Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/Q4Qrx1lY6u0J4PiNMw4U2fr_So0.roa
File: Q4Qrx1lY6u0J4PiNMw4U2fr_So0.roa (raw, json)
Hash identifier: W3gKTD/mHARhaxz1PjRkFgpz96KBtCOx16uPIa0UPls=
Subject key identifier: 43:84:2B:C7:59:58:EA:ED:09:E0:F8:8D:33:0E:14:D9:FA:FF:4A:8D
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 018CC3B6E917A353023F969E0BB7359D6C20
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/Q4Qrx1lY6u0J4PiNMw4U2fr_So0.roa
Signing time: Mon 01 Jan 2024 06:29:53 +0000
ROA not before: Mon 01 Jan 2024 06:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50613
IP address blocks: 193.107.84.0/22 maxlen: 22
82.221.129.0/24 maxlen: 24
82.221.128.0/24 maxlen: 24
82.221.131.0/24 maxlen: 24
82.221.130.0/24 maxlen: 24
82.221.128.0/19 maxlen: 19
82.221.136.0/24 maxlen: 24
82.221.139.0/24 maxlen: 24
82.221.141.0/24 maxlen: 24
82.221.143.0/24 maxlen: 24
82.221.146.0/24 maxlen: 24
82.221.96.0/19 maxlen: 19
82.221.100.0/23 maxlen: 23
82.221.105.0/24 maxlen: 24
82.221.104.0/24 maxlen: 24
82.221.111.0/24 maxlen: 24
82.221.113.0/24 maxlen: 24
2a02:f48:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e9:17:a3:53:02:3f:96:9e:0b:b7:35:9d:6c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Jan 1 06:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43842bc75958eaed09e0f88d330e14d9faff4a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:8e:d7:f7:06:a9:38:72:84:0b:4b:ab:71:
41:fb:11:95:36:44:e9:5b:51:69:04:77:c9:ba:2c:
cb:07:c3:b1:dc:cc:c5:88:ec:4a:48:53:51:24:8c:
5b:ec:98:8c:43:0c:bc:73:e5:7d:81:93:dd:c5:34:
1d:4c:ce:fe:7f:7e:12:8c:91:05:17:6c:9d:c6:68:
72:f1:28:ae:f0:e8:ce:96:1c:09:21:11:85:91:f6:
6a:1a:7c:17:79:7a:94:74:9a:be:f7:26:80:46:ed:
d9:86:7a:ae:e7:d3:4a:60:31:ac:63:70:07:47:50:
9a:e9:ba:4c:70:ce:3d:3d:93:b1:25:bd:9b:2b:de:
f8:bd:f6:5e:d3:52:cc:e3:02:4a:a0:0b:b8:84:56:
16:1e:01:9c:7f:c7:6a:8e:64:1d:7c:9c:8e:f8:fd:
e9:19:13:ac:38:23:6c:ec:61:7d:1f:e9:29:19:ed:
5f:aa:5a:27:d5:e0:10:df:c0:30:ac:98:c6:c3:c9:
fe:d9:75:09:8e:62:13:a6:6f:c9:70:63:ec:ae:aa:
8b:e9:2f:87:d7:0d:2b:da:50:cb:bb:31:30:2d:cc:
2a:96:14:65:7b:51:50:56:a9:86:56:9c:eb:ee:7e:
72:47:10:0c:57:e2:0e:21:be:ba:2a:64:c5:2c:00:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:84:2B:C7:59:58:EA:ED:09:E0:F8:8D:33:0E:14:D9:FA:FF:4A:8D
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/Q4Qrx1lY6u0J4PiNMw4U2fr_So0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.221.96.0-82.221.159.255
193.107.84.0/22
IPv6:
2a02:f48:2000::/40
Signature Algorithm: sha256WithRSAEncryption
9c:c6:69:6b:68:1b:b1:cd:c4:80:4e:32:c9:52:9c:02:4c:8b:
d6:ff:85:cc:01:30:e7:91:a2:e2:e6:4e:e7:ed:2c:86:bf:35:
2c:58:63:f3:27:6d:ad:b5:85:e3:26:be:ac:81:8d:d4:53:b4:
26:7f:15:83:bf:e4:c3:86:01:16:65:22:5c:48:5b:0d:e3:4a:
a5:da:a8:6e:7d:04:93:76:54:d9:7d:10:58:18:a5:f4:b7:ba:
7c:41:d6:76:57:56:fa:fb:43:08:3f:5b:12:5c:27:23:81:42:
06:04:f8:97:55:b8:dd:f2:f5:06:12:91:40:f5:c2:08:43:b9:
6e:bc:4e:0e:e0:39:c3:ad:0a:5c:10:91:a6:5f:d3:13:0b:e9:
76:10:b0:4f:c3:84:33:ef:75:10:67:a1:21:49:10:c9:62:03:
8e:28:05:b7:d9:e7:9a:ee:49:5e:09:1c:fb:e8:6e:7a:34:06:
0f:b5:15:08:5a:fa:59:92:c8:38:6c:b1:b7:10:9a:76:90:ec:
13:91:9c:b6:b7:f1:61:07:6b:ce:4f:13:2d:3a:7a:fe:7c:0f:
d1:29:f2:54:de:a3:36:fb:8d:44:9a:76:53:f1:67:1c:15:87:
86:0f:a3:8c:98:78:df:8a:a4:34:e6:48:92:f6:2e:c0:59:b5:
f2:6c:19:32
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYzDtukXo1MCP5aeC7c1nWwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODAyNWM3ZGUwNDAwZTBmM2M4OGQ0YTEyMmEzMTdlMzJj
NWUyMWMwHhcNMjQwMTAxMDYyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mzg0MmJjNzU5NThlYWVkMDllMGY4OGQzMzBlMTRkOWZhZmY0YThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8CO1/cGqThyhAtLq3FB+xGVNkTp
W1FpBHfJuizLB8Ox3MzFiOxKSFNRJIxb7JiMQwy8c+V9gZPdxTQdTM7+f34SjJEF
F2ydxmhy8Siu8OjOlhwJIRGFkfZqGnwXeXqUdJq+9yaARu3Zhnqu59NKYDGsY3AH
R1Ca6bpMcM49PZOxJb2bK974vfZe01LM4wJKoAu4hFYWHgGcf8dqjmQdfJyO+P3p
GROsOCNs7GF9H+kpGe1fqlon1eAQ38AwrJjGw8n+2XUJjmITpm/JcGPsrqqL6S+H
1w0r2lDLuzEwLcwqlhRle1FQVqmGVpzr7n5yRxAMV+IOIb66KmTFLAAvCwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFEOEK8dZWOrtCeD4jTMOFNn6/0qNMB8GA1UdIwQY
MBaAFECAJcfeBADg88iNShIqMX4yxeIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUt
ZmVlMmU4ZDQwODRmLzEvUTRRcngxbFk2dTBKNFBpTk13NFUyZnJfU28wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUtZmVlMmU4ZDQwODRm
LzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAaBAIAATAUMAwDBAVS3WAD
BAVS3YADBALBa1QwDgQCAAIwCAMGACoCD0ggMA0GCSqGSIb3DQEBCwUAA4IBAQCc
xmlraBuxzcSATjLJUpwCTIvW/4XMATDnkaLi5k7n7SyGvzUsWGPzJ22ttYXjJr6s
gY3UU7QmfxWDv+TDhgEWZSJcSFsN40ql2qhufQSTdlTZfRBYGKX0t7p8QdZ2V1b6
+0MIP1sSXCcjgUIGBPiXVbjd8vUGEpFA9cIIQ7luvE4O4DnDrQpcEJGmX9MTC+l2
ELBPw4Qz73UQZ6EhSRDJYgOOKAW32eea7kleCRz76G56NAYPtRUIWvpZksg4bLG3
EJp2kOwTkZy2t/FhB2vOTxMtOnr+fA/RKfJU3qM2+41EmnZT8WccFYeGD6OMmHjf
iqQ05kiS9i7AWbXybBky
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:50:20 2024 by rpki-client on console-fra.rpki-client.org