Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wqewg384Z7m-JVIE3YMl8cIamNA.roa
File: wqewg384Z7m-JVIE3YMl8cIamNA.roa (raw, json)
Hash identifier: PIpH9+1LpTUbjGq1ZThGMmzcm6E//TN9Xsch42+tecA=
Subject key identifier: C2:A7:B0:83:7F:38:67:B9:BE:25:52:04:DD:83:25:F1:C2:1A:98:D0
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 018CC348EE591504F693BCD58FD5ABB8F14E
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wqewg384Z7m-JVIE3YMl8cIamNA.roa
Signing time: Mon 01 Jan 2024 04:29:45 +0000
ROA not before: Mon 01 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 65024
IP address blocks: 84.108.0.0/22 maxlen: 22
84.108.10.0/23 maxlen: 23
84.108.14.0/23 maxlen: 23
84.108.12.0/23 maxlen: 23
84.108.112.0/22 maxlen: 22
84.108.108.0/22 maxlen: 22
84.108.116.0/22 maxlen: 22
84.108.124.0/23 maxlen: 23
84.108.120.0/22 maxlen: 22
84.108.126.0/23 maxlen: 23
84.108.132.0/22 maxlen: 22
84.108.128.0/22 maxlen: 22
84.108.136.0/22 maxlen: 22
84.108.142.0/24 maxlen: 24
84.108.143.0/24 maxlen: 24
84.108.144.0/23 maxlen: 23
84.108.140.0/24 maxlen: 24
84.108.148.0/22 maxlen: 22
84.108.146.0/23 maxlen: 23
84.108.152.0/22 maxlen: 22
84.108.100.0/23 maxlen: 23
84.108.102.0/24 maxlen: 24
84.108.103.0/24 maxlen: 24
84.108.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ee:59:15:04:f6:93:bc:d5:8f:d5:ab:b8:f1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jan 1 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2a7b0837f3867b9be255204dd8325f1c21a98d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0d:cb:b7:c5:42:aa:f9:57:dd:17:4e:97:86:
83:3f:91:97:ff:d1:ee:a7:1d:d9:38:b8:4e:99:4a:
aa:14:93:3d:35:a3:f9:9e:08:d2:0b:7c:d0:43:cf:
03:90:be:3c:29:50:dd:d6:56:ac:22:46:95:69:c9:
39:eb:a3:cd:5a:2e:3d:88:45:5e:bb:0b:32:45:0f:
5c:6c:62:e1:1f:56:0e:06:d0:7c:e9:2d:4e:20:eb:
c6:a5:3e:4f:01:ef:0b:b6:94:70:f4:de:2f:c4:01:
1c:be:c7:71:d8:53:31:d1:f3:f2:4c:3d:71:26:0b:
41:a4:7c:50:60:cc:f5:f5:7c:0a:0a:b0:23:3e:07:
4a:39:b5:0c:b9:6f:c1:7d:cd:48:f3:ff:09:55:66:
2f:46:12:5f:51:61:f9:32:5d:4d:8d:27:41:18:d3:
e0:18:58:f8:bc:11:8a:ee:70:ee:34:67:ce:d8:17:
5b:67:90:70:e5:b7:6a:07:bd:ee:d2:cd:5a:25:39:
70:7d:f0:e4:fb:5c:be:37:ac:c0:44:b5:6b:95:19:
06:86:c3:70:bc:48:48:9f:03:bc:2c:3c:18:9f:60:
ba:48:1b:17:8d:7e:d2:95:24:6e:6e:0e:c1:76:60:
0f:d4:45:64:3e:78:aa:96:76:c2:cf:13:68:d7:6e:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A7:B0:83:7F:38:67:B9:BE:25:52:04:DD:83:25:F1:C2:1A:98:D0
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wqewg384Z7m-JVIE3YMl8cIamNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.108.0.0/22
84.108.10.0-84.108.15.255
84.108.100.0-84.108.140.255
84.108.142.0-84.108.155.255
Signature Algorithm: sha256WithRSAEncryption
97:46:60:e3:3e:56:5b:e1:b9:9c:45:f1:21:d7:b5:fc:6f:a2:
4b:46:22:21:f4:73:84:e4:9a:23:b4:39:74:f1:5c:c0:86:d1:
c2:6b:45:19:41:12:f7:8f:00:c4:14:44:e7:7f:e9:33:35:fe:
68:c1:96:e1:9f:b3:00:38:64:47:ff:fc:21:a9:97:31:d2:a1:
56:e1:1b:3f:e3:8f:5a:f2:57:8d:3d:c1:1c:da:20:6d:31:32:
e4:ab:f3:ba:4a:99:d6:21:2e:d6:a5:28:83:b5:06:7e:23:4a:
44:6a:2a:f0:a7:4d:d2:3c:77:10:dd:35:de:19:b4:c7:eb:6a:
12:66:6c:b8:ec:b3:bc:17:80:83:d8:a7:39:d1:3a:96:94:8f:
18:ad:7b:0a:8a:ea:01:9c:36:f5:38:1a:22:71:77:d0:20:8a:
0f:e1:e4:8a:42:f4:17:c0:27:55:4a:c5:ab:9a:fb:f8:44:68:
c8:64:1c:30:80:5b:67:0c:d4:cf:22:4f:d5:cb:fd:05:d3:48:
a5:f8:1b:ba:f2:5d:e7:cf:fa:a0:64:09:76:b6:0e:08:97:d7:
12:33:0c:ea:73:4e:ce:03:5b:6f:9a:56:9f:24:a4:1c:2a:f7:
a8:89:e4:1d:f3:61:93:6a:91:a8:8a:cf:fa:e0:9d:74:38:1b:
29:0c:13:0c
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYzDSO5ZFQT2k7zVj9WruPFOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjQwMTAxMDQyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmE3YjA4MzdmMzg2N2I5YmUyNTUyMDRkZDgzMjVmMWMyMWE5OGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA3Lt8VCqvlX3RdOl4aDP5GX/9Hu
px3ZOLhOmUqqFJM9NaP5ngjSC3zQQ88DkL48KVDd1lasIkaVack566PNWi49iEVe
uwsyRQ9cbGLhH1YOBtB86S1OIOvGpT5PAe8LtpRw9N4vxAEcvsdx2FMx0fPyTD1x
JgtBpHxQYMz19XwKCrAjPgdKObUMuW/Bfc1I8/8JVWYvRhJfUWH5Ml1NjSdBGNPg
GFj4vBGK7nDuNGfO2BdbZ5Bw5bdqB73u0s1aJTlwffDk+1y+N6zARLVrlRkGhsNw
vEhInwO8LDwYn2C6SBsXjX7SlSRubg7BdmAP1EVkPniqlnbCzxNo127TkQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFMKnsIN/OGe5viVSBN2DJfHCGpjQMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvd3Fld2czODRaN20tSlZJRTNZTWw4Y0lhbU5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCVGwAMAwD
BAFUbAoDBARUbAAwDAMEAlRsZAMEAFRsjDAMAwQBVGyOAwQCVGyYMA0GCSqGSIb3
DQEBCwUAA4IBAQCXRmDjPlZb4bmcRfEh17X8b6JLRiIh9HOE5JojtDl08VzAhtHC
a0UZQRL3jwDEFETnf+kzNf5owZbhn7MAOGRH//whqZcx0qFW4Rs/449a8leNPcEc
2iBtMTLkq/O6SpnWIS7WpSiDtQZ+I0pEairwp03SPHcQ3TXeGbTH62oSZmy47LO8
F4CD2Kc50TqWlI8YrXsKiuoBnDb1OBoicXfQIIoP4eSKQvQXwCdVSsWrmvv4RGjI
ZBwwgFtnDNTPIk/Vy/0F00il+Bu68l3nz/qgZAl2tg4Il9cSMwzqc07OA1tvmlaf
JKQcKveoieQd82GTapGois/64J10OBspDBMM
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:41:09 2024 by rpki-client on console-ams.rpki-client.org