Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/QxjySScu-VsBVhpe2KRzWS-LeTU.roa
File: QxjySScu-VsBVhpe2KRzWS-LeTU.roa (raw, json)
Hash identifier: 0yyM//q1RV6Hg2kDVziNrEM4Rn8LorXvHsTHuJRVCJI=
Subject key identifier: 43:18:F2:49:27:2E:F9:5B:01:56:1A:5E:D8:A4:73:59:2F:8B:79:35
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018F78CAC546F09F4B06231D72CF53FF1FCB
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/QxjySScu-VsBVhpe2KRzWS-LeTU.roa
Signing time: Tue 14 May 2024 20:28:25 +0000
ROA not before: Tue 14 May 2024 20:28:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214907
IP address blocks: 188.132.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:78:ca:c5:46:f0:9f:4b:06:23:1d:72:cf:53:ff:1f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: May 14 20:28:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4318f249272ef95b01561a5ed8a473592f8b7935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:02:d0:0c:e6:34:d8:dd:d8:32:b0:af:fd:
fa:bf:a6:8d:95:b1:aa:81:76:b0:d7:62:7b:09:52:
cb:83:c5:3e:60:2f:a3:5d:18:0a:d5:dd:46:6a:6b:
19:47:41:ee:31:a5:7a:07:f8:49:b9:99:dd:04:ff:
fd:3f:6b:e0:31:69:a9:a3:db:c9:be:ef:8d:96:b2:
8a:36:8e:5a:3b:6e:cc:bb:03:84:2d:a6:c7:19:24:
49:ad:0a:e6:04:1a:ba:bd:7f:7c:ac:18:41:70:0f:
33:11:c5:c2:63:74:36:42:c7:df:b7:f3:26:91:9a:
d3:f7:a5:fb:04:39:5c:11:d6:71:f4:fb:8d:15:eb:
72:5d:64:08:bd:ab:9a:f3:de:bf:c5:ac:61:c4:f3:
ec:da:8f:42:66:56:e1:ed:24:70:4d:c1:70:cf:8f:
1a:5f:d3:bd:8f:cb:48:0a:ec:b7:bd:f9:6a:72:97:
91:ad:3c:f9:46:8d:f9:01:da:79:20:0f:ed:1a:5e:
59:ad:67:a7:3b:32:b0:b4:fb:8e:a1:d1:dc:1e:e8:
bf:68:be:5d:51:57:83:f2:08:53:6f:cf:39:26:0d:
e0:39:c4:ca:b3:ab:2b:b6:46:5c:1a:c0:0c:d7:ef:
dd:a8:51:d1:6d:18:3b:1e:0d:1f:f6:cd:99:4e:97:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:18:F2:49:27:2E:F9:5B:01:56:1A:5E:D8:A4:73:59:2F:8B:79:35
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/QxjySScu-VsBVhpe2KRzWS-LeTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.208.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9d:7b:72:a7:b9:be:ce:93:bf:d8:2a:92:1e:fa:1c:29:43:
cb:f9:34:e9:3c:6c:71:ee:cb:e1:f7:3c:58:d7:cc:64:69:14:
af:ed:e3:fe:6b:40:6d:29:ab:9c:cb:02:6d:3c:25:f0:e0:8b:
01:55:3f:4c:47:e3:ad:77:63:6f:cb:19:b7:50:6a:fa:82:b9:
56:15:3d:b0:05:12:6d:13:81:aa:78:fc:f3:cd:5f:11:b4:12:
ab:eb:fd:66:e4:80:d8:d2:44:4c:91:ed:52:ec:70:60:cf:83:
92:94:fe:e0:00:23:0c:a0:3e:64:17:33:95:55:cf:55:c0:8f:
39:40:9a:83:a5:2d:f9:0e:5a:b2:da:27:ad:2f:7a:51:5b:57:
67:ef:10:6f:9f:1a:24:50:f0:01:41:1d:80:5e:aa:14:a4:bf:
17:ab:27:4e:21:6f:2d:fc:7e:ff:8e:50:61:f1:63:54:0b:99:
db:4a:f8:4e:a6:3a:08:3b:4d:70:5b:c1:dd:bd:e1:f3:92:ea:
97:32:d8:42:32:81:2e:ec:c7:48:18:c6:ff:ea:71:f3:4b:07:
05:d0:8d:c7:3b:94:05:0d:e4:d2:c0:8a:62:f3:8b:d2:86:3b:
b1:0c:26:a0:f2:0b:47:d6:e7:c4:16:8f:98:4c:9c:fe:2f:f2:
09:0b:b7:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY94ysVG8J9LBiMdcs9T/x/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwNTE0MjAyODI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzE4ZjI0OTI3MmVmOTViMDE1NjFhNWVkOGE0NzM1OTJmOGI3OTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKIC0AzmNNjd2DKwr/36v6aNlbGq
gXaw12J7CVLLg8U+YC+jXRgK1d1GamsZR0HuMaV6B/hJuZndBP/9P2vgMWmpo9vJ
vu+NlrKKNo5aO27MuwOELabHGSRJrQrmBBq6vX98rBhBcA8zEcXCY3Q2Qsfft/Mm
kZrT96X7BDlcEdZx9PuNFetyXWQIvaua896/xaxhxPPs2o9CZlbh7SRwTcFwz48a
X9O9j8tICuy3vflqcpeRrTz5Ro35Adp5IA/tGl5ZrWenOzKwtPuOodHcHui/aL5d
UVeD8ghTb885Jg3gOcTKs6srtkZcGsAM1+/dqFHRbRg7Hg0f9s2ZTpfygwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEMY8kknLvlbAVYaXtikc1kvi3k1MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvUXhqeVNTY3UtVnNCVmhwZTJLUnpXUy1MZVRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvITQMA0G
CSqGSIb3DQEBCwUAA4IBAQCXnXtyp7m+zpO/2CqSHvocKUPL+TTpPGxx7svh9zxY
18xkaRSv7eP+a0BtKaucywJtPCXw4IsBVT9MR+Otd2Nvyxm3UGr6grlWFT2wBRJt
E4GqePzzzV8RtBKr6/1m5IDY0kRMke1S7HBgz4OSlP7gACMMoD5kFzOVVc9VwI85
QJqDpS35Dlqy2ietL3pRW1dn7xBvnxokUPABQR2AXqoUpL8XqydOIW8t/H7/jlBh
8WNUC5nbSvhOpjoIO01wW8HdveHzkuqXMthCMoEu7MdIGMb/6nHzSwcF0I3HO5QF
DeTSwIpi84vShjuxDCag8gtH1ufEFo+YTJz+L/IJC7dR
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:35:48 2024 by rpki-client on console-ams.rpki-client.org