Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/Qb51Vg-6AWlPXKob1Oz0z6PuCAc.roa
File: Qb51Vg-6AWlPXKob1Oz0z6PuCAc.roa (raw, json)
Hash identifier: +M4N6yV7LawYP7jStkyyTVkdxi76hfERFo18JsK0J7c=
Subject key identifier: 41:BE:75:56:0F:BA:01:69:4F:5C:AA:1B:D4:EC:F4:CF:A3:EE:08:07
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 018F3E1D5438B30F284E24EBB20706EAB4D9
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/Qb51Vg-6AWlPXKob1Oz0z6PuCAc.roa
Signing time: Fri 03 May 2024 11:01:00 +0000
ROA not before: Fri 03 May 2024 11:01:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30962
IP address blocks: 62.108.32.0/20 maxlen: 20
62.108.48.0/20 maxlen: 20
84.19.0.0/19 maxlen: 19
89.107.64.0/21 maxlen: 21
91.190.144.0/21 maxlen: 21
91.230.27.0/24 maxlen: 24
93.190.88.0/21 maxlen: 21
93.190.95.0/24 maxlen: 24
185.147.216.0/22 maxlen: 22
194.113.216.0/23 maxlen: 23
195.62.20.0/23 maxlen: 23
195.191.114.0/23 maxlen: 23
195.225.240.0/22 maxlen: 22
2a00:f70::/32 maxlen: 32
2a03:f200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:1d:54:38:b3:0f:28:4e:24:eb:b2:07:06:ea:b4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: May 3 11:01:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41be75560fba01694f5caa1bd4ecf4cfa3ee0807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:b3:28:5e:f2:80:08:d2:8e:95:9d:83:28:
60:b9:54:cc:1b:46:aa:e1:95:21:98:67:3a:e3:6b:
d8:38:bf:dd:3c:26:dc:d6:f9:d2:d1:67:c5:85:d7:
49:7c:8f:d6:a9:01:eb:c7:4a:8d:0f:9a:1e:83:fa:
97:9e:db:3d:d4:22:94:1c:27:f3:dc:f9:d7:be:4a:
0c:c2:f7:cf:82:38:d9:ed:99:42:c8:5a:1b:56:6e:
2d:b5:85:42:4b:48:92:a1:7b:80:cf:73:18:83:0f:
a6:5a:64:f6:77:9f:9b:f0:b2:1e:2e:e5:34:97:24:
0c:f2:59:2c:4a:d5:87:a1:ee:66:e6:d4:75:26:9a:
01:ba:24:6a:f7:39:1f:3c:73:0a:79:4d:02:d4:fc:
0d:a3:5d:aa:60:e1:5e:1e:a4:55:32:ba:d6:6f:d4:
93:f5:5c:2d:ba:59:cc:30:2c:f7:53:f6:14:f1:40:
c2:86:ab:c0:98:35:45:e8:66:58:bf:32:ea:3c:57:
1b:39:0e:18:7e:36:0f:04:aa:e6:36:a6:3f:31:f3:
ad:de:e7:c8:10:32:c2:aa:ec:b4:79:00:d6:7e:9e:
78:42:cc:44:7c:55:e3:8f:2b:88:2d:8a:5a:34:20:
7c:34:c4:cc:0f:b1:a3:01:09:f6:6a:20:e0:f6:da:
b3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BE:75:56:0F:BA:01:69:4F:5C:AA:1B:D4:EC:F4:CF:A3:EE:08:07
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/Qb51Vg-6AWlPXKob1Oz0z6PuCAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.32.0/19
84.19.0.0/19
89.107.64.0/21
91.190.144.0/21
91.230.27.0/24
93.190.88.0/21
185.147.216.0/22
194.113.216.0/23
195.62.20.0/23
195.191.114.0/23
195.225.240.0/22
IPv6:
2a00:f70::/32
2a03:f200::/32
Signature Algorithm: sha256WithRSAEncryption
81:e9:cf:32:bb:ce:83:f7:aa:ad:af:75:18:77:c0:bf:5b:24:
80:7e:31:6b:ad:75:d7:37:0f:bd:54:5c:d4:9d:72:a4:a8:bd:
14:0e:15:7e:c4:bc:55:e9:e0:08:0b:2a:b2:73:0d:53:9e:ce:
64:8e:6c:df:de:76:e5:93:9a:e2:85:15:e7:0f:e2:f0:25:a0:
61:d2:9b:92:70:79:89:6d:4a:4a:14:55:05:d3:a2:de:15:6c:
5c:d2:38:6d:6e:74:8c:db:65:2c:ca:17:d2:a1:7a:cd:03:9a:
1f:db:20:97:b4:d4:45:80:d1:9b:12:fd:7d:e2:d0:a0:6c:2b:
68:56:87:f8:d5:f8:e6:07:91:87:5b:ec:9d:95:fd:db:bc:9c:
2d:43:4d:df:06:d4:92:5d:b0:1c:b1:fd:15:34:93:f8:08:18:
8f:92:e3:93:58:44:fb:0f:fb:e4:6a:16:7e:9d:6a:84:e8:4b:
97:1b:98:44:78:a0:39:f2:c9:53:ef:78:e5:c4:73:0a:cb:ac:
16:f1:ee:39:b2:b3:31:be:e1:77:7b:f2:a8:65:3d:09:b1:b7:
93:e3:b8:33:02:9d:f3:4f:b7:ce:0c:47:15:27:df:52:17:b2:
7f:5f:95:9b:8b:27:66:91:f1:dc:6b:a8:e7:11:76:42:ff:68:
52:dc:78:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgISAY8+HVQ4sw8oTiTrsgcG6rTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh
N2U1NjYwHhcNMjQwNTAzMTEwMTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWJlNzU1NjBmYmEwMTY5NGY1Y2FhMWJkNGVjZjRjZmEzZWUwODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwruzKF7ygAjSjpWdgyhguVTMG0aq
4ZUhmGc642vYOL/dPCbc1vnS0WfFhddJfI/WqQHrx0qND5oeg/qXnts91CKUHCfz
3PnXvkoMwvfPgjjZ7ZlCyFobVm4ttYVCS0iSoXuAz3MYgw+mWmT2d5+b8LIeLuU0
lyQM8lksStWHoe5m5tR1JpoBuiRq9zkfPHMKeU0C1PwNo12qYOFeHqRVMrrWb9ST
9VwtulnMMCz3U/YU8UDChqvAmDVF6GZYvzLqPFcbOQ4YfjYPBKrmNqY/MfOt3ufI
EDLCquy0eQDWfp54QsxEfFXjjyuILYpaNCB8NMTMD7GjAQn2aiDg9tqzCQIDAQAB
o4ICWzCCAlcwHQYDVR0OBBYEFEG+dVYPugFpT1yqG9Ts9M+j7ggHMB8GA1UdIwQY
MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt
OTRlZmJmNWNlY2Q0LzEvUWI1MVZnLTZBV2xQWEtvYjFPejB6NlB1Q0FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0
LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBIBAIAATBCAwQFPmwgAwQF
VBMAAwQDWWtAAwQDW76QAwQAW+YbAwQDXb5YAwQCuZPYAwQBwnHYAwQBwz4UAwQB
w79yAwQCw+HwMBQEAgACMA4DBQAqAA9wAwUAKgPyADANBgkqhkiG9w0BAQsFAAOC
AQEAgenPMrvOg/eqra91GHfAv1skgH4xa6111zcPvVRc1J1ypKi9FA4VfsS8Veng
CAsqsnMNU57OZI5s39525ZOa4oUV5w/i8CWgYdKbknB5iW1KShRVBdOi3hVsXNI4
bW50jNtlLMoX0qF6zQOaH9sgl7TURYDRmxL9feLQoGwraFaH+NX45geRh1vsnZX9
27ycLUNN3wbUkl2wHLH9FTST+AgYj5Ljk1hE+w/75GoWfp1qhOhLlxuYRHigOfLJ
U+945cRzCsusFvHuObKzMb7hd3vyqGU9CbG3k+O4MwKd80+3zgxHFSffUheyf1+V
m4snZpHx3Guo5xF2Qv9oUtx4CA==
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:31:22 2024 by rpki-client on console-fra.rpki-client.org