Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/QJDklF3F_TptBMRfmkTuTWNCd0o.roa
File: QJDklF3F_TptBMRfmkTuTWNCd0o.roa (raw, json)
Hash identifier: tK8ATqJJ0g6MF7Y7QVYpGEp1YK3bV0ifN/Tq6GJB0XM=
Subject key identifier: 40:90:E4:94:5D:C5:FD:3A:6D:04:C4:5F:9A:44:EE:4D:63:42:77:4A
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DF412CBD61F9A646C963022E2E20A9F2F
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/QJDklF3F_TptBMRfmkTuTWNCd0o.roa
Signing time: Thu 29 Feb 2024 08:54:48 +0000
ROA not before: Thu 29 Feb 2024 08:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49770
IP address blocks: 37.16.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:12:cb:d6:1f:9a:64:6c:96:30:22:e2:e2:0a:9f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 29 08:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4090e4945dc5fd3a6d04c45f9a44ee4d6342774a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:77:5d:06:a5:19:dd:25:b4:b6:61:d6:4c:bd:
b4:30:68:13:0d:9c:45:f0:e0:b8:09:fc:68:8d:e9:
7f:62:75:8a:a4:75:01:08:36:8d:ba:e5:91:94:fe:
52:0d:49:6d:3f:63:66:74:b6:75:fd:2f:55:04:a4:
d4:64:db:b4:1e:40:23:f4:27:bd:31:41:96:9b:ef:
1f:b2:67:2f:fa:93:d3:a7:44:35:c9:09:d7:94:8e:
c5:f1:2f:a4:a6:3d:48:99:9c:bb:ac:2c:20:8c:a7:
20:30:ad:32:51:79:74:d1:62:7d:d9:79:ae:5b:77:
b4:1e:25:ea:ac:d2:f3:17:a8:2e:a2:37:3d:54:09:
3e:26:62:d4:d2:89:16:6b:66:da:f3:b4:de:e4:55:
f0:20:30:e6:78:16:39:bb:3f:42:75:52:e7:cf:90:
ac:2e:31:67:ee:0e:08:32:d2:26:c5:fa:9b:c3:11:
c7:ec:a1:50:33:de:38:46:7e:61:f2:e6:34:00:c0:
01:a0:c4:d1:bb:ac:27:99:0e:08:f6:4e:3a:a8:42:
b4:2e:f1:2b:cd:f6:25:5a:fb:dd:00:c3:09:ac:30:
79:ca:8d:9d:45:cf:12:1a:4b:fc:91:29:06:8d:87:
ff:ca:4e:5f:dd:04:21:63:7f:b9:f2:8d:2e:77:89:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:90:E4:94:5D:C5:FD:3A:6D:04:C4:5F:9A:44:EE:4D:63:42:77:4A
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/QJDklF3F_TptBMRfmkTuTWNCd0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.88.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a7:2c:63:32:7a:db:21:d7:49:6a:41:1f:d9:94:25:16:99:
aa:d9:f1:cd:31:94:63:0a:0e:9e:1e:63:d5:d6:87:22:56:78:
f6:54:30:81:1a:84:ec:f6:ae:45:c6:92:b8:31:d0:0f:db:70:
70:26:c8:c6:e1:3f:82:4d:c2:c7:4c:16:e4:93:7c:e2:36:c9:
86:94:5d:ac:c2:8b:35:72:cc:46:9a:cc:e3:f5:de:77:c1:30:
f0:7c:83:73:3b:06:fd:1d:f0:2b:d0:2c:83:32:9b:1a:51:63:
c1:24:7f:0d:c2:07:86:41:ef:d8:1f:fe:af:68:18:04:83:36:
43:56:40:4b:3d:37:aa:57:ef:5e:9b:9d:d9:e3:5d:48:37:1c:
af:29:4f:b7:0c:46:61:32:01:4e:7e:2b:c4:78:68:26:d3:c4:
2d:da:f2:0d:26:e6:a2:83:3f:4b:de:2f:79:6b:a9:08:4a:9a:
0c:b8:d7:b4:5b:e4:a4:2f:e4:28:9d:d1:5a:9c:47:e5:04:80:
af:e5:38:fc:7a:c8:01:bb:5c:bc:4f:2e:d9:b5:91:d6:46:8b:
42:18:cd:66:6d:83:46:44:14:3d:a7:bc:11:4d:5b:0a:7c:36:
34:40:34:ba:88:45:6a:b3:cd:01:34:62:2e:fc:a1:06:7f:16:
8c:55:6c:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY30EsvWH5pkbJYwIuLiCp8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMjI5MDg1NDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDkwZTQ5NDVkYzVmZDNhNmQwNGM0NWY5YTQ0ZWU0ZDYzNDI3NzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXddBqUZ3SW0tmHWTL20MGgTDZxF
8OC4Cfxojel/YnWKpHUBCDaNuuWRlP5SDUltP2NmdLZ1/S9VBKTUZNu0HkAj9Ce9
MUGWm+8fsmcv+pPTp0Q1yQnXlI7F8S+kpj1ImZy7rCwgjKcgMK0yUXl00WJ92Xmu
W3e0HiXqrNLzF6guojc9VAk+JmLU0okWa2ba87Te5FXwIDDmeBY5uz9CdVLnz5Cs
LjFn7g4IMtImxfqbwxHH7KFQM944Rn5h8uY0AMABoMTRu6wnmQ4I9k46qEK0LvEr
zfYlWvvdAMMJrDB5yo2dRc8SGkv8kSkGjYf/yk5f3QQhY3+58o0ud4npPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFECQ5JRdxf06bQTEX5pE7k1jQndKMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvUUpEa2xGM0ZfVHB0Qk1SZm1rVHVUV05DZDBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJRBYMA0G
CSqGSIb3DQEBCwUAA4IBAQASpyxjMnrbIddJakEf2ZQlFpmq2fHNMZRjCg6eHmPV
1ociVnj2VDCBGoTs9q5FxpK4MdAP23BwJsjG4T+CTcLHTBbkk3ziNsmGlF2swos1
csxGmszj9d53wTDwfINzOwb9HfAr0CyDMpsaUWPBJH8NwgeGQe/YH/6vaBgEgzZD
VkBLPTeqV+9em53Z411INxyvKU+3DEZhMgFOfivEeGgm08Qt2vINJuaigz9L3i95
a6kISpoMuNe0W+SkL+QondFanEflBICv5Tj8esgBu1y8Ty7ZtZHWRotCGM1mbYNG
RBQ9p7wRTVsKfDY0QDS6iEVqs80BNGIu/KEGfxaMVWx3
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:17:43 2024 by rpki-client on console-ams.rpki-client.org