Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/QC4dbXrWzmsaI3ieu6ZmyifgWrw.roa
File: QC4dbXrWzmsaI3ieu6ZmyifgWrw.roa (raw, json)
Hash identifier: 4T1/w9dTOwish0pRWO+dm1pJfu9SriTHmdVD15gaeLo=
Subject key identifier: 40:2E:1D:6D:7A:D6:CE:6B:1A:23:78:9E:BB:A6:66:CA:27:E0:5A:BC
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 018FCE50B8C2C8BBB9CFCC94147870714AC9
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/QC4dbXrWzmsaI3ieu6ZmyifgWrw.roa
Signing time: Fri 31 May 2024 11:02:27 +0000
ROA not before: Fri 31 May 2024 11:02:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215487
IP address blocks: 77.83.59.0/24 maxlen: 24
2a14:340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ce:50:b8:c2:c8:bb:b9:cf:cc:94:14:78:70:71:4a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: May 31 11:02:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=402e1d6d7ad6ce6b1a23789ebba666ca27e05abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:ae:94:ce:24:14:33:a5:5c:76:b5:90:f6:
9a:74:e6:b4:fa:ad:f1:3b:09:67:c6:24:26:b9:dd:
e6:f1:4d:8e:e1:46:1c:b5:6c:a7:60:d1:a6:6f:dd:
d7:3a:ba:15:74:e9:3a:68:8a:d7:5d:23:bd:5a:1c:
d0:f8:8f:f9:77:ce:0c:49:45:06:2c:77:45:d7:3a:
07:03:11:09:01:d1:92:9d:ea:4b:51:5d:84:69:ff:
7c:44:15:48:84:ea:cc:73:fd:a4:ed:48:43:d7:af:
79:d7:d5:0a:d8:77:3c:96:42:85:e5:59:50:24:1d:
8b:41:30:e7:18:03:10:fd:fe:b7:6a:1b:b6:eb:df:
cc:e8:9b:24:72:1f:30:69:48:7d:ff:fc:d2:91:30:
c3:10:fc:f1:0b:14:f6:86:1d:81:b6:08:df:80:a1:
6d:71:43:14:b6:47:ce:7c:ed:54:a0:7c:70:ec:75:
6d:2f:4a:d4:de:fe:83:5a:a7:6e:29:aa:44:29:a2:
cd:da:2e:53:04:51:48:a1:de:cc:d8:bc:4f:c8:79:
d5:d7:74:e0:16:2d:f8:70:7c:11:33:d7:55:c3:12:
70:e2:a2:28:a4:18:ca:12:32:37:ba:63:77:dd:dc:
44:63:58:6b:51:9e:ca:d0:6d:63:f1:1d:18:1e:70:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2E:1D:6D:7A:D6:CE:6B:1A:23:78:9E:BB:A6:66:CA:27:E0:5A:BC
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/QC4dbXrWzmsaI3ieu6ZmyifgWrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.59.0/24
IPv6:
2a14:340::/29
Signature Algorithm: sha256WithRSAEncryption
79:ef:da:f6:eb:8a:84:9a:c0:b1:eb:41:cf:9d:81:d1:87:37:
19:84:c4:ae:47:d7:66:22:52:8b:01:28:37:79:ae:9f:87:3b:
14:b5:ed:c5:ef:c9:f2:6e:a8:53:ee:84:32:4f:e1:d9:03:72:
64:2b:2f:2d:76:d2:54:7d:67:de:c9:6c:8f:8d:87:e7:ba:06:
71:65:e1:71:cf:c0:82:75:95:25:cf:5a:e8:88:45:6d:ec:4a:
8f:9e:3d:5b:34:15:65:8b:11:c1:a7:9c:31:8e:23:c0:cd:12:
09:14:fe:63:23:eb:b5:b5:78:38:72:23:97:76:57:42:a8:76:
4d:30:6b:9e:ef:c8:b2:52:f1:67:b0:01:68:08:d7:72:55:e6:
e6:d7:a2:de:d0:dc:ae:7b:22:08:86:81:ec:21:6a:0b:9f:64:
78:db:9a:a7:86:d0:17:ec:d9:f9:1c:da:32:88:e9:0b:a0:68:
f5:57:65:43:b9:7f:e1:2c:f9:9f:c1:48:1a:18:61:9f:40:9e:
29:c8:d0:f8:04:e6:a0:60:55:9e:aa:d8:6b:74:3f:b5:f6:e3:
14:8f:52:e4:cc:c5:9a:56:13:54:31:5a:25:ce:13:a7:57:4d:
8b:9e:97:09:37:f8:99:0b:78:0d:0f:d7:c2:7a:4a:14:2b:e1:
a6:e5:3f:25
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY/OULjCyLu5z8yUFHhwcUrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjdhMzM4NjcyM2JhOGEyZWE0ODJjN2I2ODAzMWE1NDEy
MmFjNGYwHhcNMjQwNTMxMTEwMjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDJlMWQ2ZDdhZDZjZTZiMWEyMzc4OWViYmE2NjZjYTI3ZTA1YWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNGulM4kFDOlXHa1kPaadOa0+q3x
OwlnxiQmud3m8U2O4UYctWynYNGmb93XOroVdOk6aIrXXSO9WhzQ+I/5d84MSUUG
LHdF1zoHAxEJAdGSnepLUV2Eaf98RBVIhOrMc/2k7UhD169519UK2Hc8lkKF5VlQ
JB2LQTDnGAMQ/f63ahu269/M6Jskch8waUh9//zSkTDDEPzxCxT2hh2BtgjfgKFt
cUMUtkfOfO1UoHxw7HVtL0rU3v6DWqduKapEKaLN2i5TBFFIod7M2LxPyHnV13Tg
Fi34cHwRM9dVwxJw4qIopBjKEjI3umN33dxEY1hrUZ7K0G1j8R0YHnBQ6wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEAuHW161s5rGiN4nrumZson4Fq8MB8GA1UdIwQY
MBaAFMS3ozhnI7qKLqSCx7aAMaVBIqxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEt
YmQ0MGRmYWU3ODg2LzEvUUM0ZGJYcld6bXNhSTNpZXU2Wm15aWZnV3J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEtYmQ0MGRmYWU3ODg2
LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQATVM7MA0E
AgACMAcDBQMqFANAMA0GCSqGSIb3DQEBCwUAA4IBAQB579r264qEmsCx60HPnYHR
hzcZhMSuR9dmIlKLASg3ea6fhzsUte3F78nybqhT7oQyT+HZA3JkKy8tdtJUfWfe
yWyPjYfnugZxZeFxz8CCdZUlz1roiEVt7EqPnj1bNBVlixHBp5wxjiPAzRIJFP5j
I+u1tXg4ciOXdldCqHZNMGue78iyUvFnsAFoCNdyVebm16Le0NyueyIIhoHsIWoL
n2R425qnhtAX7Nn5HNoyiOkLoGj1V2VDuX/hLPmfwUgaGGGfQJ4pyND4BOagYFWe
qthrdD+19uMUj1LkzMWaVhNUMVolzhOnV02LnpcJN/iZC3gND9fCekoUK+Gm5T8l
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:39:51 2024 by rpki-client on console-fra.rpki-client.org