Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/qwk1XZo9MBgjnXbtK7MwyoRkNGY.roa
File: qwk1XZo9MBgjnXbtK7MwyoRkNGY.roa (raw, json)
Hash identifier: LepcUqLOC7wkT5uIgIc7TXqzaVQhcrSzctAFDQ/eKEQ=
Subject key identifier: AB:09:35:5D:9A:3D:30:18:23:9D:76:ED:2B:B3:30:CA:84:64:34:66
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 018CC493236E738FECE66ED1BE7F2A6E45D4
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/qwk1XZo9MBgjnXbtK7MwyoRkNGY.roa
Signing time: Mon 01 Jan 2024 10:30:26 +0000
ROA not before: Mon 01 Jan 2024 10:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204964
IP address blocks: 185.233.156.0/22 maxlen: 22
185.233.160.0/22 maxlen: 22
185.243.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:23:6e:73:8f:ec:e6:6e:d1:be:7f:2a:6e:45:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jan 1 10:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab09355d9a3d3018239d76ed2bb330ca84643466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fb:b4:44:ba:f8:c0:05:97:0c:b4:ea:9d:c8:
1e:82:3f:29:34:0c:f0:b3:32:e0:1c:49:a8:e7:96:
81:e9:80:a5:a7:51:c0:6b:17:7d:f6:32:e0:e1:fd:
10:47:fd:19:b4:84:d6:dd:e2:3f:ea:4b:c1:1c:4d:
4a:37:63:3c:31:c5:ab:f1:0e:dd:0b:35:15:7c:79:
19:87:3a:7a:45:69:9c:25:cf:2c:d9:2c:79:67:3e:
94:89:79:53:b3:3e:63:e7:f3:0d:f8:86:d6:3e:77:
66:59:0a:af:35:b2:68:94:73:5c:88:90:89:34:62:
7b:71:8e:dd:2d:64:22:8b:47:34:07:9a:db:96:4b:
f7:90:92:ca:ad:29:01:5b:a9:70:b4:ba:0a:73:74:
2e:5f:22:83:05:50:a0:e3:2e:d4:96:e1:6a:82:ce:
28:d5:91:0c:62:d0:43:73:ee:1f:fb:aa:0b:dd:25:
b8:b4:3a:2b:9b:fd:d3:96:03:77:9b:6c:7a:ae:f6:
a0:ce:7e:f3:d5:7c:d9:fc:8a:c8:5a:83:80:2c:d7:
6c:c7:04:b2:11:6f:fb:19:7b:63:93:85:7d:55:6d:
7e:f2:f4:60:0e:9d:dd:62:f3:53:73:5b:61:45:9d:
d9:76:dc:b2:4d:79:2a:ed:31:b8:b9:df:a8:8f:c1:
f3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:09:35:5D:9A:3D:30:18:23:9D:76:ED:2B:B3:30:CA:84:64:34:66
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/qwk1XZo9MBgjnXbtK7MwyoRkNGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.156.0-185.233.163.255
185.243.28.0/22
Signature Algorithm: sha256WithRSAEncryption
76:84:b5:bd:e6:7e:7f:7a:ef:a1:cb:74:b8:4a:35:35:8e:38:
3e:f5:33:43:d8:0f:1a:15:91:84:c5:05:81:67:dc:7d:d1:0f:
d1:6a:0b:e6:16:a6:d5:a3:9c:ca:a0:3a:fb:77:0f:34:ca:38:
1c:94:5f:bf:1a:7c:d8:d0:c4:19:15:9e:c5:13:8d:d0:3c:87:
25:87:b5:86:08:f7:2f:e9:87:3b:df:ae:24:8c:f2:55:fc:b8:
b4:9d:12:46:17:56:32:11:cb:a5:75:32:01:f9:65:c2:79:a7:
2e:43:75:88:21:c6:dc:6f:81:3b:4a:7f:0b:0d:3e:75:26:83:
1c:de:8b:57:9f:ea:35:6c:40:19:15:2a:00:54:78:27:47:f4:
fb:0d:a2:3c:fd:30:71:56:2b:15:b8:07:73:8c:68:01:ed:f0:
e3:22:cf:24:7e:d9:7c:16:6d:66:01:d5:86:9e:f7:8c:99:cf:
0b:55:1e:51:49:2a:55:b3:4e:d4:63:de:b2:09:34:e1:2b:4e:
db:ad:d1:70:22:df:b4:14:6c:dc:be:f3:59:eb:ef:53:66:fb:
c5:75:23:fc:f9:b2:67:16:47:28:4d:3a:a6:00:e7:4d:13:63:
21:12:8f:d2:d1:0f:37:af:95:da:18:2b:8c:d2:52:35:a1:0d:
c8:12:e6:3f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzEkyNuc4/s5m7Rvn8qbkXUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4
MWEyOWYwHhcNMjQwMTAxMTAzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjA5MzU1ZDlhM2QzMDE4MjM5ZDc2ZWQyYmIzMzBjYTg0NjQzNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvu0RLr4wAWXDLTqncgegj8pNAzw
szLgHEmo55aB6YClp1HAaxd99jLg4f0QR/0ZtITW3eI/6kvBHE1KN2M8McWr8Q7d
CzUVfHkZhzp6RWmcJc8s2Sx5Zz6UiXlTsz5j5/MN+IbWPndmWQqvNbJolHNciJCJ
NGJ7cY7dLWQii0c0B5rblkv3kJLKrSkBW6lwtLoKc3QuXyKDBVCg4y7UluFqgs4o
1ZEMYtBDc+4f+6oL3SW4tDorm/3TlgN3m2x6rvagzn7z1XzZ/IrIWoOALNdsxwSy
EW/7GXtjk4V9VW1+8vRgDp3dYvNTc1thRZ3ZdtyyTXkq7TG4ud+oj8HzsQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKsJNV2aPTAYI5127SuzMMqEZDRmMB8GA1UdIwQY
MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt
Mzc1NzUzOWMyYWM5LzEvcXdrMVhabzlNQmdqblhidEs3TXd5b1JrTkdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5
LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAK56ZwD
BAK56aADBAK58xwwDQYJKoZIhvcNAQELBQADggEBAHaEtb3mfn9676HLdLhKNTWO
OD71M0PYDxoVkYTFBYFn3H3RD9FqC+YWptWjnMqgOvt3DzTKOByUX78afNjQxBkV
nsUTjdA8hyWHtYYI9y/phzvfriSM8lX8uLSdEkYXVjIRy6V1MgH5ZcJ5py5DdYgh
xtxvgTtKfwsNPnUmgxzei1ef6jVsQBkVKgBUeCdH9PsNojz9MHFWKxW4B3OMaAHt
8OMizyR+2XwWbWYB1Yae94yZzwtVHlFJKlWzTtRj3rIJNOErTtut0XAi37QUbNy+
81nr71Nm+8V1I/z5smcWRyhNOqYA500TYyESj9LRDzevldoYK4zSUjWhDcgS5j8=
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:18:58 2024 by rpki-client on console-ams.rpki-client.org