Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/qHDDwXS78hBF76Act65RYv8r9Nk.roa
File: qHDDwXS78hBF76Act65RYv8r9Nk.roa (raw, json)
Hash identifier: tUR75nnc+gkWzRVCFPSkAmcRmycGZPRbUWLLlbjS4JU=
Subject key identifier: A8:70:C3:C1:74:BB:F2:10:45:EF:A0:1C:B7:AE:51:62:FF:2B:F4:D9
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01909529F97B0F78EBE7B26383421586C58F
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/qHDDwXS78hBF76Act65RYv8r9Nk.roa
Signing time: Tue 09 Jul 2024 01:44:34 +0000
ROA not before: Tue 09 Jul 2024 01:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197730
IP address blocks: 45.135.238.0/24 maxlen: 24
185.235.164.0/24 maxlen: 24
2a06:da40::/40 maxlen: 40
2a0b:1f00::/32 maxlen: 32
2a0e:31c0::/40 maxlen: 40
2a0f:22c0::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:95:29:f9:7b:0f:78:eb:e7:b2:63:83:42:15:86:c5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jul 9 01:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a870c3c174bbf21045efa01cb7ae5162ff2bf4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:3c:13:0b:38:36:4a:6b:e9:cd:ac:6f:c0:
2a:60:85:e8:19:2b:cc:68:9a:31:2b:eb:c3:4e:63:
ff:ca:a0:37:e5:40:e2:97:22:25:3a:7a:d5:bc:bd:
3e:9c:b7:31:fb:5b:6b:e5:28:e4:d8:af:52:d7:50:
97:5b:9d:8c:49:b2:8f:71:a5:53:eb:99:d9:e5:73:
d4:d4:53:ca:23:f0:15:b5:53:c0:06:3d:cc:24:fc:
38:ed:05:27:4c:ab:33:b7:cf:e2:02:18:b9:a3:62:
f7:1c:03:5b:dd:1e:8b:49:cb:27:4c:21:b2:63:88:
a8:07:bb:98:de:13:c6:30:0f:83:e2:ff:ec:54:50:
68:fa:f0:72:98:54:76:10:c7:f8:e6:8d:25:76:e6:
82:cd:bc:f5:fb:c1:41:e7:a0:2d:f8:2c:aa:71:dc:
94:90:25:44:a8:c7:31:70:1a:21:a7:4e:2d:2a:5d:
09:3b:d5:ba:0e:94:2c:e3:bb:6d:66:bb:10:df:03:
a4:5e:15:6e:02:ec:bb:a1:d1:48:05:08:a8:18:e3:
f0:88:4c:71:bd:60:19:cc:6b:26:b8:22:1a:ec:5d:
09:4f:28:20:5d:e4:18:3b:50:25:51:ea:17:a0:94:
6b:1f:33:d2:23:2a:79:ad:ff:90:2d:2b:d8:63:1f:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:70:C3:C1:74:BB:F2:10:45:EF:A0:1C:B7:AE:51:62:FF:2B:F4:D9
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/qHDDwXS78hBF76Act65RYv8r9Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.238.0/24
185.235.164.0/24
IPv6:
2a06:da40::/40
2a0b:1f00::/32
2a0e:31c0::/40
2a0f:22c0::/40
Signature Algorithm: sha256WithRSAEncryption
49:f6:6a:89:38:e4:c3:de:53:1f:ef:39:7a:1c:52:6a:49:6a:
8e:5a:cb:f8:b8:41:16:0d:66:7b:61:36:0e:95:ac:42:9a:50:
b5:a7:9b:c1:9c:e2:82:8c:c3:74:c1:2b:40:d7:1e:8a:86:a5:
b9:00:88:ed:74:92:45:0d:0e:65:4f:aa:a4:27:e7:dc:10:2d:
4a:a0:19:59:fb:0a:1e:64:5e:09:4c:ba:cd:73:70:a9:bb:09:
cf:d2:82:2c:ad:b9:3c:24:45:f6:96:31:03:ca:6a:ab:34:23:
16:97:74:61:76:ff:99:74:2f:cc:7d:a2:88:5d:35:21:ef:5b:
64:c3:4a:e0:8a:58:33:00:c5:92:21:ea:82:94:33:4a:cd:18:
3a:e4:78:5f:e5:c7:82:cb:d7:ed:1d:05:66:ff:5b:8b:e5:90:
73:66:43:70:4f:a7:da:c6:90:e6:18:04:87:bc:06:7e:d8:aa:
ca:13:ed:4c:08:a1:b2:8a:e1:c1:c7:18:ca:6c:5a:0a:12:9e:
d1:20:fe:20:5f:da:4b:8a:e2:2f:3b:07:1a:2f:77:a9:0a:ee:
aa:ba:10:96:67:58:37:ac:63:70:46:ec:2c:f6:a5:7f:1f:19:
4c:4d:92:4b:be:55:a4:eb:d9:62:1b:b0:79:dc:90:c4:5e:12:
6e:8f:5b:65
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZCVKfl7D3jr57Jjg0IVhsWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwNzA5MDE0NDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODcwYzNjMTc0YmJmMjEwNDVlZmEwMWNiN2FlNTE2MmZmMmJmNGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocY8Ews4Nkpr6c2sb8AqYIXoGSvM
aJoxK+vDTmP/yqA35UDilyIlOnrVvL0+nLcx+1tr5Sjk2K9S11CXW52MSbKPcaVT
65nZ5XPU1FPKI/AVtVPABj3MJPw47QUnTKszt8/iAhi5o2L3HANb3R6LScsnTCGy
Y4ioB7uY3hPGMA+D4v/sVFBo+vBymFR2EMf45o0lduaCzbz1+8FB56At+CyqcdyU
kCVEqMcxcBohp04tKl0JO9W6DpQs47ttZrsQ3wOkXhVuAuy7odFIBQioGOPwiExx
vWAZzGsmuCIa7F0JTyggXeQYO1AlUeoXoJRrHzPSIyp5rf+QLSvYYx81kwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFKhww8F0u/IQRe+gHLeuUWL/K/TZMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvcUhERHdYUzc4aEJGNzZBY3Q2NVJZdjhyOU5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzASBAIAATAMAwQALYfuAwQA
ueukMCUEAgACMB8DBgAqBtpAAAMFACoLHwADBgAqDjHAAAMGACoPIsAAMA0GCSqG
SIb3DQEBCwUAA4IBAQBJ9mqJOOTD3lMf7zl6HFJqSWqOWsv4uEEWDWZ7YTYOlaxC
mlC1p5vBnOKCjMN0wStA1x6KhqW5AIjtdJJFDQ5lT6qkJ+fcEC1KoBlZ+woeZF4J
TLrNc3CpuwnP0oIsrbk8JEX2ljEDymqrNCMWl3Rhdv+ZdC/MfaKIXTUh71tkw0rg
ilgzAMWSIeqClDNKzRg65Hhf5ceCy9ftHQVm/1uL5ZBzZkNwT6faxpDmGASHvAZ+
2KrKE+1MCKGyiuHBxxjKbFoKEp7RIP4gX9pLiuIvOwcaL3epCu6quhCWZ1g3rGNw
Ruws9qV/HxlMTZJLvlWk69liG7B53JDEXhJuj1tl
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:51:01 2024 by rpki-client on console-fra.rpki-client.org