Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/cq3ayPJpi7jzt84CT065UUHvv8U.roa
File: cq3ayPJpi7jzt84CT065UUHvv8U.roa (raw, json)
Hash identifier: j5dd66W+iA4Vrq1b4DNSWbgzHNRVo+zZMToNq5sMe/M=
Subject key identifier: 72:AD:DA:C8:F2:69:8B:B8:F3:B7:CE:02:4F:4E:B9:51:41:EF:BF:C5
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019213737D3F98B0DADD6828BAA3F670C816
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/cq3ayPJpi7jzt84CT065UUHvv8U.roa
Signing time: Sat 21 Sep 2024 07:19:48 +0000
ROA not before: Sat 21 Sep 2024 07:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 194.28.156.0/24 maxlen: 24
194.28.158.0/24 maxlen: 24
194.104.5.0/24 maxlen: 24
194.104.6.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:13:73:7d:3f:98:b0:da:dd:68:28:ba:a3:f6:70:c8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 21 07:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72addac8f2698bb8f3b7ce024f4eb95141efbfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:03:67:49:87:62:5a:28:2f:a8:a1:f5:cc:
bb:5a:54:cc:1c:22:c7:e4:96:f6:47:1c:c3:89:30:
af:2d:96:95:8f:8d:83:ce:14:c0:fe:c2:b0:29:1f:
0c:e9:97:22:0a:38:e8:cc:b9:0e:7e:9f:4b:99:ce:
da:1b:ca:17:b2:44:73:f0:c2:17:bb:fc:8b:b5:55:
0a:98:74:b4:b1:a3:7f:ef:1c:db:de:44:71:7f:03:
54:3a:94:44:a2:85:70:33:0b:b6:90:69:a2:1d:96:
ac:56:9b:f7:80:e8:c0:db:46:ff:23:c1:4d:b6:1a:
0a:f9:61:79:7e:7d:c6:f9:19:bd:66:49:46:5e:ac:
da:90:63:1c:74:60:4d:d7:38:16:31:57:44:de:1a:
56:90:6e:cd:a9:2b:aa:85:d4:32:f9:0f:dc:c7:12:
a0:5f:88:f9:7f:4d:54:05:e2:68:8c:4d:e9:72:ab:
6f:b6:bc:8b:12:08:ce:ef:7a:5c:41:5c:90:14:7a:
34:fc:51:ee:4d:0d:98:21:61:6f:8d:51:3e:9f:a3:
27:3a:1e:b2:4d:24:fa:e8:b4:c8:c7:f3:5f:e6:83:
54:f4:2c:93:51:e7:59:ca:64:8b:7c:d8:d0:9d:2d:
bc:28:a9:a7:4d:b8:6c:68:4f:fb:18:65:10:fe:60:
bd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AD:DA:C8:F2:69:8B:B8:F3:B7:CE:02:4F:4E:B9:51:41:EF:BF:C5
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/cq3ayPJpi7jzt84CT065UUHvv8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.5.0-194.104.6.255
212.69.132.0/24
212.69.134.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:94:65:0a:1a:2b:39:a7:00:7b:68:28:40:a4:61:ad:14:d4:
b2:07:06:e9:3b:dd:77:0d:e5:fe:b3:39:28:ab:28:8f:26:de:
e5:f7:e9:c1:2b:9d:16:22:3a:a4:b8:e3:d8:f7:be:74:15:d4:
2b:bf:6d:04:15:ea:7e:88:5c:83:86:5a:6a:9b:31:3c:93:03:
54:d2:ba:88:84:32:b5:13:95:94:4b:da:27:8c:e4:43:3e:64:
50:2a:9c:95:4c:12:b2:eb:80:31:d6:c8:5e:6c:79:7f:1f:28:
66:19:1e:fb:88:c0:fd:3b:0f:4d:05:80:b1:5e:61:88:e2:55:
ca:e3:13:66:08:16:d3:c5:59:42:d0:4e:2b:a3:43:78:c1:bc:
82:5f:34:71:c2:08:bb:23:7a:2e:bc:7b:53:86:26:0a:36:8b:
c3:13:0e:5b:35:2b:e0:54:1f:67:61:73:3e:ff:29:ce:ce:29:
80:c1:8a:07:80:12:02:9e:e6:72:01:12:4f:f7:19:3c:68:66:
93:83:2c:e2:9d:81:93:2e:0b:e7:a4:89:c5:3a:5b:10:0a:ca:
82:91:39:8f:90:69:e5:07:ff:48:c1:dd:ae:ba:51:78:6a:7c:
01:ac:98:a8:fc:14:60:41:a5:92:dc:8d:30:25:af:a1:3a:86:
a6:28:e3:5a
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZITc30/mLDa3WgouqP2cMgWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjQwOTIxMDcxOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmFkZGFjOGYyNjk4YmI4ZjNiN2NlMDI0ZjRlYjk1MTQxZWZiZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP4DZ0mHYlooL6ih9cy7WlTMHCLH
5Jb2RxzDiTCvLZaVj42DzhTA/sKwKR8M6ZciCjjozLkOfp9Lmc7aG8oXskRz8MIX
u/yLtVUKmHS0saN/7xzb3kRxfwNUOpREooVwMwu2kGmiHZasVpv3gOjA20b/I8FN
thoK+WF5fn3G+Rm9ZklGXqzakGMcdGBN1zgWMVdE3hpWkG7NqSuqhdQy+Q/cxxKg
X4j5f01UBeJojE3pcqtvtryLEgjO73pcQVyQFHo0/FHuTQ2YIWFvjVE+n6MnOh6y
TST66LTIx/Nf5oNU9CyTUedZymSLfNjQnS28KKmnTbhsaE/7GGUQ/mC99QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFHKt2sjyaYu487fOAk9OuVFB77/FMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvY3EzYXlQSnBpN2p6dDg0Q1QwNjVVVUh2djhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAwhycAwQA
whyeMAwDBADCaAUDBADCaAYDBADURYQDBADURYYwDQYJKoZIhvcNAQELBQADggEB
AKKUZQoaKzmnAHtoKECkYa0U1LIHBuk73XcN5f6zOSirKI8m3uX36cErnRYiOqS4
49j3vnQV1Cu/bQQV6n6IXIOGWmqbMTyTA1TSuoiEMrUTlZRL2ieM5EM+ZFAqnJVM
ErLrgDHWyF5seX8fKGYZHvuIwP07D00FgLFeYYjiVcrjE2YIFtPFWULQTiujQ3jB
vIJfNHHCCLsjei68e1OGJgo2i8MTDls1K+BUH2dhcz7/Kc7OKYDBigeAEgKe5nIB
Ek/3GTxoZpODLOKdgZMuC+ekicU6WxAKyoKROY+QaeUH/0jB3a66UXhqfAGsmKj8
FGBBpZLcjTAlr6E6hqYo41o=
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:24:28 2024 by rpki-client on console-ams.rpki-client.org