Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/QqSiJq5x7MHiFMbKTibpKTZyiM0.roa
File: QqSiJq5x7MHiFMbKTibpKTZyiM0.roa (raw, json)
Hash identifier: EbZBs6O6P8oP/uOiVfpxhN8u77TamjqlUUbFsBEmrYA=
Subject key identifier: 42:A4:A2:26:AE:71:EC:C1:E2:14:C6:CA:4E:26:E9:29:36:72:88:CD
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 018CC3B7334FECA2C1A290370ABD6D4C4964
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/QqSiJq5x7MHiFMbKTibpKTZyiM0.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136744
IP address blocks: 91.227.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:33:4f:ec:a2:c1:a2:90:37:0a:bd:6d:4c:49:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42a4a226ae71ecc1e214c6ca4e26e929367288cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:21:eb:cb:c3:fd:84:b8:f7:24:cd:99:c1:90:
f0:76:15:25:35:87:b7:80:29:f9:14:67:5d:c6:42:
d7:82:64:4a:9f:16:51:ca:f4:d8:24:b6:dc:81:a1:
63:26:1e:6d:c4:9a:71:ab:60:f1:32:b5:12:7b:f5:
49:9d:00:6e:bb:fa:71:85:c6:97:f1:c2:c9:76:5a:
24:56:7e:1f:3c:32:fd:6f:11:c5:03:ec:73:b7:58:
7d:8b:ce:d4:5f:41:ff:3b:11:f7:ef:1f:3b:93:22:
f4:ef:c3:b2:77:45:c8:cd:4b:4d:5d:f3:51:2b:5b:
43:d4:1b:70:ed:40:80:d1:f6:cf:d5:ec:ca:70:56:
13:49:fe:7a:6a:b8:f6:18:b1:ef:c3:22:f8:31:9f:
9f:9f:ff:a0:f0:e6:0e:38:16:70:4f:46:3f:11:f0:
c5:e9:95:84:7e:21:d8:fe:78:96:32:87:15:dd:b8:
a6:5f:c8:01:29:74:3d:fc:59:e0:f2:cf:e1:e6:f6:
25:20:bc:77:02:38:cd:2c:a6:50:1f:56:c2:c7:0c:
c0:61:6b:6c:ea:ae:23:7e:78:83:b4:29:dd:ef:9e:
d4:36:58:95:6f:96:a1:f1:9a:37:68:81:6a:d4:aa:
67:48:d0:58:11:45:47:10:08:86:4e:1a:b2:88:cd:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A4:A2:26:AE:71:EC:C1:E2:14:C6:CA:4E:26:E9:29:36:72:88:CD
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/QqSiJq5x7MHiFMbKTibpKTZyiM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.137.0/24
Signature Algorithm: sha256WithRSAEncryption
77:be:54:01:55:b4:28:4f:ad:70:e7:76:1f:c7:a2:6c:f5:31:
ca:47:59:cf:f4:c3:0c:a3:e9:5a:c3:17:df:87:f4:eb:fb:90:
d1:d8:18:cb:60:d2:32:7a:17:f6:d0:cb:ba:e0:06:aa:d3:2b:
c6:1c:f0:e9:4f:79:cc:6a:0f:ae:77:d9:f6:f8:e8:14:b7:28:
64:c7:94:fe:32:97:11:d9:c5:6c:6d:56:24:4b:c0:56:d5:98:
46:1f:97:89:4b:bf:ef:f4:8f:32:d4:a0:df:c9:fd:5b:9f:1a:
b1:5e:3d:f9:06:9a:5c:99:30:ea:56:a4:2b:c6:b0:8f:82:0b:
35:a6:3f:3c:15:b7:08:da:da:c1:f3:31:18:0a:9e:45:77:7b:
0a:d8:4f:dd:99:32:da:52:0a:8e:08:fd:fe:5d:a7:a0:d2:19:
c6:a6:5e:88:3f:53:74:a5:8f:33:64:8e:ef:60:ab:45:0b:63:
d7:41:b6:87:1c:b3:21:52:2b:ef:9d:25:56:45:5f:59:91:ac:
ae:d1:ec:66:1d:4c:9b:a8:8d:3c:91:e7:2e:ca:b1:13:97:47:
50:3d:a7:58:7d:c1:29:c7:b5:f2:78:3e:fa:c3:74:71:07:1e:
de:15:15:f6:5a:ba:62:02:24:ff:55:db:2d:0a:66:c4:4b:65:
e9:5c:41:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtzNP7KLBopA3Cr1tTElkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMDFlNDIyMjI3ZmE0NGNjNWNiOTVkMmE5ZGNjZTBmYTVi
ODljMDcwHhcNMjQwMTAxMDYzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmE0YTIyNmFlNzFlY2MxZTIxNGM2Y2E0ZTI2ZTkyOTM2NzI4OGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCHry8P9hLj3JM2ZwZDwdhUlNYe3
gCn5FGddxkLXgmRKnxZRyvTYJLbcgaFjJh5txJpxq2DxMrUSe/VJnQBuu/pxhcaX
8cLJdlokVn4fPDL9bxHFA+xzt1h9i87UX0H/OxH37x87kyL078Oyd0XIzUtNXfNR
K1tD1Btw7UCA0fbP1ezKcFYTSf56arj2GLHvwyL4MZ+fn/+g8OYOOBZwT0Y/EfDF
6ZWEfiHY/niWMocV3bimX8gBKXQ9/Fng8s/h5vYlILx3AjjNLKZQH1bCxwzAYWts
6q4jfniDtCnd757UNliVb5ah8Zo3aIFq1KpnSNBYEUVHEAiGThqyiM1GpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEKkoiaucezB4hTGyk4m6Sk2cojNMB8GA1UdIwQY
MBaAFHAB5CIif6RMxcuV0qnczg+luJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2Ut
ZjI0MzVkNWNmMzdiLzEvUXFTaUpxNXg3TUhpRk1iS1RpYnBLVFp5aU0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2UtZjI0MzVkNWNmMzdi
LzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+OJMA0G
CSqGSIb3DQEBCwUAA4IBAQB3vlQBVbQoT61w53Yfx6Js9THKR1nP9MMMo+lawxff
h/Tr+5DR2BjLYNIyehf20Mu64Aaq0yvGHPDpT3nMag+ud9n2+OgUtyhkx5T+MpcR
2cVsbVYkS8BW1ZhGH5eJS7/v9I8y1KDfyf1bnxqxXj35BppcmTDqVqQrxrCPggs1
pj88FbcI2trB8zEYCp5Fd3sK2E/dmTLaUgqOCP3+Xaeg0hnGpl6IP1N0pY8zZI7v
YKtFC2PXQbaHHLMhUivvnSVWRV9Zkayu0exmHUybqI08kecuyrETl0dQPadYfcEp
x7XyeD76w3RxBx7eFRX2WrpiAiT/VdstCmbES2XpXEG8
-----END CERTIFICATE-----
Generated at Mon May 6 06:58:53 2024 by rpki-client on console-fra.rpki-client.org