Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/qcY67Pn-iWQ2ccHDLYRONBZDU8Q.roa
File: qcY67Pn-iWQ2ccHDLYRONBZDU8Q.roa (raw, json)
Hash identifier: 2gQg4zG/mAwK3hRYH7ccXgHkRNVXIvQIgsqxZ/6160Q=
Subject key identifier: A9:C6:3A:EC:F9:FE:89:64:36:71:C1:C3:2D:84:4E:34:16:43:53:C4
Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial: 018CC56E8C58DF47F907126295B9D428F719
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/qcY67Pn-iWQ2ccHDLYRONBZDU8Q.roa
Signing time: Mon 01 Jan 2024 14:30:05 +0000
ROA not before: Mon 01 Jan 2024 14:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57498
IP address blocks: 91.227.42.0/24 maxlen: 24
91.221.74.0/23 maxlen: 23
194.187.30.0/23 maxlen: 23
194.187.30.0/24 maxlen: 24
194.187.31.0/24 maxlen: 24
2001:678:b8c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:8c:58:df:47:f9:07:12:62:95:b9:d4:28:f7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
Validity
Not Before: Jan 1 14:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9c63aecf9fe89643671c1c32d844e34164353c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:f0:9b:db:99:e9:b5:36:c5:12:cb:f8:7e:
0a:4b:1d:77:f8:45:c4:83:11:2d:ad:09:50:ff:99:
1d:83:b7:e6:c7:42:4b:83:89:a4:8e:81:60:82:cc:
1d:f0:3b:04:20:ca:ed:50:18:75:6a:24:ed:dd:b5:
94:5b:2b:d4:ef:57:8d:45:ba:0b:dc:da:23:7f:86:
98:61:86:d7:29:b5:1a:33:08:a5:59:05:78:40:f5:
78:58:40:a7:15:ff:aa:52:28:0a:20:78:fe:93:f2:
6d:b9:a0:db:6f:0c:c6:49:18:f3:71:81:53:1f:74:
f8:fb:0f:e3:f3:96:c0:41:de:c8:01:fd:3c:5f:60:
25:08:8f:a8:c8:9e:c8:47:eb:e2:6a:c9:2a:32:8e:
70:62:ad:b3:f1:d8:d4:e1:9e:ba:cb:81:e9:ea:5c:
c0:64:ab:df:8b:d8:76:e4:a6:82:53:ec:5c:28:88:
f1:f4:33:df:49:ed:6e:2f:10:1d:73:75:d2:08:29:
3b:f2:93:d0:63:e7:9c:74:e8:a6:e5:37:79:fb:b5:
3b:6d:f5:a0:a8:79:8b:f0:25:22:78:e7:f3:16:37:
61:16:e9:b4:76:1a:83:b8:b5:86:63:1b:42:86:eb:
d1:e1:71:75:8f:e5:1c:fe:a4:9d:a1:a7:60:78:b2:
47:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C6:3A:EC:F9:FE:89:64:36:71:C1:C3:2D:84:4E:34:16:43:53:C4
X509v3 Authority Key Identifier:
keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/qcY67Pn-iWQ2ccHDLYRONBZDU8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.74.0/23
91.227.42.0/24
194.187.30.0/23
IPv6:
2001:678:b8c::/48
Signature Algorithm: sha256WithRSAEncryption
a2:27:34:d8:f2:38:87:37:f1:17:fe:c0:97:15:ab:71:64:f5:
21:a8:d1:78:66:89:e8:c3:78:e1:dd:ca:3c:84:41:b8:16:8f:
88:a7:8d:c1:e4:f4:dc:a2:8e:9c:b0:e4:3a:24:a2:c0:76:c1:
5d:11:1b:17:a9:4c:a1:c6:29:f0:b1:f4:c7:66:f6:88:c7:85:
ec:3a:18:03:7b:df:17:37:7e:43:cc:9d:28:8f:88:aa:a0:ac:
67:de:ba:fa:56:c5:ac:cb:95:69:d5:4a:17:1d:be:9f:03:60:
01:88:00:6d:df:9c:8d:e4:84:36:12:88:6a:43:64:69:0f:e5:
9c:ee:94:81:13:f3:84:6a:e3:8a:0f:05:79:ba:e6:9d:37:cd:
ff:9a:3a:5d:46:b6:c5:7a:15:46:13:d3:15:7b:d7:a8:e1:37:
67:33:e0:37:43:63:98:90:de:8f:5c:09:cb:bc:41:0b:4c:0e:
52:b4:06:23:39:a9:37:0d:12:97:ec:7c:ef:ba:05:94:e0:30:
21:e9:8e:09:9b:c1:3a:b3:0e:68:4a:68:b4:0d:89:41:77:ce:
8a:63:0f:d1:1a:8b:5c:4f:3e:df:09:60:28:28:3c:4a:8b:2e:
e1:7a:24:75:2a:ff:e7:84:eb:bb:51:d0:12:1f:ab:c4:96:15:
53:6e:19:9b
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYzFboxY30f5BxJilbnUKPcZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MjFjOGZmMDQzN2Y3ZWRkODI5MTY2ZmRlMDM0NDZmODYx
MDlkODAwHhcNMjQwMTAxMTQzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWM2M2FlY2Y5ZmU4OTY0MzY3MWMxYzMyZDg0NGUzNDE2NDM1M2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSnwm9uZ6bU2xRLL+H4KSx13+EXE
gxEtrQlQ/5kdg7fmx0JLg4mkjoFggswd8DsEIMrtUBh1aiTt3bWUWyvU71eNRboL
3Nojf4aYYYbXKbUaMwilWQV4QPV4WECnFf+qUigKIHj+k/JtuaDbbwzGSRjzcYFT
H3T4+w/j85bAQd7IAf08X2AlCI+oyJ7IR+viaskqMo5wYq2z8djU4Z66y4Hp6lzA
ZKvfi9h25KaCU+xcKIjx9DPfSe1uLxAdc3XSCCk78pPQY+ecdOim5Td5+7U7bfWg
qHmL8CUieOfzFjdhFum0dhqDuLWGYxtChuvR4XF1j+Uc/qSdoadgeLJHuwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFKnGOuz5/olkNnHBwy2ETjQWQ1PEMB8GA1UdIwQY
MBaAFGghyP8EN/ft2CkWb94DRG+GEJ2AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMt
MjVhZTkyOTNmNmI0LzEvcWNZNjdQbi1pV1EyY2NIRExZUk9OQlpEVThRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMtMjVhZTkyOTNmNmI0
LzEvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQBW91KAwQA
W+MqAwQBwrseMA8EAgACMAkDBwAgAQZ4C4wwDQYJKoZIhvcNAQELBQADggEBAKIn
NNjyOIc38Rf+wJcVq3Fk9SGo0XhmiejDeOHdyjyEQbgWj4injcHk9Nyijpyw5Dok
osB2wV0RGxepTKHGKfCx9Mdm9ojHhew6GAN73xc3fkPMnSiPiKqgrGfeuvpWxazL
lWnVShcdvp8DYAGIAG3fnI3khDYSiGpDZGkP5ZzulIET84Rq44oPBXm65p03zf+a
Ol1GtsV6FUYT0xV716jhN2cz4DdDY5iQ3o9cCcu8QQtMDlK0BiM5qTcNEpfsfO+6
BZTgMCHpjgmbwTqzDmhKaLQNiUF3zopjD9Eai1xPPt8JYCgoPEqLLuF6JHUq/+eE
67tR0BIfq8SWFVNuGZs=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:58:31 2024 by rpki-client on console-ams.rpki-client.org