Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/qY5Vfqk-RO4oDDK4wuLJmMiAyLg.roa
File: qY5Vfqk-RO4oDDK4wuLJmMiAyLg.roa (raw, json)
Hash identifier: YgSfaCc90LeQ/xe6jYKkISR0ekDlExDB1OVIV+QDHnQ=
Subject key identifier: A9:8E:55:7E:A9:3E:44:EE:28:0C:32:B8:C2:E2:C9:98:C8:80:C8:B8
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 018CC2DB22D6D1728BAA8B201E65395899E2
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/qY5Vfqk-RO4oDDK4wuLJmMiAyLg.roa
Signing time: Mon 01 Jan 2024 02:29:50 +0000
ROA not before: Mon 01 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31253
IP address blocks: 80.242.222.0/24 maxlen: 24
80.242.223.0/24 maxlen: 24
188.127.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:22:d6:d1:72:8b:aa:8b:20:1e:65:39:58:99:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jan 1 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a98e557ea93e44ee280c32b8c2e2c998c880c8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0e:2f:16:df:7e:20:93:ec:bc:5f:50:75:ea:
ed:bb:02:7b:d5:b8:8c:35:08:f1:99:4c:7d:81:65:
cb:71:a4:3d:6e:86:ef:52:f1:fc:14:d5:cf:5e:c1:
95:32:62:c7:75:b6:b5:56:1a:c6:9e:79:cc:f2:e9:
30:b8:96:7d:02:41:33:18:32:37:48:52:cc:80:65:
a9:3a:d4:58:02:46:22:a7:fb:70:03:fc:42:2b:3d:
fb:7a:d4:94:e5:d2:9f:45:57:58:b0:f8:a2:6c:eb:
5d:36:6d:ea:6b:f5:65:36:4a:5f:e9:95:82:7f:06:
32:25:22:d8:a6:3d:c1:b8:56:2e:69:95:61:ad:c1:
32:a4:8e:62:aa:c3:21:f9:18:59:33:90:f0:84:8f:
f4:e4:7f:8d:b3:1a:8f:2c:3a:cc:d1:ac:64:87:4e:
a2:82:02:e7:b3:48:47:b0:f7:2c:6c:78:ba:fd:79:
4d:bd:1e:2c:9a:8c:f2:52:79:b2:96:80:34:a0:a1:
dd:2e:aa:00:27:49:7c:2f:a9:48:71:dd:60:41:7a:
c2:a0:da:99:73:5c:b7:39:c7:ad:e3:5d:56:86:07:
2f:d9:b4:32:2c:bd:df:f0:f5:ff:24:29:6e:11:e7:
c5:4b:57:0f:68:bd:b3:93:b4:dc:14:06:11:f1:2e:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8E:55:7E:A9:3E:44:EE:28:0C:32:B8:C2:E2:C9:98:C8:80:C8:B8
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/qY5Vfqk-RO4oDDK4wuLJmMiAyLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.222.0/23
188.127.40.0/24
Signature Algorithm: sha256WithRSAEncryption
84:28:ad:da:d9:7b:94:d3:8f:1b:23:d2:43:da:39:c5:4f:38:
dc:36:55:57:e5:3b:f4:41:4e:5e:fd:91:b2:29:05:47:fe:fe:
2c:64:cb:0d:2e:67:2c:c0:1f:5f:c4:e5:9c:ad:51:65:8b:65:
cc:9c:a1:92:3e:81:0a:9d:51:2d:9c:b4:13:f8:2a:ca:f0:2c:
04:4b:2d:ed:82:ff:c9:ce:61:6e:12:65:12:db:27:55:01:dd:
02:c1:d9:4e:5f:ab:06:8a:c3:d6:82:75:10:90:54:77:e6:93:
2f:0e:70:bf:62:1b:ff:ea:6d:94:b8:5c:51:2a:fc:d8:19:61:
7b:0e:95:1b:cf:ff:ff:28:55:36:5d:f4:29:1f:11:83:1b:ce:
93:2e:5f:49:3f:aa:55:4c:1b:55:99:d5:8f:8e:90:c4:48:78:
33:67:18:ed:0c:4a:3e:18:77:9c:05:74:d9:9f:55:93:f2:a7:
53:f8:08:cd:0d:a5:ca:11:80:18:e2:ce:8a:4b:6c:01:eb:d5:
78:f5:25:f0:4b:ab:5f:21:6f:8f:ce:a7:0b:00:19:04:17:36:
01:cb:3c:64:79:99:a5:ea:22:57:0e:21:9d:08:b6:08:c1:c8:
7a:17:07:33:7c:da:88:cf:55:dd:29:f8:a8:f2:73:0b:5d:1c:
a7:16:7b:72
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzC2yLW0XKLqosgHmU5WJniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh
YmE5ZmEwHhcNMjQwMTAxMDIyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOThlNTU3ZWE5M2U0NGVlMjgwYzMyYjhjMmUyYzk5OGM4ODBjOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ4vFt9+IJPsvF9QdertuwJ71biM
NQjxmUx9gWXLcaQ9bobvUvH8FNXPXsGVMmLHdba1VhrGnnnM8ukwuJZ9AkEzGDI3
SFLMgGWpOtRYAkYip/twA/xCKz37etSU5dKfRVdYsPiibOtdNm3qa/VlNkpf6ZWC
fwYyJSLYpj3BuFYuaZVhrcEypI5iqsMh+RhZM5DwhI/05H+NsxqPLDrM0axkh06i
ggLns0hHsPcsbHi6/XlNvR4smozyUnmyloA0oKHdLqoAJ0l8L6lIcd1gQXrCoNqZ
c1y3Ocet411Whgcv2bQyLL3f8PX/JCluEefFS1cPaL2zk7TcFAYR8S4oAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKmOVX6pPkTuKAwyuMLiyZjIgMi4MB8GA1UdIwQY
MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt
NDM4NDNjMmU5NDNiLzEvcVk1VmZxay1STzRvRERLNHd1TEptTWlBeUxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi
LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUPLeAwQA
vH8oMA0GCSqGSIb3DQEBCwUAA4IBAQCEKK3a2XuU048bI9JD2jnFTzjcNlVX5Tv0
QU5e/ZGyKQVH/v4sZMsNLmcswB9fxOWcrVFli2XMnKGSPoEKnVEtnLQT+CrK8CwE
Sy3tgv/JzmFuEmUS2ydVAd0CwdlOX6sGisPWgnUQkFR35pMvDnC/Yhv/6m2UuFxR
KvzYGWF7DpUbz///KFU2XfQpHxGDG86TLl9JP6pVTBtVmdWPjpDESHgzZxjtDEo+
GHecBXTZn1WT8qdT+AjNDaXKEYAY4s6KS2wB69V49SXwS6tfIW+PzqcLABkEFzYB
yzxkeZml6iJXDiGdCLYIwch6FwczfNqIz1XdKfio8nMLXRynFnty
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:51:55 2024 by rpki-client on console-fra.rpki-client.org