Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/qGtINjw7ym1IUy1T7KiGwA5qq1A.roa
File: qGtINjw7ym1IUy1T7KiGwA5qq1A.roa (raw, json)
Hash identifier: lus/AADXdk3y7KR5fGWwIXSi5eG9voEBf2CdnITwKzc=
Subject key identifier: A8:6B:48:36:3C:3B:CA:6D:48:53:2D:53:EC:A8:86:C0:0E:6A:AB:50
Certificate issuer: /CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Certificate serial: 01912BF5A5DFF88BD998549A1CCFFA199CF8
Authority key identifier: B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/qGtINjw7ym1IUy1T7KiGwA5qq1A.roa
Signing time: Wed 07 Aug 2024 08:30:04 +0000
ROA not before: Wed 07 Aug 2024 08:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203525
IP address blocks: 185.131.248.0/22 maxlen: 22
2a06:df00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2b:f5:a5:df:f8:8b:d9:98:54:9a:1c:cf:fa:19:9c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Validity
Not Before: Aug 7 08:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a86b48363c3bca6d48532d53eca886c00e6aab50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:3e:25:23:bb:e0:83:e5:a1:36:f0:11:0a:
e8:f2:34:35:2b:46:7c:6e:df:73:6a:00:51:da:f9:
2a:3f:c9:01:05:8a:a4:bb:47:ee:95:9f:f9:b8:3e:
9f:85:0f:d1:94:bf:aa:a5:bd:d5:49:9d:23:6a:03:
7f:1e:28:de:24:88:3c:da:fe:51:4a:41:f2:a5:48:
74:80:eb:6a:cf:38:33:25:12:1f:72:5b:54:e4:5c:
f8:e0:71:02:b4:06:cb:45:f6:cb:db:02:8e:95:bf:
c8:83:b8:87:3b:7f:87:3e:36:6a:db:a9:0e:db:3d:
e4:bc:38:9b:11:0f:84:fc:4d:f0:f2:3e:d0:04:87:
bc:72:00:fa:44:33:04:1b:d1:79:7e:77:4d:e8:87:
60:30:48:16:d4:6f:0c:94:e9:9c:23:ec:c7:0e:b6:
5a:92:97:f3:87:4c:fd:0b:90:9c:3e:8c:8b:28:84:
f9:11:69:32:1e:c8:a7:62:9e:a0:4a:3c:0f:ff:08:
de:5c:22:1e:ed:9f:a3:e0:96:ad:d3:ec:2d:97:75:
81:98:4c:56:cb:05:c1:5a:77:57:25:e2:83:fd:34:
21:4e:50:a0:38:96:24:9e:f2:cd:71:e1:e0:d6:e5:
b4:b3:89:3c:37:d6:b9:ab:31:68:8b:be:93:4e:6c:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6B:48:36:3C:3B:CA:6D:48:53:2D:53:EC:A8:86:C0:0E:6A:AB:50
X509v3 Authority Key Identifier:
keyid:B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/qGtINjw7ym1IUy1T7KiGwA5qq1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.248.0/22
IPv6:
2a06:df00::/29
Signature Algorithm: sha256WithRSAEncryption
ae:24:10:01:a7:97:6d:9e:06:ef:42:4c:cc:18:57:bc:8d:e3:
64:af:cc:a1:9c:a2:8e:6e:ac:2a:18:59:84:56:97:59:e7:54:
73:dc:6b:02:99:65:55:0d:43:08:44:0d:ba:4f:aa:ff:f0:b3:
02:ce:8d:05:3b:52:02:95:d8:9c:96:3b:b4:93:54:37:d7:73:
09:48:af:44:4b:a2:d3:2d:ca:31:fe:32:5b:12:00:eb:75:1a:
d7:e0:b2:01:89:31:54:7e:0a:92:b7:af:63:dd:67:e3:7b:1b:
ed:27:a4:7e:bb:8a:53:26:f6:a4:ec:98:99:27:80:95:a8:0a:
30:bd:93:5f:e4:e7:79:ac:39:f1:63:79:00:22:e7:0c:12:2e:
cb:aa:4b:82:1f:01:70:de:81:bc:b0:65:08:fe:e6:c4:ee:68:
32:22:6d:fb:37:65:c4:59:6a:f6:41:e6:9a:92:8f:f3:be:b8:
8c:1f:bc:18:8d:96:c1:a9:b8:a0:d7:5d:5c:35:43:9d:3f:95:
66:25:78:76:fe:7f:27:db:46:51:f2:ce:6d:81:92:6f:3e:0c:
e1:d6:0f:16:ce:7a:74:4b:c4:da:49:81:42:4d:ae:f4:5a:f4:
bc:33:61:74:f2:61:61:15:a2:bd:ae:75:59:09:07:86:cf:68:
98:be:e3:78
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZEr9aXf+IvZmFSaHM/6GZz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTQwYzVmOGUzYzdiYzI0YTFhZDRjODQwNjQxNTI2M2Vi
NmJhYmYwHhcNMjQwODA3MDgzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODZiNDgzNjNjM2JjYTZkNDg1MzJkNTNlY2E4ODZjMDBlNmFhYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtac+JSO74IPloTbwEQro8jQ1K0Z8
bt9zagBR2vkqP8kBBYqku0fulZ/5uD6fhQ/RlL+qpb3VSZ0jagN/HijeJIg82v5R
SkHypUh0gOtqzzgzJRIfcltU5Fz44HECtAbLRfbL2wKOlb/Ig7iHO3+HPjZq26kO
2z3kvDibEQ+E/E3w8j7QBIe8cgD6RDMEG9F5fndN6IdgMEgW1G8MlOmcI+zHDrZa
kpfzh0z9C5CcPoyLKIT5EWkyHsinYp6gSjwP/wjeXCIe7Z+j4Jat0+wtl3WBmExW
ywXBWndXJeKD/TQhTlCgOJYknvLNceHg1uW0s4k8N9a5qzFoi76TTmyH8wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKhrSDY8O8ptSFMtU+yohsAOaqtQMB8GA1UdIwQY
MBaAFLUUDF+OPHvCShrUyEBkFSY+trq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJRTVg0NDhlOEpLR3RUSVFHUVZKajYydXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85NGI3M2EtYTNkNS00MGM0LTkyMjQt
Y2RjMjQ5MDM5M2E2LzEvcUd0SU5qdzd5bTFJVXkxVDdLaUd3QTVxcTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85NGI3M2EtYTNkNS00MGM0LTkyMjQtY2RjMjQ5MDM5M2E2
LzEvdFJRTVg0NDhlOEpLR3RUSVFHUVZKajYydXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYP4MA0E
AgACMAcDBQMqBt8AMA0GCSqGSIb3DQEBCwUAA4IBAQCuJBABp5dtngbvQkzMGFe8
jeNkr8yhnKKObqwqGFmEVpdZ51Rz3GsCmWVVDUMIRA26T6r/8LMCzo0FO1ICldic
lju0k1Q313MJSK9ES6LTLcox/jJbEgDrdRrX4LIBiTFUfgqSt69j3WfjexvtJ6R+
u4pTJvak7JiZJ4CVqAowvZNf5Od5rDnxY3kAIucMEi7LqkuCHwFw3oG8sGUI/ubE
7mgyIm37N2XEWWr2Qeaako/zvriMH7wYjZbBqbig111cNUOdP5VmJXh2/n8n20ZR
8s5tgZJvPgzh1g8Wznp0S8TaSYFCTa70WvS8M2F08mFhFaK9rnVZCQeGz2iYvuN4
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:56 2024 by rpki-client on console-fra.rpki-client.org