Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/oq-QCh8pxjMJkrdKDk2vTgDPv_8.roa
File: oq-QCh8pxjMJkrdKDk2vTgDPv_8.roa (raw, json)
Hash identifier: Vrxo3Hrl0ARDcB7LB9+mha0jzr38qvwlwqolBCwTZwo=
Subject key identifier: A2:AF:90:0A:1F:29:C6:33:09:92:B7:4A:0E:4D:AF:4E:00:CF:BF:FF
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 018CC6B8FD862223601E93E97136FBCAD20A
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/oq-QCh8pxjMJkrdKDk2vTgDPv_8.roa
Signing time: Mon 01 Jan 2024 20:31:01 +0000
ROA not before: Mon 01 Jan 2024 20:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61349
IP address blocks: 193.178.196.0/24 maxlen: 24
185.29.200.0/22 maxlen: 24
91.205.212.0/22 maxlen: 24
91.199.236.0/24 maxlen: 24
185.173.12.0/22 maxlen: 22
2a04:4340::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:fd:86:22:23:60:1e:93:e9:71:36:fb:ca:d2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Jan 1 20:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2af900a1f29c6330992b74a0e4daf4e00cfbfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6b:cd:db:ac:21:42:49:de:1b:ba:1e:5e:16:
cf:97:f4:f1:a3:79:f6:2f:60:9a:22:59:9b:d6:56:
6f:16:51:46:c5:71:ea:97:f1:99:60:5c:34:67:14:
62:8b:b7:ca:26:d1:4a:fd:45:4d:b0:76:f4:7e:20:
de:63:8a:f0:ab:99:76:c4:06:41:c4:7d:ee:4f:26:
0f:0b:6e:d8:59:1e:5d:44:4d:ce:1c:0d:c7:34:04:
28:23:f9:fd:17:dd:77:85:70:3d:1b:d7:c9:c8:0c:
58:c3:17:95:26:fa:5e:8e:c0:b4:10:a8:b1:f8:70:
dc:f9:3b:30:8c:f0:e6:18:08:c1:35:37:0d:2e:5a:
b1:62:f0:18:e9:8f:e2:6c:ea:8a:96:de:89:95:e1:
25:9b:5a:ce:9f:29:8b:c5:c7:c8:61:50:21:1f:68:
80:68:e5:a2:ec:fa:bb:69:ef:2c:7c:0d:61:4f:85:
d5:fb:34:8b:ce:4c:d9:15:40:21:86:b6:78:b3:64:
0b:cc:04:36:af:6c:e2:2e:e7:f2:bd:19:03:f3:ac:
30:86:12:46:6d:02:1e:c5:85:c1:e4:06:11:f3:51:
2f:3a:2a:ba:2c:63:bc:9f:f1:76:8d:f6:c7:c7:5e:
04:b8:63:d3:5c:cf:7d:b0:4d:95:ec:cc:46:73:09:
29:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AF:90:0A:1F:29:C6:33:09:92:B7:4A:0E:4D:AF:4E:00:CF:BF:FF
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/oq-QCh8pxjMJkrdKDk2vTgDPv_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.236.0/24
91.205.212.0/22
185.29.200.0/22
185.173.12.0/22
193.178.196.0/24
IPv6:
2a04:4340::/29
Signature Algorithm: sha256WithRSAEncryption
7b:45:91:05:bc:d0:7c:2a:5b:9c:21:ee:f0:8b:43:70:50:ee:
3b:c2:8f:bf:30:5a:8a:07:10:5e:7c:5f:93:84:d0:c9:f9:8d:
c6:ea:0f:65:18:09:e8:a1:69:80:25:13:3a:ad:f7:4e:f4:2d:
cf:c3:48:65:8a:3f:93:68:c1:41:1b:de:a3:e6:eb:ee:c2:a1:
29:cf:3a:c6:34:4c:2a:7c:26:fb:f6:91:03:dd:1a:6b:43:c4:
49:d5:a3:57:e0:14:87:a1:5d:7f:0a:ed:6e:8a:ea:dc:66:93:
5a:b5:0f:3d:f4:a3:9e:0b:57:71:12:3b:3d:02:4e:7f:92:14:
6b:f7:e0:2a:da:5e:1c:47:62:b0:ac:00:d3:99:b3:47:06:3e:
af:97:66:de:ca:3f:e0:66:fe:93:15:76:27:70:9a:4b:a4:41:
ba:94:5f:d5:80:1d:5e:6b:73:db:fb:8b:cb:c0:3a:16:9a:41:
6f:2c:0e:11:39:fe:d7:3a:75:99:f9:12:1c:04:88:7d:52:31:
12:16:50:da:52:9c:e0:c6:5b:95:d5:18:f6:72:dc:4e:d6:da:
bf:b2:86:ae:26:29:18:f3:95:3e:e4:6c:c7:9e:27:d3:dc:da:
bb:45:df:31:2b:a3:ba:0d:70:62:51:b9:8a:04:14:a2:13:e4:
95:30:19:fc
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYzGuP2GIiNgHpPpcTb7ytIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjRlNDNjNzViZGM1MTFkNTI0ZjBjODVkMDA5Y2JhNzY5
NTYxNDQwHhcNMjQwMTAxMjAzMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmFmOTAwYTFmMjljNjMzMDk5MmI3NGEwZTRkYWY0ZTAwY2ZiZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2vN26whQkneG7oeXhbPl/Txo3n2
L2CaIlmb1lZvFlFGxXHql/GZYFw0ZxRii7fKJtFK/UVNsHb0fiDeY4rwq5l2xAZB
xH3uTyYPC27YWR5dRE3OHA3HNAQoI/n9F913hXA9G9fJyAxYwxeVJvpejsC0EKix
+HDc+TswjPDmGAjBNTcNLlqxYvAY6Y/ibOqKlt6JleElm1rOnymLxcfIYVAhH2iA
aOWi7Pq7ae8sfA1hT4XV+zSLzkzZFUAhhrZ4s2QLzAQ2r2ziLufyvRkD86wwhhJG
bQIexYXB5AYR81EvOiq6LGO8n/F2jfbHx14EuGPTXM99sE2V7MxGcwkpwQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFKKvkAofKcYzCZK3Sg5Nr04Az7//MB8GA1UdIwQY
MBaAFI1k5Dx1vcUR1STwyF0AnLp2lWFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82ZjliMDktYTU5ZS00ZjkwLTg3Yzct
NzI0NDgzNTJiODA3LzEvb3EtUUNoOHB4ak1Ka3JkS0RrMnZUZ0RQdl84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82ZjliMDktYTU5ZS00ZjkwLTg3YzctNzI0NDgzNTJiODA3
LzEvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAW8fsAwQC
W83UAwQCuR3IAwQCua0MAwQAwbLEMA0EAgACMAcDBQMqBENAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7RZEFvNB8KlucIe7wi0NwUO47wo+/MFqKBxBefF+ThNDJ+Y3G6g9l
GAnooWmAJRM6rfdO9C3Pw0hlij+TaMFBG96j5uvuwqEpzzrGNEwqfCb79pED3Rpr
Q8RJ1aNX4BSHoV1/Cu1uiurcZpNatQ899KOeC1dxEjs9Ak5/khRr9+Aq2l4cR2Kw
rADTmbNHBj6vl2beyj/gZv6TFXYncJpLpEG6lF/VgB1ea3Pb+4vLwDoWmkFvLA4R
Of7XOnWZ+RIcBIh9UjESFlDaUpzgxluV1Rj2ctxO1tq/soauJikY85U+5GzHnifT
3Nq7Rd8xK6O6DXBiUbmKBBSiE+SVMBn8
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:13 2024 by rpki-client on console-ams.rpki-client.org