Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/qacPbiq8ActYewxMVy9fz7utAlo.roa
File: qacPbiq8ActYewxMVy9fz7utAlo.roa (raw, json)
Hash identifier: bTtpufeDvQ6jUVMy6a/7ImnA+/428DIXQPk3NNBBOlU=
Subject key identifier: A9:A7:0F:6E:2A:BC:01:CB:58:7B:0C:4C:57:2F:5F:CF:BB:AD:02:5A
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018FCD22997E096C092C3A1D6F27BC7A6685
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/qacPbiq8ActYewxMVy9fz7utAlo.roa
Signing time: Fri 31 May 2024 05:32:27 +0000
ROA not before: Fri 31 May 2024 05:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20850
IP address blocks: 77.120.192.0/21 maxlen: 24
193.189.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cd:22:99:7e:09:6c:09:2c:3a:1d:6f:27:bc:7a:66:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: May 31 05:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9a70f6e2abc01cb587b0c4c572f5fcfbbad025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9c:87:3a:a7:08:05:dc:cb:db:a0:4c:9f:39:
6a:98:f8:f5:76:d5:07:bc:45:64:c8:be:1c:c8:74:
45:4b:04:ca:07:6e:a2:56:ba:91:5e:1b:9d:33:eb:
b5:81:21:3c:91:7d:1f:42:7e:f0:77:2f:b8:c1:07:
40:4c:12:f2:38:03:cd:55:d6:4a:8f:5e:67:59:0e:
ea:7e:7c:b8:0c:2f:f9:ca:50:1f:9c:fd:c3:62:e9:
c3:e6:41:67:8d:54:06:59:6b:0c:63:24:69:a2:b0:
07:89:b6:68:3b:46:00:2c:48:08:79:70:46:a2:02:
7d:91:f0:64:16:f0:9b:38:5b:fd:f7:96:24:07:d9:
6a:ad:89:8d:22:44:2f:42:40:dc:ab:58:e0:4c:4d:
99:5c:5f:34:c4:7c:d3:e4:0e:13:91:9b:95:c0:55:
c3:0e:76:65:09:a8:60:ef:89:3f:65:b3:f0:5a:4c:
0e:8f:9e:56:ef:32:d8:53:48:81:2f:32:ba:d6:00:
ac:61:b6:45:7e:0d:f7:bb:7d:ed:bf:13:39:37:8a:
ad:0a:d3:40:43:2b:6e:4b:d3:33:27:7e:13:a0:60:
6d:7a:b5:e3:ab:fc:65:4d:32:ae:5e:36:0d:24:92:
3b:8a:e0:31:1a:41:19:2a:7c:ce:15:7a:07:fe:c4:
ee:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A7:0F:6E:2A:BC:01:CB:58:7B:0C:4C:57:2F:5F:CF:BB:AD:02:5A
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/qacPbiq8ActYewxMVy9fz7utAlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.192.0/21
193.189.96.0/23
Signature Algorithm: sha256WithRSAEncryption
74:10:37:0b:b8:1b:5e:ed:19:9b:f0:31:6f:ed:1e:23:e3:de:
a7:c9:0d:84:54:e5:5d:2c:32:9d:a3:e2:2e:cf:b8:72:3a:46:
08:4e:4b:4b:66:57:5c:32:b1:b5:13:b6:25:99:93:54:30:0c:
fb:81:61:34:5d:17:3a:5c:9d:31:8f:6d:6c:b8:29:76:bc:da:
35:13:bc:d3:72:7c:ce:a0:90:a0:9e:0f:fa:7c:15:95:44:29:
17:50:03:87:5b:4f:0d:8e:71:ee:7d:ec:db:1d:8a:f7:42:fb:
f0:5a:ca:f0:a9:d9:02:0a:80:22:ae:26:05:40:0a:5d:73:6a:
8f:0e:ad:cd:fc:e3:2c:45:74:78:ba:dd:31:7b:32:58:d5:50:
43:ac:e6:40:83:c3:60:ed:20:e2:22:ca:0a:ff:3c:87:bf:76:
d9:70:4e:ea:83:35:56:b6:89:bf:14:3c:ae:9e:92:ce:6f:cb:
c3:42:4c:2c:af:18:2f:28:1d:df:4f:84:62:48:f8:92:90:74:
59:fb:e9:97:97:9b:fa:5c:fd:0f:45:d5:a9:bc:40:fc:03:90:
4f:e1:5d:10:42:a3:76:3e:ee:4f:3c:72:99:4a:60:55:f3:13:
eb:6e:4a:a5:93:e8:d4:34:ac:9e:1d:0a:fa:86:2d:61:55:9b:
9b:b5:59:f3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/NIpl+CWwJLDodbye8emaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz
YjY3YWEwHhcNMjQwNTMxMDUzMjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWE3MGY2ZTJhYmMwMWNiNTg3YjBjNGM1NzJmNWZjZmJiYWQwMjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pyHOqcIBdzL26BMnzlqmPj1dtUH
vEVkyL4cyHRFSwTKB26iVrqRXhudM+u1gSE8kX0fQn7wdy+4wQdATBLyOAPNVdZK
j15nWQ7qfny4DC/5ylAfnP3DYunD5kFnjVQGWWsMYyRporAHibZoO0YALEgIeXBG
ogJ9kfBkFvCbOFv995YkB9lqrYmNIkQvQkDcq1jgTE2ZXF80xHzT5A4TkZuVwFXD
DnZlCahg74k/ZbPwWkwOj55W7zLYU0iBLzK61gCsYbZFfg33u33tvxM5N4qtCtNA
QytuS9MzJ34ToGBterXjq/xlTTKuXjYNJJI7iuAxGkEZKnzOFXoH/sTubQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKmnD24qvAHLWHsMTFcvX8+7rQJaMB8GA1UdIwQY
MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt
OTQ0Y2U3ZWViMTU0LzEvcWFjUGJpcThBY3RZZXd4TVZ5OWZ6N3V0QWxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0
LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDTXjAAwQB
wb1gMA0GCSqGSIb3DQEBCwUAA4IBAQB0EDcLuBte7Rmb8DFv7R4j496nyQ2EVOVd
LDKdo+Iuz7hyOkYITktLZldcMrG1E7YlmZNUMAz7gWE0XRc6XJ0xj21suCl2vNo1
E7zTcnzOoJCgng/6fBWVRCkXUAOHW08NjnHufezbHYr3QvvwWsrwqdkCCoAiriYF
QApdc2qPDq3N/OMsRXR4ut0xezJY1VBDrOZAg8Ng7SDiIsoK/zyHv3bZcE7qgzVW
tom/FDyunpLOb8vDQkwsrxgvKB3fT4RiSPiSkHRZ++mXl5v6XP0PRdWpvED8A5BP
4V0QQqN2Pu5PPHKZSmBV8xPrbkqlk+jUNKyeHQr6hi1hVZubtVnz
-----END CERTIFICATE-----
Generated at Sat Nov 23 21:59:07 2024 by rpki-client on console-fra.rpki-client.org