Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Q4mADwVo1b5mdZB1zJ6Ch4-F3TM.roa
File: Q4mADwVo1b5mdZB1zJ6Ch4-F3TM.roa (raw, json)
Hash identifier: 4yaI+JDllp3/4UCDHquNH3ZAK3hEI5fOLBzHF/lT568=
Subject key identifier: 43:89:80:0F:05:68:D5:BE:66:75:90:75:CC:9E:82:87:8F:85:DD:33
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018CC794EE1BF6B8F2E85E2B341E04593174
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Q4mADwVo1b5mdZB1zJ6Ch4-F3TM.roa
Signing time: Tue 02 Jan 2024 00:31:15 +0000
ROA not before: Tue 02 Jan 2024 00:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 194.53.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ee:1b:f6:b8:f2:e8:5e:2b:34:1e:04:59:31:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 00:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4389800f0568d5be66759075cc9e82878f85dd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:4f:ba:af:0f:9e:6c:2e:ef:0d:b4:0b:bb:
a8:1b:10:22:66:0a:d5:65:b1:d0:d6:ad:ac:56:13:
3f:83:f6:0b:a3:9f:56:46:c0:43:0c:97:6d:85:5a:
b5:af:69:33:f9:0d:98:4d:22:99:79:8f:1a:1f:54:
05:e6:32:ce:4f:62:02:c9:74:ad:a3:93:93:34:09:
ea:71:f5:35:97:62:1b:fa:5f:ae:d1:2f:00:0e:75:
03:2f:40:b0:05:84:08:17:24:92:b8:2b:80:cc:81:
ae:cc:7c:d8:4d:93:69:64:33:0a:6a:8e:3e:71:ac:
08:0f:e7:ce:86:ec:0f:e7:27:2e:c1:f4:c5:d4:96:
30:51:f3:20:42:46:56:ab:7d:23:5a:b4:b4:97:27:
cc:90:4a:51:03:65:93:cf:cd:81:ba:17:f4:59:b4:
fe:2d:dc:c0:33:f8:37:93:e8:a2:ea:25:e8:74:61:
d0:14:63:79:80:ea:8b:56:09:c7:f8:43:27:e4:fa:
0d:f4:fd:1c:80:35:2d:cd:44:a7:b0:f9:c4:27:25:
86:6d:7c:c0:5b:c8:64:6b:30:9f:c6:03:aa:ba:98:
04:47:5c:97:b4:ef:39:07:d4:4e:58:95:d8:6c:e6:
68:a1:a1:08:d1:a0:af:98:4a:10:42:16:e6:81:33:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:89:80:0F:05:68:D5:BE:66:75:90:75:CC:9E:82:87:8F:85:DD:33
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Q4mADwVo1b5mdZB1zJ6Ch4-F3TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.188.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:59:6f:ab:0a:eb:0f:72:e3:b1:d1:6e:a7:e6:9b:ff:01:19:
25:d0:12:7d:a5:8a:40:fd:41:66:fc:c1:9c:21:18:78:ff:17:
49:42:2e:db:5d:04:48:9f:fe:15:1a:7a:a8:fe:b0:18:e5:66:
c0:8f:e2:cd:cf:b5:7c:e6:a7:61:43:e6:73:8c:b2:c2:35:fc:
37:35:d0:e1:5c:e4:1d:c6:d2:52:e3:fd:72:2b:ae:bc:4e:be:
bc:5c:8a:7a:53:42:7e:fc:43:b9:2a:b1:cc:fe:44:85:cf:a7:
56:7d:eb:aa:eb:47:a0:fc:e3:20:5a:74:ea:a2:bb:ca:47:c6:
38:bb:31:fa:18:3a:a2:e5:b6:df:17:58:ac:2c:60:ce:32:2a:
c4:4c:36:ef:45:b1:c2:c9:54:73:e5:67:73:d4:7a:76:bb:aa:
4a:94:b1:e9:2d:19:71:bb:0a:aa:52:f2:ef:0f:68:54:5f:af:
0a:3e:5f:c6:ee:78:e2:f3:2f:07:fa:13:69:33:5f:ed:10:0f:
76:ff:b7:73:a1:64:1f:50:24:d1:83:70:f1:a2:f9:e6:56:2d:
c4:44:59:99:ed:04:34:75:a1:98:b7:33:f1:e6:33:90:c3:72:
44:d3:64:36:6c:56:40:b7:0f:8c:1d:44:c2:56:ff:1f:5b:29:
75:d0:fa:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlO4b9rjy6F4rNB4EWTF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjQwMTAyMDAzMTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mzg5ODAwZjA1NjhkNWJlNjY3NTkwNzVjYzllODI4NzhmODVkZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjhPuq8Pnmwu7w20C7uoGxAiZgrV
ZbHQ1q2sVhM/g/YLo59WRsBDDJdthVq1r2kz+Q2YTSKZeY8aH1QF5jLOT2ICyXSt
o5OTNAnqcfU1l2Ib+l+u0S8ADnUDL0CwBYQIFySSuCuAzIGuzHzYTZNpZDMKao4+
cawID+fOhuwP5ycuwfTF1JYwUfMgQkZWq30jWrS0lyfMkEpRA2WTz82Buhf0WbT+
LdzAM/g3k+ii6iXodGHQFGN5gOqLVgnH+EMn5PoN9P0cgDUtzUSnsPnEJyWGbXzA
W8hkazCfxgOqupgER1yXtO85B9ROWJXYbOZooaEI0aCvmEoQQhbmgTM3gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEOJgA8FaNW+ZnWQdcyegoePhd0zMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvUTRtQUR3Vm8xYjVtZFpCMXpKNkNoNC1GM1RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjW8MA0G
CSqGSIb3DQEBCwUAA4IBAQCPWW+rCusPcuOx0W6n5pv/ARkl0BJ9pYpA/UFm/MGc
IRh4/xdJQi7bXQRIn/4VGnqo/rAY5WbAj+LNz7V85qdhQ+ZzjLLCNfw3NdDhXOQd
xtJS4/1yK668Tr68XIp6U0J+/EO5KrHM/kSFz6dWfeuq60eg/OMgWnTqorvKR8Y4
uzH6GDqi5bbfF1isLGDOMirETDbvRbHCyVRz5Wdz1Hp2u6pKlLHpLRlxuwqqUvLv
D2hUX68KPl/G7nji8y8H+hNpM1/tEA92/7dzoWQfUCTRg3DxovnmVi3ERFmZ7QQ0
daGYtzPx5jOQw3JE02Q2bFZAtw+MHUTCVv8fWyl10PrI
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:42:03 2024 by rpki-client on console-ams.rpki-client.org