Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/fa5782-801c-4893-9328-3e0b84478b9d/1/e7KxXM4CUdFisrufTCe13N5dbqg.roa
File: e7KxXM4CUdFisrufTCe13N5dbqg.roa (raw, json)
Hash identifier: 2UPk0u1ZmM1tzhGlfNN9kDVpVAFExMD2zlnLwbgx8DU=
Subject key identifier: 7B:B2:B1:5C:CE:02:51:D1:62:B2:BB:9F:4C:27:B5:DC:DE:5D:6E:A8
Certificate issuer: /CN=400fe172a0c7e33c43ccaaee3a1ef42cd009e91e
Certificate serial: 018CC425425BD98401B6064A4E836A42186D
Authority key identifier: 40:0F:E1:72:A0:C7:E3:3C:43:CC:AA:EE:3A:1E:F4:2C:D0:09:E9:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA_hcqDH4zxDzKruOh70LNAJ6R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/fa5782-801c-4893-9328-3e0b84478b9d/1/e7KxXM4CUdFisrufTCe13N5dbqg.roa
Signing time: Mon 01 Jan 2024 08:30:25 +0000
ROA not before: Mon 01 Jan 2024 08:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8220
IP address blocks: 109.107.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/fa5782-801c-4893-9328-3e0b84478b9d/1/QA_hcqDH4zxDzKruOh70LNAJ6R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/fa5782-801c-4893-9328-3e0b84478b9d/1/QA_hcqDH4zxDzKruOh70LNAJ6R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA_hcqDH4zxDzKruOh70LNAJ6R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:42:5b:d9:84:01:b6:06:4a:4e:83:6a:42:18:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400fe172a0c7e33c43ccaaee3a1ef42cd009e91e
Validity
Not Before: Jan 1 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bb2b15cce0251d162b2bb9f4c27b5dcde5d6ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a7:d6:46:c9:ae:35:e0:71:24:b2:30:90:cb:
0f:50:16:e9:02:2b:43:ff:b7:ff:23:ce:26:3f:9d:
02:9b:25:ac:bc:2a:f8:50:33:2a:d2:ef:1c:5a:61:
3c:49:9c:72:3e:18:d7:64:80:5c:fa:be:1d:85:36:
bd:ce:68:d9:09:23:eb:40:7a:92:c5:04:39:ec:24:
c8:c5:ea:6e:58:59:ae:d9:4f:58:1d:d7:f2:51:f5:
ae:d0:00:f4:c0:33:24:ad:06:3e:af:f0:47:36:f4:
85:d4:27:f4:c5:c3:db:59:b7:fc:f1:7e:13:9c:1e:
25:bc:87:8b:1e:25:6b:30:ae:a1:91:84:ff:b7:09:
62:40:63:da:b0:14:55:f2:74:1b:50:ac:23:02:cf:
b7:e5:02:17:76:34:24:8f:fe:5f:aa:5a:72:ba:e3:
4e:d8:0c:7c:1c:d1:06:e7:70:68:36:f7:d2:d3:f2:
eb:f1:a8:d9:14:46:db:c7:ef:5f:2a:d1:1d:ba:24:
6f:ae:7d:0d:6b:2b:37:1c:74:5d:a3:47:db:ab:78:
10:b9:c2:ba:a9:79:2b:fa:8c:d8:c5:2d:ce:0f:db:
68:30:49:4f:fe:46:b8:1b:39:ba:4a:13:a0:e5:2a:
95:55:0b:15:38:64:99:79:2a:7f:e2:87:c3:58:e8:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B2:B1:5C:CE:02:51:D1:62:B2:BB:9F:4C:27:B5:DC:DE:5D:6E:A8
X509v3 Authority Key Identifier:
keyid:40:0F:E1:72:A0:C7:E3:3C:43:CC:AA:EE:3A:1E:F4:2C:D0:09:E9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA_hcqDH4zxDzKruOh70LNAJ6R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/fa5782-801c-4893-9328-3e0b84478b9d/1/e7KxXM4CUdFisrufTCe13N5dbqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/fa5782-801c-4893-9328-3e0b84478b9d/1/QA_hcqDH4zxDzKruOh70LNAJ6R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.145.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a7:de:ec:60:b3:83:ec:b2:7b:d7:fb:60:c6:03:9d:7b:e9:
d2:66:69:10:ff:49:3d:1a:93:0e:57:5c:d5:73:32:8f:e1:c0:
10:9c:b4:fb:5d:d2:b7:4e:84:94:60:00:52:71:12:54:e3:37:
b5:65:cb:d1:a4:02:68:95:5c:a0:e8:8b:7c:c3:40:6f:8f:20:
22:45:f6:80:77:8f:f1:34:38:0c:01:ad:7d:90:a8:dc:8c:d2:
b2:cd:88:7b:54:ae:8a:fb:c4:2e:cf:39:9d:99:5b:0b:21:ff:
87:f2:4f:62:ea:ff:3d:98:05:0c:3e:6f:77:df:95:c4:32:45:
16:5e:65:50:35:97:60:ed:50:70:94:64:8c:a2:fa:7c:33:fd:
d0:b5:02:eb:5d:dd:6b:19:28:b3:8b:24:aa:7a:ee:24:b4:f8:
7e:b5:83:83:c8:40:a5:4e:6b:19:8b:8c:52:8a:88:87:a6:73:
94:ce:b8:42:06:28:b3:97:d6:6f:fd:71:46:dc:94:d8:27:52:
12:e9:d7:f6:c4:55:e6:75:72:be:be:26:3d:3d:fd:46:35:3c:
cf:ea:78:72:d7:de:6e:00:85:bf:2f:de:f5:d2:13:b3:73:19:
b6:5c:60:07:32:3b:96:cc:30:47:80:f7:58:20:41:12:92:e3:
40:53:1f:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJUJb2YQBtgZKToNqQhhtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMGZlMTcyYTBjN2UzM2M0M2NjYWFlZTNhMWVmNDJjZDAw
OWU5MWUwHhcNMjQwMTAxMDgzMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmIyYjE1Y2NlMDI1MWQxNjJiMmJiOWY0YzI3YjVkY2RlNWQ2ZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26fWRsmuNeBxJLIwkMsPUBbpAitD
/7f/I84mP50CmyWsvCr4UDMq0u8cWmE8SZxyPhjXZIBc+r4dhTa9zmjZCSPrQHqS
xQQ57CTIxepuWFmu2U9YHdfyUfWu0AD0wDMkrQY+r/BHNvSF1Cf0xcPbWbf88X4T
nB4lvIeLHiVrMK6hkYT/twliQGPasBRV8nQbUKwjAs+35QIXdjQkj/5fqlpyuuNO
2Ax8HNEG53BoNvfS0/Lr8ajZFEbbx+9fKtEduiRvrn0Nays3HHRdo0fbq3gQucK6
qXkr+ozYxS3OD9toMElP/ka4Gzm6ShOg5SqVVQsVOGSZeSp/4ofDWOilfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHuysVzOAlHRYrK7n0wntdzeXW6oMB8GA1UdIwQY
MBaAFEAP4XKgx+M8Q8yq7joe9CzQCekeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUFfaGNxREg0enhEektydU9oNzBMTkFKNlI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mYTU3ODItODAxYy00ODkzLTkzMjgt
M2UwYjg0NDc4YjlkLzEvZTdLeFhNNENVZEZpc3J1ZlRDZTEzTjVkYnFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mYTU3ODItODAxYy00ODkzLTkzMjgtM2UwYjg0NDc4Yjlk
LzEvUUFfaGNxREg0enhEektydU9oNzBMTkFKNlI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuRMA0G
CSqGSIb3DQEBCwUAA4IBAQBip97sYLOD7LJ71/tgxgOde+nSZmkQ/0k9GpMOV1zV
czKP4cAQnLT7XdK3ToSUYABScRJU4ze1ZcvRpAJolVyg6It8w0BvjyAiRfaAd4/x
NDgMAa19kKjcjNKyzYh7VK6K+8QuzzmdmVsLIf+H8k9i6v89mAUMPm9335XEMkUW
XmVQNZdg7VBwlGSMovp8M/3QtQLrXd1rGSiziySqeu4ktPh+tYODyEClTmsZi4xS
ioiHpnOUzrhCBiizl9Zv/XFG3JTYJ1IS6df2xFXmdXK+viY9Pf1GNTzP6nhy195u
AIW/L9710hOzcxm2XGAHMjuWzDBHgPdYIEESkuNAUx8V
-----END CERTIFICATE-----
Generated at Tue Jun 4 10:51:46 2024 by rpki-client on console-ams.rpki-client.org