Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/qnIjWdT-4b-Q4OlMo88yNmI2BFY.roa
File: qnIjWdT-4b-Q4OlMo88yNmI2BFY.roa (raw, json)
Hash identifier: FvHf3CBnZua3tqP7MES6rk/nR++HNQOzEysRKniDp0Q=
Subject key identifier: AA:72:23:59:D4:FE:E1:BF:90:E0:E9:4C:A3:CF:32:36:62:36:04:56
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 018CC3B674468352A88E2A765A734A8D0539
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/qnIjWdT-4b-Q4OlMo88yNmI2BFY.roa
Signing time: Mon 01 Jan 2024 06:29:23 +0000
ROA not before: Mon 01 Jan 2024 06:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8540
IP address blocks: 81.94.55.0/24 maxlen: 24
37.186.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:74:46:83:52:a8:8e:2a:76:5a:73:4a:8d:05:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Jan 1 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa722359d4fee1bf90e0e94ca3cf323662360456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:67:03:7a:fe:be:36:3a:6f:29:11:99:44:
4e:3c:a5:62:f6:a7:45:9e:33:8f:25:5f:c1:87:1c:
79:18:cc:61:dc:84:60:b0:0f:d9:cb:f5:c5:7a:ff:
3e:d4:a3:91:f9:4b:b5:fb:9e:36:ab:4a:b1:f8:69:
14:9d:b1:80:8d:13:3c:ef:30:28:72:dd:7f:8f:5d:
00:41:c1:d3:6d:9e:22:3a:a4:95:0c:e8:04:a6:a7:
e0:fb:0f:20:b3:dc:c8:4b:f6:cd:ea:da:f8:e0:68:
6b:5d:a6:43:7a:2e:5e:cf:1a:79:10:fc:04:dc:6b:
e9:05:51:6d:09:7a:9a:45:17:87:42:32:b0:6d:20:
72:aa:fc:78:73:02:b5:af:8d:e6:18:56:84:53:6c:
df:f5:11:07:97:63:17:2b:fa:63:df:a2:17:e3:db:
1f:e5:5e:43:2d:2d:af:72:17:a5:0c:33:12:7e:9a:
d7:3a:c2:09:e0:eb:4d:d3:90:f6:84:c3:de:62:3e:
41:55:34:07:d2:f8:e3:3d:26:7b:5d:ff:61:3c:4b:
c4:df:9a:ec:66:37:fa:e5:32:cd:6d:50:d7:25:b3:
1f:8a:85:2f:97:28:81:9e:b6:4a:f2:65:7f:e6:44:
59:7c:82:7d:5c:e7:36:36:16:52:ee:d9:99:82:f6:
2d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:72:23:59:D4:FE:E1:BF:90:E0:E9:4C:A3:CF:32:36:62:36:04:56
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/qnIjWdT-4b-Q4OlMo88yNmI2BFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.186.5.0/24
81.94.55.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b7:5c:79:f0:87:af:e5:63:5a:26:81:be:aa:57:0d:f2:2a:
65:3f:30:9d:51:e2:54:85:78:1f:25:99:71:b1:25:78:0d:f8:
53:26:a1:f7:ee:24:ba:ff:c6:f1:8a:a2:6b:fd:b4:d4:0a:5e:
db:8f:93:82:58:bf:e6:f1:80:7d:35:99:37:7a:16:17:d5:4a:
35:9b:b3:7d:70:0b:d1:6f:e6:a7:a1:c6:74:6c:36:cd:b7:ea:
ac:2d:33:55:66:6d:da:9e:f8:47:66:74:2e:61:8d:29:9a:98:
e6:25:52:38:de:8c:25:60:31:8d:46:f1:dd:f5:8c:2f:8d:09:
8e:ad:bd:89:f7:da:0b:9f:b5:67:5f:82:4c:fc:a9:4e:7b:d0:
28:0d:42:07:d5:14:56:72:b2:a8:67:4b:2e:f4:57:95:48:dd:
c0:7c:82:55:ef:68:0b:fc:6c:d9:b9:2d:23:b8:cb:9d:7a:2e:
f3:1b:e6:b1:1b:57:bd:cb:70:7a:92:38:ae:df:4d:7b:ee:17:
4c:a6:d2:3f:28:ee:c1:6e:21:a7:c9:a0:67:88:95:26:41:5d:
80:fa:17:b1:d9:85:2a:f5:81:3e:0f:b5:2a:3d:e2:0f:4d:aa:
5e:ba:4f:29:29:fe:cc:74:5c:9a:de:9a:5d:1c:9e:22:a0:54:
f5:1e:c1:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDtnRGg1Kojip2WnNKjQU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDY1MjE2ODEyZWQyNGZkMWM3MTk4NzFhNTlhOTcxZGVj
MzBhMjYwHhcNMjQwMTAxMDYyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTcyMjM1OWQ0ZmVlMWJmOTBlMGU5NGNhM2NmMzIzNjYyMzYwNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroVnA3r+vjY6bykRmUROPKVi9qdF
njOPJV/Bhxx5GMxh3IRgsA/Zy/XFev8+1KOR+Uu1+542q0qx+GkUnbGAjRM87zAo
ct1/j10AQcHTbZ4iOqSVDOgEpqfg+w8gs9zIS/bN6tr44GhrXaZDei5ezxp5EPwE
3GvpBVFtCXqaRReHQjKwbSByqvx4cwK1r43mGFaEU2zf9REHl2MXK/pj36IX49sf
5V5DLS2vchelDDMSfprXOsIJ4OtN05D2hMPeYj5BVTQH0vjjPSZ7Xf9hPEvE35rs
Zjf65TLNbVDXJbMfioUvlyiBnrZK8mV/5kRZfIJ9XOc2NhZS7tmZgvYtLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKpyI1nU/uG/kODpTKPPMjZiNgRWMB8GA1UdIwQY
MBaAFDrWUhaBLtJP0ccZhxpZqXHewwomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTct
NDY1MzhjYTUzODNjLzEvcW5JaldkVC00Yi1RNE9sTW84OHlObUkyQkZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTctNDY1MzhjYTUzODNj
LzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJboFAwQA
UV43MA0GCSqGSIb3DQEBCwUAA4IBAQCPt1x58Iev5WNaJoG+qlcN8iplPzCdUeJU
hXgfJZlxsSV4DfhTJqH37iS6/8bxiqJr/bTUCl7bj5OCWL/m8YB9NZk3ehYX1Uo1
m7N9cAvRb+anocZ0bDbNt+qsLTNVZm3anvhHZnQuYY0pmpjmJVI43owlYDGNRvHd
9YwvjQmOrb2J99oLn7VnX4JM/KlOe9AoDUIH1RRWcrKoZ0su9FeVSN3AfIJV72gL
/GzZuS0juMudei7zG+axG1e9y3B6kjiu30177hdMptI/KO7BbiGnyaBniJUmQV2A
+hex2YUq9YE+D7UqPeIPTapeuk8pKf7MdFya3ppdHJ4ioFT1HsFh
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:34:04 2024 by rpki-client on console-fra.rpki-client.org