Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Qht0VRSW38Aodi5PZPbESpBt4Rw.roa
File: Qht0VRSW38Aodi5PZPbESpBt4Rw.roa (raw, json)
Hash identifier: Nmu01cczIUu5syE7pyunrnROAhRU1V8eCrcggH97hy8=
Subject key identifier: 42:1B:74:55:14:96:DF:C0:28:76:2E:4F:64:F6:C4:4A:90:6D:E1:1C
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 018CC4923689647A665BA24160889CA6D5CF
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Qht0VRSW38Aodi5PZPbESpBt4Rw.roa
Signing time: Mon 01 Jan 2024 10:29:25 +0000
ROA not before: Mon 01 Jan 2024 10:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.237.175.0/24 maxlen: 24
91.237.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:36:89:64:7a:66:5b:a2:41:60:88:9c:a6:d5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 10:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=421b74551496dfc028762e4f64f6c44a906de11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:c8:71:71:19:c9:28:2c:83:e1:97:2e:e5:
52:da:17:8f:bc:ab:b6:c2:b5:42:35:b1:ba:75:42:
a3:c8:79:95:85:67:32:07:62:8f:87:e4:9d:f7:39:
1b:e4:05:63:f4:aa:26:7d:ea:ab:1f:0e:d3:9d:9a:
dd:29:28:4d:c3:69:14:44:ae:39:01:46:35:48:15:
73:66:80:7d:b4:90:22:1a:75:89:b2:fa:8a:d1:c4:
b2:7f:b5:0c:f0:46:90:a8:be:ab:3c:00:c8:e0:91:
2a:2d:a8:ec:01:12:a5:9a:f6:0e:7d:20:73:9c:33:
d8:7b:54:c9:fc:f3:e4:7c:cb:76:b8:d3:7a:af:11:
dd:61:f0:9c:72:2a:66:a9:eb:59:a0:dc:c9:00:a3:
46:ca:27:ad:0e:7a:fe:2e:b3:e6:ea:20:cd:79:2f:
ab:f4:51:2d:ed:78:b2:a4:8a:8b:4a:d6:ff:0b:3b:
c1:69:9a:f4:5b:3f:e2:7c:c6:1b:a6:b9:9a:73:15:
98:9e:15:83:2b:7a:4c:1e:3d:03:60:a2:d8:0d:a0:
6b:f5:5d:f0:d3:06:8d:0d:35:86:7c:bc:62:26:d5:
65:85:d3:72:b8:3c:78:33:9b:59:85:89:b2:f6:50:
76:d7:7e:dc:4b:24:48:7d:2f:67:a9:e4:77:87:ed:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1B:74:55:14:96:DF:C0:28:76:2E:4F:64:F6:C4:4A:90:6D:E1:1C
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Qht0VRSW38Aodi5PZPbESpBt4Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.174.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:cd:87:27:98:b4:03:86:ae:72:61:93:40:36:ce:6b:70:79:
c3:91:f8:94:d9:5a:bd:82:d3:2c:13:a5:f6:98:74:15:84:4f:
0a:73:0c:f2:43:44:56:4f:38:8c:57:63:ab:00:ad:c3:2d:41:
20:97:1a:0a:ad:bc:8f:a2:ad:18:49:04:40:81:bd:f8:60:5e:
56:c5:33:95:01:1e:2b:27:d9:14:1b:35:9a:50:95:6f:4f:84:
24:f3:d8:58:c2:86:41:87:47:10:2d:12:45:f6:ba:52:68:21:
6a:d5:5b:a9:5e:70:89:77:b1:3b:19:f5:8e:a9:eb:6b:04:9f:
74:da:eb:21:e1:50:21:5d:ec:70:03:54:9c:5d:96:0b:d9:1d:
61:77:d4:4b:54:b0:d0:1a:be:53:9f:49:b7:a7:84:79:ad:13:
71:a7:cc:10:fa:82:aa:cb:32:0e:80:d2:dc:be:18:50:59:3e:
c6:d6:19:8f:91:ce:eb:a0:f8:6f:06:9f:3c:5f:8e:39:bf:58:
de:8f:b7:aa:2d:14:53:59:4b:2b:17:d8:53:d6:bc:71:cd:d8:
f2:09:1b:0b:7e:d4:c0:66:d3:96:83:7f:96:2d:bf:cd:81:bb:
8b:a7:25:ef:31:f7:30:3b:6e:e9:8d:0f:3e:f9:72:12:fc:8b:
34:c8:b4:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkjaJZHpmW6JBYIicptXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj
OGJmMmMwHhcNMjQwMTAxMTAyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjFiNzQ1NTE0OTZkZmMwMjg3NjJlNGY2NGY2YzQ0YTkwNmRlMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC7IcXEZySgsg+GXLuVS2hePvKu2
wrVCNbG6dUKjyHmVhWcyB2KPh+Sd9zkb5AVj9KomfeqrHw7TnZrdKShNw2kURK45
AUY1SBVzZoB9tJAiGnWJsvqK0cSyf7UM8EaQqL6rPADI4JEqLajsARKlmvYOfSBz
nDPYe1TJ/PPkfMt2uNN6rxHdYfCccipmqetZoNzJAKNGyietDnr+LrPm6iDNeS+r
9FEt7XiypIqLStb/CzvBaZr0Wz/ifMYbprmacxWYnhWDK3pMHj0DYKLYDaBr9V3w
0waNDTWGfLxiJtVlhdNyuDx4M5tZhYmy9lB2137cSyRIfS9nqeR3h+3nOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEIbdFUUlt/AKHYuT2T2xEqQbeEcMB8GA1UdIwQY
MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt
NDE2Zjg1ZWUyMzdiLzEvUWh0MFZSU1czOEFvZGk1UFpQYkVTcEJ0NFJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi
LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+2uMA0G
CSqGSIb3DQEBCwUAA4IBAQAOzYcnmLQDhq5yYZNANs5rcHnDkfiU2Vq9gtMsE6X2
mHQVhE8KcwzyQ0RWTziMV2OrAK3DLUEglxoKrbyPoq0YSQRAgb34YF5WxTOVAR4r
J9kUGzWaUJVvT4Qk89hYwoZBh0cQLRJF9rpSaCFq1VupXnCJd7E7GfWOqetrBJ90
2ush4VAhXexwA1ScXZYL2R1hd9RLVLDQGr5Tn0m3p4R5rRNxp8wQ+oKqyzIOgNLc
vhhQWT7G1hmPkc7roPhvBp88X445v1jej7eqLRRTWUsrF9hT1rxxzdjyCRsLftTA
ZtOWg3+WLb/NgbuLpyXvMfcwO27pjQ8++XIS/Is0yLTL
-----END CERTIFICATE-----
Generated at Thu May 2 17:52:24 2024 by rpki-client on console-ams.rpki-client.org