Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/QuW3Hek9TapzEtjxsTa0r0eXVaA.roa
File: QuW3Hek9TapzEtjxsTa0r0eXVaA.roa (raw, json)
Hash identifier: /ka2RhWHVx/8hqAhIfsYy5zlBw1PbygrxztKHJeAi9c=
Subject key identifier: 42:E5:B7:1D:E9:3D:4D:AA:73:12:D8:F1:B1:36:B4:AF:47:97:55:A0
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC72755A82925BC66334CD2966607D482
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/QuW3Hek9TapzEtjxsTa0r0eXVaA.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209474
IP address blocks: 213.238.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:55:a8:29:25:bc:66:33:4c:d2:96:66:07:d4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42e5b71de93d4daa7312d8f1b136b4af479755a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:83:9f:06:67:63:91:d7:de:1b:7e:50:96:
8b:50:52:fb:14:9f:16:d1:fe:dd:e3:a0:88:4e:0b:
31:ca:43:36:71:f2:d0:17:ab:53:fc:fa:9f:57:9e:
06:28:f8:a0:07:e3:57:83:6b:49:b1:0a:fb:5d:7b:
82:3b:b4:43:67:f6:48:15:b6:16:56:bf:a3:51:b2:
17:bb:71:f3:86:d7:03:cf:81:ec:04:ae:ea:46:57:
a8:63:14:98:51:32:5a:31:5e:ae:6e:52:4b:7d:d4:
49:c6:cc:81:29:d1:df:95:53:48:47:1c:2f:db:12:
45:f2:1c:36:e3:c7:4e:fa:ab:93:ac:be:5d:b3:a6:
0b:70:a9:6b:2f:30:9c:6e:33:89:de:1c:4e:cc:c8:
e3:f6:b2:7a:e1:1f:df:bc:9a:52:19:26:56:13:23:
26:f3:13:6b:ba:1f:70:96:01:89:72:d0:a0:e8:64:
b6:62:31:56:4a:4b:13:dd:72:e7:4b:58:39:8a:a5:
ba:8c:72:aa:2f:00:df:7e:f7:a1:00:76:8e:d5:89:
63:2e:4c:b5:74:c6:e0:4b:84:6d:e2:27:4e:2f:ad:
53:bf:bf:fe:c1:f1:56:25:87:0d:07:9b:90:96:40:
1e:16:37:59:af:9e:05:14:a6:a4:5d:cb:a5:fd:2a:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E5:B7:1D:E9:3D:4D:AA:73:12:D8:F1:B1:36:B4:AF:47:97:55:A0
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/QuW3Hek9TapzEtjxsTa0r0eXVaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.166.0/24
Signature Algorithm: sha256WithRSAEncryption
84:58:c1:26:0f:2e:ca:05:16:24:ac:de:cc:85:56:ee:ba:85:
c3:96:7d:35:89:cf:d6:1e:79:df:96:0d:45:95:15:d9:a6:c4:
31:f3:ec:55:db:f2:e2:db:76:dd:48:6e:d6:d4:e5:58:c6:cc:
07:46:9e:c4:83:c0:6e:99:c2:93:89:58:43:4a:f9:55:cb:7f:
55:51:21:9d:ad:24:af:be:6e:e6:2f:9e:dc:a0:3d:df:99:2b:
2d:ef:74:65:8a:50:6c:df:5b:2b:dc:ca:56:8a:34:59:9a:03:
d3:8f:5f:78:1c:ed:27:3d:08:ad:5f:78:b1:55:5d:13:8f:a3:
d2:db:dc:2d:1e:63:28:1d:06:80:76:53:ac:3b:38:5e:54:95:
a5:13:d8:9d:43:6c:6a:76:89:7e:b1:9d:df:94:69:cc:94:7e:
8c:46:fa:da:c0:6b:48:9a:67:f3:0b:eb:8a:74:a9:e3:34:04:
3e:f5:3d:f4:df:74:a8:2b:0f:d6:f8:ad:7e:5f:2e:d3:d7:d9:
8a:97:ac:93:db:43:f6:66:96:2f:fa:74:ee:70:b7:99:75:12:
19:08:45:a3:49:31:f9:2a:f9:36:7c:f1:b0:6a:a9:3a:4d:ff:
1b:87:c1:46:a2:4b:90:82:b5:be:6f:86:ef:95:5c:2a:ca:fc:
25:80:8c:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ1WoKSW8ZjNM0pZmB9SCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjQwMTAxMjIzMTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmU1YjcxZGU5M2Q0ZGFhNzMxMmQ4ZjFiMTM2YjRhZjQ3OTc1NWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8qDnwZnY5HX3ht+UJaLUFL7FJ8W
0f7d46CITgsxykM2cfLQF6tT/PqfV54GKPigB+NXg2tJsQr7XXuCO7RDZ/ZIFbYW
Vr+jUbIXu3HzhtcDz4HsBK7qRleoYxSYUTJaMV6ublJLfdRJxsyBKdHflVNIRxwv
2xJF8hw248dO+quTrL5ds6YLcKlrLzCcbjOJ3hxOzMjj9rJ64R/fvJpSGSZWEyMm
8xNruh9wlgGJctCg6GS2YjFWSksT3XLnS1g5iqW6jHKqLwDffvehAHaO1YljLky1
dMbgS4Rt4idOL61Tv7/+wfFWJYcNB5uQlkAeFjdZr54FFKakXcul/SrIbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFELltx3pPU2qcxLY8bE2tK9Hl1WgMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvUXVXM0hlazlUYXB6RXRqeHNUYTByMGVYVmFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6mMA0G
CSqGSIb3DQEBCwUAA4IBAQCEWMEmDy7KBRYkrN7MhVbuuoXDln01ic/WHnnflg1F
lRXZpsQx8+xV2/Li23bdSG7W1OVYxswHRp7Eg8BumcKTiVhDSvlVy39VUSGdrSSv
vm7mL57coD3fmSst73RlilBs31sr3MpWijRZmgPTj194HO0nPQitX3ixVV0Tj6PS
29wtHmMoHQaAdlOsOzheVJWlE9idQ2xqdol+sZ3flGnMlH6MRvrawGtImmfzC+uK
dKnjNAQ+9T3033SoKw/W+K1+Xy7T19mKl6yT20P2ZpYv+nTucLeZdRIZCEWjSTH5
Kvk2fPGwaqk6Tf8bh8FGokuQgrW+b4bvlVwqyvwlgIyt
-----END CERTIFICATE-----
Generated at Mon May 20 11:23:50 2024 by rpki-client on console-fra.rpki-client.org