Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/QugycpULQh-gXxmbxJJyhyXodBc.roa
File: QugycpULQh-gXxmbxJJyhyXodBc.roa (raw, json)
Hash identifier: stJ0RgFSUMZ+VJYCDPlk1gzwzU3qFcoTmuuFzfVzk8k=
Subject key identifier: 42:E8:32:72:95:0B:42:1F:A0:5F:19:9B:C4:92:72:87:25:E8:74:17
Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Certificate serial: 018CC26D7661DE3C273A976CE8D7C7E34EEB
Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/QugycpULQh-gXxmbxJJyhyXodBc.roa
Signing time: Mon 01 Jan 2024 00:30:02 +0000
ROA not before: Mon 01 Jan 2024 00:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201273
IP address blocks: 185.161.249.0/24 maxlen: 24
2a12:8340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:76:61:de:3c:27:3a:97:6c:e8:d7:c7:e3:4e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Validity
Not Before: Jan 1 00:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42e83272950b421fa05f199bc492728725e87417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f8:c5:51:f4:f0:3b:b4:6d:39:ef:3a:b1:ab:
67:dd:1b:ed:2b:1e:47:80:b2:0d:93:3b:7a:db:10:
f1:33:50:aa:97:12:21:4e:40:b7:b1:ee:30:4c:52:
3f:b6:30:18:fc:c5:cd:7b:13:b7:28:f6:96:83:f8:
eb:6f:f8:ce:0e:72:f5:de:3a:42:21:e2:23:2b:3d:
fd:32:db:ae:30:c4:cc:95:bd:dd:3b:67:bd:9e:24:
0d:15:4d:41:19:b4:ff:be:db:c2:77:c6:c0:e7:a4:
26:4c:14:51:46:19:0a:99:bf:57:6d:45:bd:e6:db:
6d:ce:3d:6d:7a:aa:ed:86:1c:76:79:e2:6d:91:08:
61:bf:3f:bc:be:a0:07:91:9f:91:a1:2a:44:f3:ae:
04:41:f0:6b:10:74:b5:c7:2e:94:f6:61:03:2d:18:
8e:64:38:e6:90:47:f8:dc:bd:eb:b0:19:77:07:07:
d1:3e:84:fe:14:92:fd:ce:df:d6:a7:91:a2:c0:9e:
15:2a:c9:05:a6:ac:ae:41:ca:72:82:44:07:9e:a5:
b0:d1:6e:db:0d:0b:89:13:7e:50:df:8b:54:ba:ef:
c9:88:ea:73:91:ce:73:8f:c4:9e:22:63:99:40:f7:
6b:44:e6:67:e6:47:53:b2:dc:24:ec:81:d2:eb:a2:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E8:32:72:95:0B:42:1F:A0:5F:19:9B:C4:92:72:87:25:E8:74:17
X509v3 Authority Key Identifier:
keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/QugycpULQh-gXxmbxJJyhyXodBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.249.0/24
IPv6:
2a12:8340::/48
Signature Algorithm: sha256WithRSAEncryption
57:10:ba:f8:b2:2d:8f:cb:ae:d4:28:0c:ec:04:7e:21:14:63:
99:b9:82:89:b8:50:62:2c:fa:65:2d:08:a8:d7:9a:63:6d:64:
61:d5:1b:d3:8b:ea:94:bd:df:68:7d:1b:3d:9f:79:a3:65:2f:
9d:c4:61:94:47:f9:d5:d4:0d:98:8b:6d:ba:91:e1:e0:89:6d:
97:06:2b:59:1f:56:bb:b5:23:8f:48:38:c5:d8:43:cd:7c:1e:
23:8d:c1:d7:6e:c6:1e:6e:60:51:17:e8:5f:d2:95:89:1d:c6:
cf:c4:75:20:6a:c9:f5:2f:76:cb:c5:99:77:c3:76:fe:91:d8:
df:3f:47:0d:80:d2:47:a3:43:1e:1e:d5:a1:cc:a8:3e:15:00:
c5:cf:93:36:8d:83:b6:fb:b3:59:1a:cd:6b:96:dc:17:03:df:
91:88:5f:78:ed:d9:29:db:52:c0:ed:49:c5:fc:3d:9a:d4:ae:
90:c6:ee:da:bf:4e:42:d6:a6:4a:bc:f1:ef:3e:ac:b3:a8:a1:
6b:a6:d1:2e:1d:49:4f:25:32:ba:50:94:e4:8a:f1:71:60:f5:
4b:80:8e:6f:74:91:e4:0d:dc:5d:37:68:fa:d3:9c:74:7e:74:
d3:6c:fc:a5:46:34:0f:e5:83:b5:9e:f7:fb:6a:30:87:b3:86:
c8:51:f7:a1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzCbXZh3jwnOpds6NfH407rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZWQwMjEzNjY5ODcwMWY3NGM0OWY4YTJhOWU3M2U4NGVj
OTgxYjYwHhcNMjQwMTAxMDAzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmU4MzI3Mjk1MGI0MjFmYTA1ZjE5OWJjNDkyNzI4NzI1ZTg3NDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPjFUfTwO7RtOe86satn3RvtKx5H
gLINkzt62xDxM1CqlxIhTkC3se4wTFI/tjAY/MXNexO3KPaWg/jrb/jODnL13jpC
IeIjKz39MtuuMMTMlb3dO2e9niQNFU1BGbT/vtvCd8bA56QmTBRRRhkKmb9XbUW9
5tttzj1teqrthhx2eeJtkQhhvz+8vqAHkZ+RoSpE864EQfBrEHS1xy6U9mEDLRiO
ZDjmkEf43L3rsBl3BwfRPoT+FJL9zt/Wp5GiwJ4VKskFpqyuQcpygkQHnqWw0W7b
DQuJE35Q34tUuu/JiOpzkc5zj8SeImOZQPdrROZn5kdTstwk7IHS66LtDQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFELoMnKVC0IfoF8Zm8SScocl6HQXMB8GA1UdIwQY
MBaAFDvtAhNmmHAfdMSfiiqec+hOyYG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMt
ZWQ5OWVmNjRhZGJmLzEvUXVneWNwVUxRaC1nWHhtYnhKSnloeVhvZEJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMtZWQ5OWVmNjRhZGJm
LzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuaH5MA8E
AgACMAkDBwAqEoNAAAAwDQYJKoZIhvcNAQELBQADggEBAFcQuviyLY/LrtQoDOwE
fiEUY5m5gom4UGIs+mUtCKjXmmNtZGHVG9OL6pS932h9Gz2feaNlL53EYZRH+dXU
DZiLbbqR4eCJbZcGK1kfVru1I49IOMXYQ818HiONwdduxh5uYFEX6F/SlYkdxs/E
dSBqyfUvdsvFmXfDdv6R2N8/Rw2A0kejQx4e1aHMqD4VAMXPkzaNg7b7s1kazWuW
3BcD35GIX3jt2SnbUsDtScX8PZrUrpDG7tq/TkLWpkq88e8+rLOooWum0S4dSU8l
MrpQlOSK8XFg9UuAjm90keQN3F03aPrTnHR+dNNs/KVGNA/lg7We9/tqMIezhshR
96E=
-----END CERTIFICATE-----
Generated at Tue Jun 18 09:53:32 2024 by rpki-client on console-fra.rpki-client.org