Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/P-Qcy8vOsezQngzlLiRVV90jT1Q.roa
File: P-Qcy8vOsezQngzlLiRVV90jT1Q.roa (raw, json)
Hash identifier: nWVoA+8ptBx4qT9bPCgGvIRPIX2pKIxQNgo1z3kGDoQ=
Subject key identifier: 3F:E4:1C:CB:CB:CE:B1:EC:D0:9E:0C:E5:2E:24:55:57:DD:23:4F:54
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 018D839EA3B5265998D99D0228D3F0D1E9F0
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/P-Qcy8vOsezQngzlLiRVV90jT1Q.roa
Signing time: Wed 07 Feb 2024 12:50:28 +0000
ROA not before: Wed 07 Feb 2024 12:50:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34412
IP address blocks: 31.25.90.0/24 maxlen: 24
31.25.91.0/24 maxlen: 24
62.204.61.0/24 maxlen: 24
77.72.80.0/24 maxlen: 24
91.246.44.0/24 maxlen: 24
146.19.217.0/24 maxlen: 24
185.49.231.0/24 maxlen: 24
185.226.140.0/24 maxlen: 24
185.226.141.0/24 maxlen: 24
185.226.142.0/24 maxlen: 24
185.226.143.0/24 maxlen: 24
193.3.182.0/24 maxlen: 24
2a10:5740::/48 maxlen: 48
2a10:5740:1::/48 maxlen: 48
2a10:5740:2::/48 maxlen: 48
2a10:5740:3::/48 maxlen: 48
2a11:9b40::/48 maxlen: 48
2a11:9b40:1::/48 maxlen: 48
2a11:9b40:2::/48 maxlen: 48
2a11:9b40:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:83:9e:a3:b5:26:59:98:d9:9d:02:28:d3:f0:d1:e9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Feb 7 12:50:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fe41ccbcbceb1ecd09e0ce52e245557dd234f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:24:21:e1:84:08:35:36:b2:a7:02:2d:44:78:
79:1c:34:92:c2:5a:1e:ee:ae:fc:3f:27:89:97:32:
cc:17:48:f1:ce:56:fb:85:06:fa:63:2c:35:25:c5:
41:6e:e2:e7:a7:0e:7a:a1:22:25:99:04:9d:c2:59:
4e:8f:b3:7e:d0:94:2c:82:6f:86:2e:40:ae:d2:b0:
04:7e:ca:5b:34:15:bb:46:ee:45:e9:2c:0b:0e:25:
46:58:79:35:b1:68:c2:a3:a2:d4:16:f2:d7:e9:67:
e7:1c:82:e0:4f:ae:d2:d0:98:ca:ae:cf:2d:c9:35:
2a:c4:12:41:a6:b8:99:e9:5e:86:15:d7:3f:f9:de:
0f:c1:88:a8:57:b4:4f:ad:c1:8d:b3:56:41:f4:c5:
93:59:fb:c2:f6:58:5d:ae:67:f1:48:e7:b6:80:f7:
7a:c6:bc:0c:fb:5a:b2:87:cb:78:df:fc:44:cf:77:
0b:ea:07:a3:08:4f:f4:90:12:d8:e2:d3:52:d6:40:
b7:42:24:85:b8:11:fb:6f:21:ac:ab:4e:aa:15:9b:
44:80:91:2d:cc:77:60:5f:ae:e2:99:a2:60:3c:2f:
e9:1d:ff:53:9d:9d:9d:09:d7:2f:1c:84:48:50:2f:
92:d5:70:6e:0f:ea:78:52:20:81:c2:e0:f7:e5:df:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E4:1C:CB:CB:CE:B1:EC:D0:9E:0C:E5:2E:24:55:57:DD:23:4F:54
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/P-Qcy8vOsezQngzlLiRVV90jT1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.90.0/23
62.204.61.0/24
77.72.80.0/24
91.246.44.0/24
146.19.217.0/24
185.49.231.0/24
185.226.140.0/22
193.3.182.0/24
IPv6:
2a10:5740::/46
2a11:9b40::/46
Signature Algorithm: sha256WithRSAEncryption
3e:f2:6a:a8:bc:a7:90:14:e0:7f:87:12:39:ad:5b:b4:63:f9:
8c:cb:2a:0a:aa:e7:48:84:6b:79:37:88:dd:74:0d:71:9b:e7:
41:b6:4e:d5:2f:ca:38:52:df:cc:5c:4b:f5:cc:73:8d:c3:ab:
37:d9:a8:7d:09:53:7c:53:97:5a:30:7a:27:6e:e0:ad:a8:b4:
96:f0:f8:99:f7:5c:3b:ee:7e:51:9d:1c:e2:a1:89:1e:a2:51:
5a:f9:7f:5f:db:24:dd:bc:9c:e9:e7:4a:b5:00:3e:31:d2:25:
2c:3b:91:06:82:d8:f2:0c:4f:41:ea:a5:8f:72:21:ca:56:7e:
b5:78:4f:4d:68:1f:4e:5d:94:66:1d:5d:a6:00:3f:ee:65:7b:
99:82:56:4d:9e:19:13:ba:a2:10:39:61:b0:60:0d:af:0c:c1:
b6:7d:4d:e6:fa:e4:dc:8b:b9:d7:af:10:75:5c:45:e1:7e:18:
86:61:4a:63:5f:69:c7:60:8f:dc:fe:6f:4c:19:b2:40:b8:c8:
80:a2:3c:3d:bb:0a:10:17:f1:c7:08:f0:a0:dd:97:40:2d:72:
d6:9f:5d:53:37:bc:b1:06:f5:94:05:cf:3d:d0:95:07:bc:67:
2d:b9:ab:b8:31:07:32:9a:c9:c5:a7:80:9c:e6:56:97:b9:81:
16:39:58:13
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAY2DnqO1JlmY2Z0CKNPw0enwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZWRjNGMxOWUwMzNhMTY3ZTRhZjc5NWQ1NGUzNGI3MWVh
MDkzYzYwHhcNMjQwMjA3MTI1MDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmU0MWNjYmNiY2ViMWVjZDA5ZTBjZTUyZTI0NTU1N2RkMjM0ZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSQh4YQINTaypwItRHh5HDSSwloe
7q78PyeJlzLMF0jxzlb7hQb6Yyw1JcVBbuLnpw56oSIlmQSdwllOj7N+0JQsgm+G
LkCu0rAEfspbNBW7Ru5F6SwLDiVGWHk1sWjCo6LUFvLX6WfnHILgT67S0JjKrs8t
yTUqxBJBpriZ6V6GFdc/+d4PwYioV7RPrcGNs1ZB9MWTWfvC9lhdrmfxSOe2gPd6
xrwM+1qyh8t43/xEz3cL6gejCE/0kBLY4tNS1kC3QiSFuBH7byGsq06qFZtEgJEt
zHdgX67imaJgPC/pHf9TnZ2dCdcvHIRIUC+S1XBuD+p4UiCBwuD35d8X1QIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFD/kHMvLzrHs0J4M5S4kVVfdI09UMB8GA1UdIwQY
MBaAFB/txMGeAzoWfkr3ldVONLceoJPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kZjkxYzMtZDViOC00YTU4LWFlOWUt
MmY4NzliNTc1NGUxLzEvUC1RY3k4dk9zZXpRbmd6bExpUlZWOTBqVDFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kZjkxYzMtZDViOC00YTU4LWFlOWUtMmY4NzliNTc1NGUx
LzEvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjA2BAIAATAwAwQBHxlaAwQA
Psw9AwQATUhQAwQAW/YsAwQAkhPZAwQAuTHnAwQCueKMAwQAwQO2MBgEAgACMBID
BwIqEFdAAAADBwIqEZtAAAAwDQYJKoZIhvcNAQELBQADggEBAD7yaqi8p5AU4H+H
EjmtW7Rj+YzLKgqq50iEa3k3iN10DXGb50G2TtUvyjhS38xcS/XMc43DqzfZqH0J
U3xTl1oweidu4K2otJbw+Jn3XDvuflGdHOKhiR6iUVr5f1/bJN28nOnnSrUAPjHS
JSw7kQaC2PIMT0HqpY9yIcpWfrV4T01oH05dlGYdXaYAP+5le5mCVk2eGRO6ohA5
YbBgDa8MwbZ9Teb65NyLudevEHVcReF+GIZhSmNfacdgj9z+b0wZskC4yICiPD27
ChAX8ccI8KDdl0AtctafXVM3vLEG9ZQFzz3QlQe8Zy25q7gxBzKaycWngJzmVpe5
gRY5WBM=
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:42:29 2024 by rpki-client on console-ams.rpki-client.org