Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qSHPIfDj9Ft1NGLfNvzI3oQ8EVk.roa
File: qSHPIfDj9Ft1NGLfNvzI3oQ8EVk.roa (raw, json)
Hash identifier: tPjQ72TcB1QlyDmck2IXsaSwsJWzMityf24GmPYttDk=
Subject key identifier: A9:21:CF:21:F0:E3:F4:5B:75:34:62:DF:36:FC:C8:DE:84:3C:11:59
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01926D08E4379E3FE24FCDE374C5158F5583
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qSHPIfDj9Ft1NGLfNvzI3oQ8EVk.roa
Signing time: Tue 08 Oct 2024 16:49:12 +0000
ROA not before: Tue 08 Oct 2024 16:49:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 46.38.154.0/24 maxlen: 24
212.16.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6d:08:e4:37:9e:3f:e2:4f:cd:e3:74:c5:15:8f:55:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Oct 8 16:49:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a921cf21f0e3f45b753462df36fcc8de843c1159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:50:f7:4d:12:16:85:0b:3d:f2:f9:5a:3d:
aa:18:14:1e:7d:26:cb:71:e0:c7:45:33:e2:5a:30:
03:50:d8:75:40:3d:41:9e:69:85:e2:87:0a:90:0c:
11:8e:21:c3:31:cc:7b:a6:29:d3:57:f1:d0:8a:1e:
41:d7:2c:46:90:a8:da:58:a2:d3:80:af:48:49:d8:
d1:a8:38:63:46:cd:09:85:8b:36:f0:c5:b2:ae:f8:
28:06:a3:0c:4c:41:f6:04:6a:1c:e2:f5:c1:53:3e:
fa:10:3f:a0:de:79:0b:b9:4a:c6:b9:41:0b:f8:52:
56:af:31:e2:0d:83:f5:df:fe:5b:7e:5c:bd:61:f9:
2a:bc:b6:51:ba:6e:ea:77:ef:61:52:8b:76:30:f2:
4f:78:11:75:18:cf:c1:f3:5d:ae:f8:3c:c6:72:68:
69:7d:bf:c2:90:f7:15:e8:f5:fb:db:df:7e:97:9b:
de:3c:90:d4:bd:28:81:d6:b1:fa:5c:1d:01:7c:f4:
e5:db:17:e0:9a:9c:f8:e6:e3:64:82:ea:84:07:e9:
9f:ca:b2:3e:b9:8d:83:d0:01:b1:3b:a3:5d:30:39:
96:d1:04:00:95:53:f2:bb:17:e1:d0:3f:7c:51:fc:
13:f4:cc:de:60:27:27:c7:d6:1e:2b:ee:5e:ff:38:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:21:CF:21:F0:E3:F4:5B:75:34:62:DF:36:FC:C8:DE:84:3C:11:59
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qSHPIfDj9Ft1NGLfNvzI3oQ8EVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.154.0/24
212.16.79.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b6:6f:ed:44:30:48:62:ab:76:02:75:77:02:2a:a2:7e:52:
9d:c2:ec:f7:9b:94:5b:1e:ed:3b:29:77:d9:7c:2b:86:52:c8:
e8:1a:60:aa:ec:2a:f6:85:84:b5:a2:72:82:f7:03:fe:0d:5a:
10:3d:18:6d:b1:f5:8b:70:d4:39:66:1a:f8:0d:a8:1b:8b:e5:
24:5b:5f:9a:66:0c:33:43:7d:6d:c0:42:f2:7e:8c:b3:ca:ae:
e0:4e:53:02:0f:10:d7:fc:b3:4c:98:bd:8b:29:81:ac:86:28:
b7:ac:04:b4:40:69:a0:4f:11:82:51:be:76:56:02:0a:d7:84:
c3:34:01:20:dc:a7:31:87:c7:0b:12:3c:4f:2d:b7:a4:da:12:
38:9d:11:bd:66:6b:31:88:46:60:79:31:41:30:73:4f:60:9e:
99:ab:91:52:9c:f4:c3:86:0b:fe:03:00:fa:04:76:72:d4:34:
84:c3:73:25:10:5d:ad:7a:f4:31:be:50:82:1c:6f:2a:72:6d:
f5:55:ce:46:2e:eb:6f:ae:6a:31:fa:8f:e5:57:6d:96:4a:0b:
b9:16:f1:d3:e1:04:db:33:be:79:5e:b3:74:f7:f2:85:a8:c9:
e6:f6:44:0e:f9:46:90:13:b4:ea:db:c8:5e:43:f6:58:b2:2d:
7b:f5:e1:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJtCOQ3nj/iT83jdMUVj1WDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQxMDA4MTY0OTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTIxY2YyMWYwZTNmNDViNzUzNDYyZGYzNmZjYzhkZTg0M2MxMTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQBQ900SFoULPfL5Wj2qGBQefSbL
ceDHRTPiWjADUNh1QD1BnmmF4ocKkAwRjiHDMcx7pinTV/HQih5B1yxGkKjaWKLT
gK9ISdjRqDhjRs0JhYs28MWyrvgoBqMMTEH2BGoc4vXBUz76ED+g3nkLuUrGuUEL
+FJWrzHiDYP13/5bfly9YfkqvLZRum7qd+9hUot2MPJPeBF1GM/B812u+DzGcmhp
fb/CkPcV6PX7299+l5vePJDUvSiB1rH6XB0BfPTl2xfgmpz45uNkguqEB+mfyrI+
uY2D0AGxO6NdMDmW0QQAlVPyuxfh0D98UfwT9MzeYCcnx9YeK+5e/zgatwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKkhzyHw4/RbdTRi3zb8yN6EPBFZMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvcVNIUElmRGo5RnQxTkdMZk52ekkzb1E4RVZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiaaAwQA
1BBPMA0GCSqGSIb3DQEBCwUAA4IBAQARtm/tRDBIYqt2AnV3AiqiflKdwuz3m5Rb
Hu07KXfZfCuGUsjoGmCq7Cr2hYS1onKC9wP+DVoQPRhtsfWLcNQ5Zhr4Dagbi+Uk
W1+aZgwzQ31twELyfoyzyq7gTlMCDxDX/LNMmL2LKYGshii3rAS0QGmgTxGCUb52
VgIK14TDNAEg3Kcxh8cLEjxPLbek2hI4nRG9ZmsxiEZgeTFBMHNPYJ6Zq5FSnPTD
hgv+AwD6BHZy1DSEw3MlEF2tevQxvlCCHG8qcm31Vc5GLutvrmox+o/lV22WSgu5
FvHT4QTbM755XrN09/KFqMnm9kQO+UaQE7Tq28heQ/ZYsi179eEe
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:41:16 2024 by rpki-client on console-fra.rpki-client.org