Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/q4lNPBtz8ZaBtp1jN3aEccFqII0.roa
File: q4lNPBtz8ZaBtp1jN3aEccFqII0.roa (raw, json)
Hash identifier: v520n7QwZuOfGczkEsIXWHKVYYGORgRjg5gMGfhocwA=
Subject key identifier: AB:89:4D:3C:1B:73:F1:96:81:B6:9D:63:37:76:84:71:C1:6A:20:8D
Certificate issuer: /CN=734c3511cbff092816418be477cb553d66b5b84f
Certificate serial: 018CC6B93A4B1CFF3CF566EFB6B046065118
Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/q4lNPBtz8ZaBtp1jN3aEccFqII0.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31463
IP address blocks: 109.71.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3a:4b:1c:ff:3c:f5:66:ef:b6:b0:46:06:51:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab894d3c1b73f19681b69d6337768471c16a208d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:00:0a:d4:1e:fe:06:3e:4b:0a:67:a9:36:
f5:d1:08:e2:3d:4e:54:df:98:ba:94:16:28:a5:f8:
8b:b4:1f:a1:c5:94:b9:5a:5d:54:f2:bb:ce:a0:45:
3a:d5:2d:3a:44:fc:c2:39:dc:7e:3d:7e:99:37:08:
72:76:58:34:44:74:0e:45:24:b8:a0:c8:dc:7b:a7:
9b:e2:ea:fc:2d:b4:44:8e:bc:08:d0:bc:b9:df:8b:
c2:93:99:08:fa:63:c0:60:06:ac:b0:ed:8c:5c:1b:
1b:e9:7c:f1:d2:76:5a:9a:cf:39:40:8e:cd:94:a3:
5d:5e:fa:b2:ad:2e:a1:26:8e:fb:97:11:02:fe:32:
8f:7a:f5:4c:27:34:a7:e0:02:55:c5:a8:36:fd:87:
37:ac:7b:76:27:05:d9:61:fb:c9:69:a6:7e:9e:e1:
92:14:ca:c9:44:50:46:b5:87:d3:ec:59:ef:37:1a:
b8:5f:22:da:8b:4c:40:6e:7f:a7:c7:e3:db:2c:a6:
30:5c:fb:31:21:52:0e:cc:5b:1e:fd:26:13:50:56:
f0:46:72:41:1c:98:51:ee:df:a2:17:24:15:65:cc:
75:ba:8c:c4:be:d9:02:f9:be:b1:cf:f8:66:e9:e0:
60:bc:c8:b3:ef:24:f1:a4:c6:dd:cf:de:80:7c:31:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:89:4D:3C:1B:73:F1:96:81:B6:9D:63:37:76:84:71:C1:6A:20:8D
X509v3 Authority Key Identifier:
keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/q4lNPBtz8ZaBtp1jN3aEccFqII0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.78.0/24
Signature Algorithm: sha256WithRSAEncryption
99:71:1d:f5:b4:7c:57:c7:bb:4f:49:73:c7:df:31:ee:7d:ee:
1e:0c:69:7f:69:7a:bf:9d:24:1a:ed:ac:92:f1:c3:15:7c:9c:
4f:d0:72:82:e1:77:47:01:28:f5:57:b3:d7:4f:c8:f8:fd:76:
c0:8d:71:e4:6e:e5:15:d2:7b:16:ac:56:ab:89:6c:3f:a0:7c:
81:7b:06:89:46:79:fd:84:3e:3b:15:69:8a:50:ff:bc:cf:b2:
f4:b9:35:f2:4f:00:1c:43:ad:72:16:93:1a:4e:38:6c:c4:4d:
8d:db:13:df:bc:48:18:93:c1:90:0e:0b:1e:4e:af:2f:27:82:
33:12:87:8f:d6:ec:55:67:f7:81:4f:15:ad:08:33:5e:ac:58:
83:d8:32:66:0c:31:ed:ce:e4:1a:82:ca:4f:4d:47:5c:00:81:
1d:c9:3a:53:31:ab:58:5a:bd:36:d8:2f:da:4c:32:e4:cf:73:
2e:bb:90:71:b9:28:8b:01:ea:12:9f:9a:27:76:92:0e:d8:77:
1a:0e:ec:f5:49:df:ed:ad:86:2f:2f:36:cc:2c:e9:57:b9:90:
c3:34:fd:6b:14:52:fa:38:4f:fe:29:30:35:eb:62:2e:88:f6:
c3:3e:98:1b:b2:46:eb:31:f2:7e:60:c9:46:87:62:4e:1f:75:
4a:17:27:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuTpLHP889WbvtrBGBlEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNGMzNTExY2JmZjA5MjgxNjQxOGJlNDc3Y2I1NTNkNjZi
NWI4NGYwHhcNMjQwMTAxMjAzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjg5NGQzYzFiNzNmMTk2ODFiNjlkNjMzNzc2ODQ3MWMxNmEyMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiioACtQe/gY+SwpnqTb10QjiPU5U
35i6lBYopfiLtB+hxZS5Wl1U8rvOoEU61S06RPzCOdx+PX6ZNwhydlg0RHQORSS4
oMjce6eb4ur8LbREjrwI0Ly534vCk5kI+mPAYAassO2MXBsb6Xzx0nZams85QI7N
lKNdXvqyrS6hJo77lxEC/jKPevVMJzSn4AJVxag2/Yc3rHt2JwXZYfvJaaZ+nuGS
FMrJRFBGtYfT7FnvNxq4XyLai0xAbn+nx+PbLKYwXPsxIVIOzFse/SYTUFbwRnJB
HJhR7t+iFyQVZcx1uozEvtkC+b6xz/hm6eBgvMiz7yTxpMbdz96AfDG7AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKuJTTwbc/GWgbadYzd2hHHBaiCNMB8GA1UdIwQY
MBaAFHNMNRHL/wkoFkGL5HfLVT1mtbhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jM2QyMjAtNDk4NS00ZDE5LTgyMDAt
NjA4MDk3ZjE4ZDgzLzEvcTRsTlBCdHo4WmFCdHAxak4zYUVjY0ZxSUkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9jM2QyMjAtNDk4NS00ZDE5LTgyMDAtNjA4MDk3ZjE4ZDgz
LzEvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUdOMA0G
CSqGSIb3DQEBCwUAA4IBAQCZcR31tHxXx7tPSXPH3zHufe4eDGl/aXq/nSQa7ayS
8cMVfJxP0HKC4XdHASj1V7PXT8j4/XbAjXHkbuUV0nsWrFariWw/oHyBewaJRnn9
hD47FWmKUP+8z7L0uTXyTwAcQ61yFpMaTjhsxE2N2xPfvEgYk8GQDgseTq8vJ4Iz
EoeP1uxVZ/eBTxWtCDNerFiD2DJmDDHtzuQagspPTUdcAIEdyTpTMatYWr022C/a
TDLkz3Muu5BxuSiLAeoSn5ondpIO2HcaDuz1Sd/trYYvLzbMLOlXuZDDNP1rFFL6
OE/+KTA162IuiPbDPpgbskbrMfJ+YMlGh2JOH3VKFycx
-----END CERTIFICATE-----
Generated at Sat Jun 15 10:38:33 2024 by rpki-client on console-ams.rpki-client.org