Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/QBfE401U4h1JnON28TUpikI2_Zg.roa
File: QBfE401U4h1JnON28TUpikI2_Zg.roa (raw, json)
Hash identifier: yE3CB3YeTWCnvRCkgxWWqY1ww5//v6KQSnV+CYp/2Co=
Subject key identifier: 40:17:C4:E3:4D:54:E2:1D:49:9C:E3:76:F1:35:29:8A:42:36:FD:98
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 01909521BB7BEC2E45D0D6EBA540C141C5E7
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/QBfE401U4h1JnON28TUpikI2_Zg.roa
Signing time: Tue 09 Jul 2024 01:35:34 +0000
ROA not before: Tue 09 Jul 2024 01:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42965
IP address blocks: 77.246.112.0/20 maxlen: 20
84.21.184.0/22 maxlen: 22
91.196.204.0/22 maxlen: 22
93.181.0.0/18 maxlen: 21
95.214.224.0/22 maxlen: 22
185.201.84.0/22 maxlen: 22
194.50.244.0/22 maxlen: 22
2a02:2f0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:95:21:bb:7b:ec:2e:45:d0:d6:eb:a5:40:c1:41:c5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: Jul 9 01:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4017c4e34d54e21d499ce376f135298a4236fd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:c2:6c:15:37:d8:65:b8:82:57:9f:f8:ad:
e6:2f:1b:6e:ec:95:e4:60:7b:60:91:59:a4:9c:41:
50:74:48:d1:08:96:0c:89:b6:2c:13:aa:53:da:19:
66:18:e7:8a:b5:2c:fd:29:e3:38:70:cc:08:9d:d0:
87:08:1a:ed:7b:3b:7f:ad:0f:cf:ff:f2:58:c9:02:
29:27:b0:a9:84:e2:79:0a:64:7c:58:83:22:33:7d:
7d:d2:98:58:05:fc:8a:b0:fc:72:83:25:f1:40:91:
06:c7:39:c9:0b:12:22:62:48:d4:ab:27:6d:00:13:
18:a9:46:c6:de:4f:a7:0d:3d:63:e6:a2:28:51:60:
c6:f1:8a:ca:ec:5d:90:58:35:e8:18:f4:2b:b9:21:
44:9b:fa:9a:bd:20:f3:b5:e7:7b:20:07:58:7d:47:
3a:f8:5a:59:a4:85:43:23:ea:73:9e:2a:ed:ae:7b:
66:39:b8:8b:e9:9b:0d:8e:78:28:04:0f:8c:d8:a8:
59:cd:b0:03:c5:43:f5:04:7b:ab:a6:d5:35:f9:7d:
6a:a0:8f:3e:9d:cd:58:1d:90:0b:3c:26:77:4d:10:
4f:7d:c8:c1:e8:29:8d:ee:fb:1c:db:4a:93:40:d7:
0c:90:a3:14:0c:16:80:c2:fa:47:65:42:fe:db:eb:
fe:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:17:C4:E3:4D:54:E2:1D:49:9C:E3:76:F1:35:29:8A:42:36:FD:98
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/QBfE401U4h1JnON28TUpikI2_Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.112.0/20
84.21.184.0/22
91.196.204.0/22
93.181.0.0/18
95.214.224.0/22
185.201.84.0/22
194.50.244.0/22
IPv6:
2a02:2f0::/29
Signature Algorithm: sha256WithRSAEncryption
47:33:c2:e4:9d:24:0b:d7:31:0f:ca:9c:7a:66:23:39:36:a4:
18:ce:f1:8d:c8:99:77:bf:de:73:80:8e:e4:8b:a7:91:96:ff:
05:95:02:4b:4b:4d:cb:b0:ce:f9:b6:19:5a:f0:5f:9d:c8:9d:
f8:b6:76:d4:68:1e:c4:8d:fd:f2:99:98:d8:f5:cf:97:39:c2:
4e:11:09:56:0e:30:fd:d7:9c:39:dd:76:aa:9f:4b:72:c1:0c:
f8:68:ad:4d:75:9d:50:e4:60:96:72:0f:8b:2e:77:1a:70:dd:
70:f5:8f:e7:4f:f2:5c:b7:13:2a:39:4d:f3:5c:c6:9c:6d:b8:
2a:d4:2f:ed:83:8d:42:13:f6:33:b2:d4:58:8a:c6:0b:8e:19:
42:3a:60:c7:11:1e:86:4b:c2:94:44:10:45:4c:43:4a:1f:cd:
1a:0e:3b:3c:9f:37:5d:cd:93:9b:f9:03:f4:e4:d6:71:35:21:
a3:ff:94:ad:1d:0b:28:c7:7e:5c:90:3d:9f:d7:df:e6:c0:fc:
14:d9:04:af:ee:c4:e2:18:85:1e:73:a2:5b:43:c0:88:4a:5b:
79:24:32:90:16:e7:f0:01:09:94:08:1c:06:00:5b:86:37:e5:
48:22:27:77:a8:95:b9:4e:f5:32:9c:78:a9:1f:f7:3a:f2:06:
68:34:3b:30
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZCVIbt77C5F0NbrpUDBQcXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MzVmYzhjZjAyYjhhNGUzNzJmYTViYzY0MDk0NGZlYmMy
NGYxZmUwHhcNMjQwNzA5MDEzNTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDE3YzRlMzRkNTRlMjFkNDk5Y2UzNzZmMTM1Mjk4YTQyMzZmZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JrCbBU32GW4glef+K3mLxtu7JXk
YHtgkVmknEFQdEjRCJYMibYsE6pT2hlmGOeKtSz9KeM4cMwIndCHCBrtezt/rQ/P
//JYyQIpJ7CphOJ5CmR8WIMiM3190phYBfyKsPxygyXxQJEGxznJCxIiYkjUqydt
ABMYqUbG3k+nDT1j5qIoUWDG8YrK7F2QWDXoGPQruSFEm/qavSDzted7IAdYfUc6
+FpZpIVDI+pznirtrntmObiL6ZsNjngoBA+M2KhZzbADxUP1BHurptU1+X1qoI8+
nc1YHZALPCZ3TRBPfcjB6CmN7vsc20qTQNcMkKMUDBaAwvpHZUL+2+v+nwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFEAXxONNVOIdSZzjdvE1KYpCNv2YMB8GA1UdIwQY
MBaAFAc1/IzwK4pONy+lvGQJRP68JPH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpYOGpQQXJpazQzTDZXOFpBbEVfcndrOGY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jZjNiOTgtNDk0MS00YmJlLTgyYjMt
NzMxZTkzMzlkNmFjLzEvUUJmRTQwMVU0aDFKbk9OMjhUVXBpa0kyX1pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jZjNiOTgtNDk0MS00YmJlLTgyYjMtNzMxZTkzMzlkNmFj
LzEvQnpYOGpQQXJpazQzTDZXOFpBbEVfcndrOGY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQETfZwAwQC
VBW4AwQCW8TMAwQGXbUAAwQCX9bgAwQCuclUAwQCwjL0MA0EAgACMAcDBQMqAgLw
MA0GCSqGSIb3DQEBCwUAA4IBAQBHM8LknSQL1zEPypx6ZiM5NqQYzvGNyJl3v95z
gI7ki6eRlv8FlQJLS03LsM75thla8F+dyJ34tnbUaB7Ejf3ymZjY9c+XOcJOEQlW
DjD915w53Xaqn0tywQz4aK1NdZ1Q5GCWcg+LLncacN1w9Y/nT/JctxMqOU3zXMac
bbgq1C/tg41CE/YzstRYisYLjhlCOmDHER6GS8KURBBFTENKH80aDjs8nzddzZOb
+QP05NZxNSGj/5StHQsox35ckD2f19/mwPwU2QSv7sTiGIUec6JbQ8CISlt5JDKQ
FufwAQmUCBwGAFuGN+VIIid3qJW5TvUynHipH/c68gZoNDsw
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:19 2024 by rpki-client on console-ams.rpki-client.org