Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/qJKGGMVxeASWYu_cMXUL4JUsRVk.roa
File: qJKGGMVxeASWYu_cMXUL4JUsRVk.roa (raw, json)
Hash identifier: DFEKflj15LmnsEut7pJzaDHO7lVM/yc4SfEyHbV6gPY=
Subject key identifier: A8:92:86:18:C5:71:78:04:96:62:EF:DC:31:75:0B:E0:95:2C:45:59
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 018CC94E1DC81F16F9CB1D7CD30B27F29013
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/qJKGGMVxeASWYu_cMXUL4JUsRVk.roa
Signing time: Tue 02 Jan 2024 08:33:08 +0000
ROA not before: Tue 02 Jan 2024 08:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50198
IP address blocks: 193.202.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:1d:c8:1f:16:f9:cb:1d:7c:d3:0b:27:f2:90:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Jan 2 08:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8928618c57178049662efdc31750be0952c4559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:b5:d8:4c:51:10:ed:8e:8d:2a:1a:0b:80:
66:f8:34:35:83:7a:27:f0:03:18:c2:f7:70:45:a4:
9f:6e:2d:01:31:a5:9b:4a:07:e3:4d:41:23:6d:93:
ff:aa:01:b9:ec:89:0e:b0:25:84:64:b7:37:a0:23:
e7:1c:83:0b:2f:15:1b:44:81:ce:c2:59:1f:a9:f1:
c5:c3:89:64:39:93:8a:18:d9:ba:05:62:76:d4:6d:
a0:37:26:1d:35:4e:85:6a:a4:18:ab:09:e8:b0:ac:
05:19:ee:77:2b:b8:c3:9d:11:2a:87:fd:2b:12:37:
67:dc:18:ae:03:6c:c2:77:d1:c5:77:4a:9e:29:c6:
53:66:8c:58:18:07:04:c5:90:35:c6:04:3d:c3:c3:
a1:a6:57:9d:a0:d0:65:6a:ac:af:2c:e7:6b:2e:ab:
d0:fd:9b:6b:27:e4:a9:2b:a4:e9:1b:8c:7f:d9:7d:
a2:dc:f7:a7:e2:fb:7c:6b:c3:ea:66:ae:12:76:84:
5a:ea:bc:09:63:ea:27:5f:42:9d:50:fb:55:55:45:
b0:2e:db:e4:3d:0f:26:4a:a0:7c:1a:a2:46:8a:5a:
96:ba:4f:7c:af:88:a3:83:62:0d:0e:e4:c7:73:85:
6a:7a:3a:23:67:47:cc:02:75:97:0b:87:be:71:5e:
5e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:92:86:18:C5:71:78:04:96:62:EF:DC:31:75:0B:E0:95:2C:45:59
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/qJKGGMVxeASWYu_cMXUL4JUsRVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.127.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f5:ae:c0:2b:b3:b7:f4:1f:11:f5:95:7a:fa:19:e5:78:c2:
81:95:d3:2c:79:fd:6c:93:cf:29:4d:04:47:26:21:73:f4:8f:
e0:fe:e3:5d:20:00:b4:72:7a:9b:51:9e:67:29:3a:5b:ff:c6:
c4:ce:90:c7:7f:5d:7e:17:e0:76:b9:ab:ba:7f:ba:22:27:52:
6c:99:47:db:ae:78:11:9f:44:db:30:63:6f:4e:89:61:59:c1:
f3:b5:3b:f5:aa:da:99:da:e0:fb:18:4a:b0:44:b3:e2:f2:37:
10:09:24:c3:f1:82:48:1e:e4:97:c3:35:50:29:3a:87:9e:02:
22:74:45:f8:72:47:91:96:5c:6a:b9:b7:be:98:80:7e:fd:f8:
26:f2:13:da:1e:69:d9:20:df:ed:18:18:9e:3e:9c:f4:1e:0d:
66:b8:8b:b7:13:96:f8:af:92:25:8a:41:06:c2:43:4a:dd:26:
50:e8:a0:1d:16:d8:34:e5:3d:fa:df:81:42:85:a2:88:fd:5a:
f6:23:ca:ae:f2:9e:74:33:9f:e5:76:35:bc:87:7f:4f:3c:9d:
c7:4b:6f:4a:38:be:7d:db:24:bb:44:57:6f:1d:66:e1:dd:cc:
89:ff:27:95:7b:3d:5a:84:57:1c:69:3d:77:b4:e7:c7:cb:50:
ca:36:b1:81
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzJTh3IHxb5yx180wsn8pATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTU1ODhlZjgwNTQ2ODkyOGM2M2RhYjA4NjMwMDg1ZTVk
MDhmNjUwHhcNMjQwMTAyMDgzMzA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODkyODYxOGM1NzE3ODA0OTY2MmVmZGMzMTc1MGJlMDk1MmM0NTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3+12ExREO2OjSoaC4Bm+DQ1g3on
8AMYwvdwRaSfbi0BMaWbSgfjTUEjbZP/qgG57IkOsCWEZLc3oCPnHIMLLxUbRIHO
wlkfqfHFw4lkOZOKGNm6BWJ21G2gNyYdNU6FaqQYqwnosKwFGe53K7jDnREqh/0r
Ejdn3BiuA2zCd9HFd0qeKcZTZoxYGAcExZA1xgQ9w8OhpledoNBlaqyvLOdrLqvQ
/ZtrJ+SpK6TpG4x/2X2i3Pen4vt8a8PqZq4SdoRa6rwJY+onX0KdUPtVVUWwLtvk
PQ8mSqB8GqJGilqWuk98r4ijg2INDuTHc4VqejojZ0fMAnWXC4e+cV5ebwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKiShhjFcXgElmLv3DF1C+CVLEVZMB8GA1UdIwQY
MBaAFPkVWI74BUaJKMY9qwhjAIXl0I9lMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SVllqdmdGUm9rb3hqMnJDR01BaGVYUWoyVS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvN2I5MjI0LWFiZjEtNGNhMy1iMDAx
LWJjODI3N2U3NWUwYy8xL3FKS0dHTVZ4ZUFTV1l1X2NNWFVMNEpVc1JWay5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjQvN2I5MjI0LWFiZjEtNGNhMy1iMDAxLWJjODI3N2U3NWUw
Yy8xLzEtUlZZanZnRlJva294ajJyQ0dNQWhlWFFqMlUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADByn8w
DQYJKoZIhvcNAQELBQADggEBAIv1rsArs7f0HxH1lXr6GeV4woGV0yx5/WyTzylN
BEcmIXP0j+D+410gALRyeptRnmcpOlv/xsTOkMd/XX4X4Ha5q7p/uiInUmyZR9uu
eBGfRNswY29OiWFZwfO1O/Wq2pna4PsYSrBEs+LyNxAJJMPxgkge5JfDNVApOoee
AiJ0RfhyR5GWXGq5t76YgH79+CbyE9oeadkg3+0YGJ4+nPQeDWa4i7cTlvivkiWK
QQbCQ0rdJlDooB0W2DTlPfrfgUKFooj9WvYjyq7ynnQzn+V2NbyHf088ncdLb0o4
vn3bJLtEV28dZuHdzIn/J5V7PVqEVxxpPXe058fLUMo2sYE=
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:00:04 2024 by rpki-client on console-fra.rpki-client.org