Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/i801O4J0IT9F4HJmCG_QxWKb5UM.roa
File: i801O4J0IT9F4HJmCG_QxWKb5UM.roa (raw, json)
Hash identifier: dX1RstGwfc6yo9+voarCcHzD2FE2OGv0AicAAOX4y0c=
Subject key identifier: 8B:CD:35:3B:82:74:21:3F:45:E0:72:66:08:6F:D0:C5:62:9B:E5:43
Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial: 018D5B9F8D59FF838547BEBDE15F9B5194D8
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/i801O4J0IT9F4HJmCG_QxWKb5UM.roa
Signing time: Tue 30 Jan 2024 18:26:39 +0000
ROA not before: Tue 30 Jan 2024 18:26:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.132.3.0/24 maxlen: 24
89.106.204.0/24 maxlen: 24
195.128.162.0/24 maxlen: 24
195.128.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5b:9f:8d:59:ff:83:85:47:be:bd:e1:5f:9b:51:94:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Validity
Not Before: Jan 30 18:26:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bcd353b8274213f45e07266086fd0c5629be543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:42:b9:7e:7c:fa:bd:52:3d:13:5b:c2:15:
00:0c:bb:35:d8:ef:24:bb:4c:a9:7a:7a:72:49:c0:
d6:2a:99:08:6c:28:29:1c:64:ec:26:3e:ca:7e:f4:
02:82:fd:db:3e:f2:95:4e:83:ee:6d:94:a3:a5:b6:
0f:c3:b4:07:56:9a:ae:e1:b2:cf:01:9b:cb:9c:9c:
9f:98:23:71:24:69:05:9e:26:d2:8b:7b:b9:f7:b7:
31:9f:f7:a5:0e:c9:ae:fa:c5:41:6d:ca:44:d5:4e:
12:36:71:8f:e8:ed:ad:dc:47:b6:a8:3f:f4:94:ea:
5e:2a:ba:2c:c2:a7:37:8f:bc:fa:1c:80:5c:40:05:
b4:e9:68:fb:b2:da:96:15:08:42:d3:e5:b5:5d:6d:
7d:8e:dc:ef:97:8f:2b:3c:55:7e:db:42:88:29:a3:
0a:7c:9f:5d:68:57:80:1a:c1:58:22:ef:bb:5e:3a:
25:f2:4a:8f:93:27:e0:44:27:fe:ca:6a:52:45:2f:
60:33:d3:36:cd:2c:79:29:0e:f2:8e:5a:29:43:32:
34:a1:1e:19:52:b4:b1:b9:56:ee:30:09:5d:1a:b2:
e2:ff:3e:f0:46:f9:b9:d0:cb:9e:fc:38:f6:d2:5f:
31:e2:b3:fd:6e:1a:16:72:58:d1:21:bd:df:e2:79:
de:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CD:35:3B:82:74:21:3F:45:E0:72:66:08:6F:D0:C5:62:9B:E5:43
X509v3 Authority Key Identifier:
keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/i801O4J0IT9F4HJmCG_QxWKb5UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.3.0/24
89.106.204.0/24
195.128.162.0/24
195.128.178.0/24
Signature Algorithm: sha256WithRSAEncryption
35:46:bc:ed:7d:e2:03:d0:b1:2a:a7:13:90:7a:6a:a2:77:65:
82:f4:9b:3b:68:af:72:cc:a2:c9:95:63:56:1b:a3:95:af:18:
ee:70:cd:09:59:31:21:38:38:82:52:75:67:50:00:62:32:ab:
05:dd:8a:30:ee:96:09:b8:31:95:b4:d8:df:c3:72:d8:e5:9e:
53:20:56:cc:77:7c:87:5a:a1:21:c8:86:9c:8e:0f:44:9d:bc:
43:1e:f4:73:80:81:8f:6f:35:23:c8:99:88:72:39:8f:17:f5:
e3:fe:dc:d3:da:69:bf:eb:0b:4e:84:ad:f5:d9:7a:cf:25:54:
70:7f:9c:21:db:80:71:70:8a:4e:fd:54:67:f9:f8:1d:0c:f4:
09:06:4c:ac:e2:e8:24:1d:d6:8a:c8:d6:29:0f:d5:35:0d:8c:
b5:69:26:cd:c4:8e:bf:95:b2:7c:41:68:d7:32:fb:56:9e:c4:
96:a5:81:cc:d8:8c:4b:77:f0:78:fa:26:78:ed:78:fe:b3:93:
93:f3:cd:de:25:ef:d3:8f:57:40:16:9e:d1:08:e7:43:b3:77:
cd:3f:b7:4a:50:b6:36:8a:ba:61:55:94:38:87:89:53:24:a3:
83:23:fd:54:93:fd:26:d0:de:62:0a:00:c0:45:16:42:54:25:
f8:fa:56:ce
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY1bn41Z/4OFR7694V+bUZTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOTYyMzBlNThkZWNjMGNiY2ZiMTVmNTZhYTY0ZGVkZDFm
Mzg5ZjUwHhcNMjQwMTMwMTgyNjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmNkMzUzYjgyNzQyMTNmNDVlMDcyNjYwODZmZDBjNTYyOWJlNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5BCuX58+r1SPRNbwhUADLs12O8k
u0ypenpyScDWKpkIbCgpHGTsJj7KfvQCgv3bPvKVToPubZSjpbYPw7QHVpqu4bLP
AZvLnJyfmCNxJGkFnibSi3u597cxn/elDsmu+sVBbcpE1U4SNnGP6O2t3Ee2qD/0
lOpeKroswqc3j7z6HIBcQAW06Wj7stqWFQhC0+W1XW19jtzvl48rPFV+20KIKaMK
fJ9daFeAGsFYIu+7Xjol8kqPkyfgRCf+ympSRS9gM9M2zSx5KQ7yjlopQzI0oR4Z
UrSxuVbuMAldGrLi/z7wRvm50Mue/Dj20l8x4rP9bhoWcljRIb3f4nnewwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIvNNTuCdCE/ReByZghv0MVim+VDMB8GA1UdIwQY
MBaAFEGWIw5Y3swMvPsV9WqmTe3R84n1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQt
MmJlZmZmZDU3ZmI3LzEvaTgwMU80SjBJVDlGNEhKbUNHX1F4V0tiNVVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQtMmJlZmZmZDU3ZmI3
LzEvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYQDAwQA
WWrMAwQAw4CiAwQAw4CyMA0GCSqGSIb3DQEBCwUAA4IBAQA1RrztfeID0LEqpxOQ
emqid2WC9Js7aK9yzKLJlWNWG6OVrxjucM0JWTEhODiCUnVnUABiMqsF3Yow7pYJ
uDGVtNjfw3LY5Z5TIFbMd3yHWqEhyIacjg9EnbxDHvRzgIGPbzUjyJmIcjmPF/Xj
/tzT2mm/6wtOhK312XrPJVRwf5wh24BxcIpO/VRn+fgdDPQJBkys4ugkHdaKyNYp
D9U1DYy1aSbNxI6/lbJ8QWjXMvtWnsSWpYHM2IxLd/B4+iZ47Xj+s5OT883eJe/T
j1dAFp7RCOdDs3fNP7dKULY2irphVZQ4h4lTJKODI/1Uk/0m0N5iCgDARRZCVCX4
+lbO
-----END CERTIFICATE-----
Generated at Fri May 10 14:38:53 2024 by rpki-client on console-ams.rpki-client.org