Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/Q85No0cucmbw3ezNegauGZxtAqU.roa
File: Q85No0cucmbw3ezNegauGZxtAqU.roa (raw, json)
Hash identifier: vqsn7tP6yxTA4Yb+eILmZirl1kEtoXJvvERBsrxko3Y=
Subject key identifier: 43:CE:4D:A3:47:2E:72:66:F0:DD:EC:CD:7A:06:AE:19:9C:6D:02:A5
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 018CC6B7924DFA07F0895982B7E4ABD4F363
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/Q85No0cucmbw3ezNegauGZxtAqU.roa
Signing time: Mon 01 Jan 2024 20:29:28 +0000
ROA not before: Mon 01 Jan 2024 20:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58001
IP address blocks: 88.218.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:92:4d:fa:07:f0:89:59:82:b7:e4:ab:d4:f3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Jan 1 20:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43ce4da3472e7266f0ddeccd7a06ae199c6d02a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:18:a4:20:60:92:15:4d:1c:98:e5:76:f7:
ee:bf:89:7d:cc:ed:ab:4b:1c:84:ff:48:7f:db:d4:
3b:3e:94:99:fc:e2:3f:c1:bc:b7:6a:57:3f:c3:e2:
74:1a:62:46:07:c5:82:cc:a7:8e:8a:c7:39:b7:bb:
45:c2:a4:0b:4b:3f:e4:56:6e:de:53:4c:20:45:01:
89:94:f0:1c:bb:46:59:fb:e7:ce:34:0d:68:ab:70:
93:e5:46:cb:05:72:9c:74:49:9b:78:2e:a2:20:50:
0d:40:27:83:26:5a:e3:86:85:4b:35:e5:66:cb:09:
c0:8a:8e:86:17:b5:83:82:a7:f2:6d:03:ca:77:e1:
1b:84:dd:53:b4:9a:51:8e:c2:a9:fe:c8:13:a4:ee:
95:52:49:95:91:91:e7:c1:39:de:ce:19:3d:46:db:
d4:91:36:f8:fa:58:8b:23:ed:d5:73:60:20:94:28:
e3:08:c4:ee:56:ca:3e:2c:f4:a3:35:e7:23:dc:27:
19:41:b0:7e:af:a9:66:b4:5e:ea:5d:ed:2d:ab:54:
27:89:88:d1:4b:dc:68:f1:41:db:b8:97:72:2d:28:
1c:37:40:22:30:1c:da:3c:71:43:db:db:f1:12:12:
8b:89:e8:41:2f:1d:57:d9:65:20:f4:d6:4c:0f:07:
8d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CE:4D:A3:47:2E:72:66:F0:DD:EC:CD:7A:06:AE:19:9C:6D:02:A5
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/Q85No0cucmbw3ezNegauGZxtAqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.114.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f2:40:ae:8e:01:49:67:a2:7e:a1:f1:f4:0b:51:82:0c:a1:
91:ad:68:0d:ae:fe:1d:c6:0f:44:8d:51:c4:6a:9b:a9:52:db:
d6:c3:33:ba:4e:40:69:1c:87:7b:67:5f:f0:8c:85:b2:01:72:
d2:0b:17:bf:ac:8b:af:54:9b:56:56:86:48:28:71:8c:a2:ea:
61:a6:b9:dd:4d:1c:c4:51:89:c3:e1:1e:a8:6b:02:ad:60:4a:
d9:02:9b:0c:f4:66:1d:62:f4:44:e7:53:bc:67:17:3b:e3:67:
41:ae:3f:fd:bd:e3:3d:f6:9e:dd:d5:d9:f9:c4:dc:90:e8:af:
c0:d8:52:ba:c5:3b:17:cf:09:e7:2e:a6:b5:02:ad:db:fc:d5:
ea:61:80:86:ee:f7:4a:8f:7d:17:9d:b8:9b:c1:0d:35:c2:97:
ec:f5:d7:f3:94:7b:38:02:fc:b9:4d:14:b0:c6:92:a8:0a:4b:
c9:6b:91:be:1a:a8:cc:e5:8b:52:c0:e1:ba:dd:6a:98:a4:be:
f8:8b:a2:2f:cf:0b:6c:ca:de:1f:c3:06:7b:5e:22:6b:dd:3d:
86:d6:a1:a4:3a:3d:5a:e7:e0:88:09:0c:8b:9f:40:bf:2a:89:
3a:00:f3:98:5d:54:6a:29:27:72:4e:18:de:25:c2:2f:a1:f2:
9c:98:52:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt5JN+gfwiVmCt+Sr1PNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiN2FhYWJiMjNjZDI0NWJmYTgyOGZiMDI1MjFkNjQ0YzZk
NWI1NjYwHhcNMjQwMTAxMjAyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2NlNGRhMzQ3MmU3MjY2ZjBkZGVjY2Q3YTA2YWUxOTljNmQwMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUAYpCBgkhVNHJjldvfuv4l9zO2r
SxyE/0h/29Q7PpSZ/OI/wby3alc/w+J0GmJGB8WCzKeOisc5t7tFwqQLSz/kVm7e
U0wgRQGJlPAcu0ZZ++fONA1oq3CT5UbLBXKcdEmbeC6iIFANQCeDJlrjhoVLNeVm
ywnAio6GF7WDgqfybQPKd+EbhN1TtJpRjsKp/sgTpO6VUkmVkZHnwTnezhk9RtvU
kTb4+liLI+3Vc2AglCjjCMTuVso+LPSjNecj3CcZQbB+r6lmtF7qXe0tq1QniYjR
S9xo8UHbuJdyLSgcN0AiMBzaPHFD29vxEhKLiehBLx1X2WUg9NZMDweNEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEPOTaNHLnJm8N3szXoGrhmcbQKlMB8GA1UdIwQY
MBaAFKt6qrsjzSRb+oKPsCUh1kTG1bVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMt
OWVhZDgxZGEyZTQ0LzEvUTg1Tm8wY3VjbWJ3M2V6TmVnYXVHWnh0QXFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMtOWVhZDgxZGEyZTQ0
LzEvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNpyMA0G
CSqGSIb3DQEBCwUAA4IBAQBN8kCujgFJZ6J+ofH0C1GCDKGRrWgNrv4dxg9EjVHE
apupUtvWwzO6TkBpHId7Z1/wjIWyAXLSCxe/rIuvVJtWVoZIKHGMouphprndTRzE
UYnD4R6oawKtYErZApsM9GYdYvRE51O8Zxc742dBrj/9veM99p7d1dn5xNyQ6K/A
2FK6xTsXzwnnLqa1Aq3b/NXqYYCG7vdKj30XnbibwQ01wpfs9dfzlHs4Avy5TRSw
xpKoCkvJa5G+GqjM5YtSwOG63WqYpL74i6Ivzwtsyt4fwwZ7XiJr3T2G1qGkOj1a
5+CICQyLn0C/Kok6APOYXVRqKSdyThjeJcIvofKcmFIk
-----END CERTIFICATE-----
Generated at Mon May 20 15:25:00 2024 by rpki-client on console-ams.rpki-client.org