Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fqwInlTPqsTTM2qh-4WLDmYlghY.roa
File: fqwInlTPqsTTM2qh-4WLDmYlghY.roa (raw, json)
Hash identifier: EtRadnXTwkSwsZfYK1hWgcYZ/YQVcLmMGvmKegTublQ=
Subject key identifier: 7E:AC:08:9E:54:CF:AA:C4:D3:33:6A:A1:FB:85:8B:0E:66:25:82:16
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018FECF3217836D0ED8471E00C3109E374C4
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fqwInlTPqsTTM2qh-4WLDmYlghY.roa
Signing time: Thu 06 Jun 2024 09:48:27 +0000
ROA not before: Thu 06 Jun 2024 09:48:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215133
IP address blocks: 77.72.81.0/24 maxlen: 24
146.19.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 13:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ec:f3:21:78:36:d0:ed:84:71:e0:0c:31:09:e3:74:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 6 09:48:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7eac089e54cfaac4d3336aa1fb858b0e66258216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:51:bc:fe:e8:4e:63:4b:c5:f9:9a:3e:61:b0:
21:36:d8:fb:54:eb:50:56:01:54:68:dc:f2:62:c2:
ac:02:35:a6:f5:a9:2a:1a:f9:58:cb:21:fe:5e:98:
ca:b1:8b:5a:51:28:7c:d0:6a:a7:02:50:e8:f1:e4:
d4:ab:ea:70:08:90:71:6b:66:9b:a0:44:ee:58:97:
97:9e:da:f7:23:2a:3c:69:6b:56:90:d5:85:0f:96:
91:3a:23:54:75:90:d8:f4:ad:e5:3e:41:7c:1c:a3:
19:28:29:cd:87:96:53:2b:fe:15:db:37:0b:0a:16:
ce:a3:b1:62:a9:bd:03:02:8e:4d:52:99:52:2c:a1:
80:c6:de:c3:78:f8:c2:99:18:d5:4a:34:37:7d:43:
2b:38:53:88:4a:59:64:74:81:a1:5b:93:68:6d:fc:
27:68:c3:f6:6c:ca:91:85:5a:c1:e2:41:cd:14:4a:
93:b2:55:c9:aa:a6:eb:2b:a7:eb:3d:f4:ff:56:7f:
72:9f:47:1d:65:6a:df:71:40:b2:00:06:79:b4:bc:
9c:5c:9e:bd:db:11:ea:ae:e0:4b:1d:de:05:b0:e6:
8b:68:46:1e:4c:19:12:be:87:b6:67:98:32:47:a0:
0c:03:f0:5c:1c:f2:21:06:bd:a2:7a:53:fe:57:89:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AC:08:9E:54:CF:AA:C4:D3:33:6A:A1:FB:85:8B:0E:66:25:82:16
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fqwInlTPqsTTM2qh-4WLDmYlghY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.81.0/24
146.19.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:df:7a:b7:38:85:60:7e:67:34:49:ea:23:18:75:7e:4d:80:
bb:08:3a:ac:52:7f:b0:18:91:0a:ee:90:f1:de:91:75:48:8e:
ae:96:f4:ed:68:f3:f0:36:0c:f3:e3:ca:37:84:a7:f2:df:1b:
da:e6:c7:0c:d9:a4:1e:01:b9:e3:fe:7c:10:69:19:9b:f1:e0:
a3:9e:d5:d4:bf:5b:14:3d:44:41:aa:2f:21:d1:13:17:28:45:
3d:c9:24:e3:6f:30:7f:f8:82:f3:93:a3:13:d9:ff:dc:e3:e6:
c3:01:d9:c8:82:69:90:31:d2:eb:e4:c9:32:8c:03:cc:be:68:
ce:e4:a5:a0:44:54:9c:36:55:c4:ee:9a:57:93:16:f0:ea:e6:
e2:cc:07:17:d1:08:51:e3:9e:f7:a7:26:6f:9b:c9:aa:05:0f:
3d:13:99:fd:7c:45:84:2a:f3:69:f9:e3:e3:05:77:77:b1:5e:
96:f9:5f:3c:b5:90:e9:b6:e0:d9:46:4e:55:e6:75:bb:cd:55:
e9:f1:70:b1:58:c9:31:fb:4c:7e:a3:7d:79:eb:a6:b0:c7:17:
e6:4f:4b:26:4c:a3:50:a5:7b:a4:dd:f7:bd:49:d8:e0:77:b1:
39:cb:df:ef:c3:b1:cd:c1:b7:10:0b:1a:8c:95:b6:1e:00:9d:
cc:c9:8b:d1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/s8yF4NtDthHHgDDEJ43TEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjQwNjA2MDk0ODI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWFjMDg5ZTU0Y2ZhYWM0ZDMzMzZhYTFmYjg1OGIwZTY2MjU4MjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71G8/uhOY0vF+Zo+YbAhNtj7VOtQ
VgFUaNzyYsKsAjWm9akqGvlYyyH+XpjKsYtaUSh80GqnAlDo8eTUq+pwCJBxa2ab
oETuWJeXntr3Iyo8aWtWkNWFD5aROiNUdZDY9K3lPkF8HKMZKCnNh5ZTK/4V2zcL
ChbOo7Fiqb0DAo5NUplSLKGAxt7DePjCmRjVSjQ3fUMrOFOISllkdIGhW5Nobfwn
aMP2bMqRhVrB4kHNFEqTslXJqqbrK6frPfT/Vn9yn0cdZWrfcUCyAAZ5tLycXJ69
2xHqruBLHd4FsOaLaEYeTBkSvoe2Z5gyR6AMA/BcHPIhBr2ielP+V4lgcQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH6sCJ5Uz6rE0zNqofuFiw5mJYIWMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvZnF3SW5sVFBxc1RUTTJxaC00V0xEbVlsZ2hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATUhRAwQA
khNdMA0GCSqGSIb3DQEBCwUAA4IBAQAO33q3OIVgfmc0SeojGHV+TYC7CDqsUn+w
GJEK7pDx3pF1SI6ulvTtaPPwNgzz48o3hKfy3xva5scM2aQeAbnj/nwQaRmb8eCj
ntXUv1sUPURBqi8h0RMXKEU9ySTjbzB/+ILzk6MT2f/c4+bDAdnIgmmQMdLr5Mky
jAPMvmjO5KWgRFScNlXE7ppXkxbw6ubizAcX0QhR4573pyZvm8mqBQ89E5n9fEWE
KvNp+ePjBXd3sV6W+V88tZDptuDZRk5V5nW7zVXp8XCxWMkx+0x+o31566awxxfm
T0smTKNQpXuk3fe9Sdjgd7E5y9/vw7HNwbcQCxqMlbYeAJ3MyYvR
-----END CERTIFICATE-----
Generated at Fri Jun 21 20:02:55 2024 by rpki-client on console-ams.rpki-client.org