMd7Ip4n8npSUfVP7bziEQV70fgWto3X/s83mwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFENBKTqWzMdON+rqKPwYPQMcbSCRMB8GA1UdIwQY
MBaAFGO4QiVLvWvzPgnQWkWPAKBITPFvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iZGQxZTctYjc5YS00YzIxLTliYTkt
ZjE1N2MzMjk0ZDQwLzEvUTBFcE9wYk14MDQzNnVvb19CZzlBeHh0SUpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iZGQxZTctYjc5YS00YzIxLTliYTktZjE1N2MzMjk0ZDQw
LzEvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9wrAwQC
uQg8MA0EAgACMAcDBQAqAzRAMA0GCSqGSIb3DQEBCwUAA4IBAQCe+pil9LxYAqj2
V2ipd4Oreclg6d8eA+mqaUEP76rIecWImIK2AtrGZhy+Ih26zEY85BwPJ8bJBqpG
Kx3tCsohN2nEUBp/JMWNEKYtoKjpwtqBHlvHe6B1GdRZbBkXndgPphQcCXPQJJjp
i+RAUmrNG9o4S2XeLZ0Z4CKiiw8N/pvTHGTib4BAZl6+4GePpr4BAzaf66FJIo2M
FPvqsuLyqqlYXTzcNUoTX7XjOLmNiZb+66hQpt1SVlXaryBuOf5Jn/taW5WrhiFx
UrOgUSfGwJflg8pIWdiJXbOrxaoLKj1TW3zUHXyonpZUQ/QbYtAFbAL2X+vyqBxB
ceVqOgCK
-----END CERTIFICATE-----
Generated at Sat Jun 8 07:55:07 2024 by rpki-client on console-fra.rpki-client.org