Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/QDbz92ELyqCHD7fQHSpvP83o2fo.roa
File: QDbz92ELyqCHD7fQHSpvP83o2fo.roa (raw, json)
Hash identifier: 0fo6yFs7GvpBlN5pzSvnUGEhFyGFMQBl78TlFIvkkcc=
Subject key identifier: 40:36:F3:F7:61:0B:CA:A0:87:0F:B7:D0:1D:2A:6F:3F:CD:E8:D9:FA
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 018CC5000F7B8E09F6D493D1FFB6150CAA5B
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/QDbz92ELyqCHD7fQHSpvP83o2fo.roa
Signing time: Mon 01 Jan 2024 12:29:24 +0000
ROA not before: Mon 01 Jan 2024 12:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 185.53.62.0/24 maxlen: 24
185.53.63.0/24 maxlen: 24
185.53.60.0/24 maxlen: 24
185.53.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0f:7b:8e:09:f6:d4:93:d1:ff:b6:15:0c:aa:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Jan 1 12:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4036f3f7610bcaa0870fb7d01d2a6f3fcde8d9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:96:f0:54:04:62:bf:da:6b:36:fe:92:c8:
b0:68:99:05:a3:5c:43:9f:1d:58:11:e0:57:1d:43:
06:09:eb:8b:16:41:b7:4d:8e:9e:7a:9d:ed:2d:ab:
2c:55:3d:07:f9:b4:29:bf:e7:cf:4f:58:f4:7c:ee:
a4:e2:ed:89:44:16:b5:94:25:fb:97:2b:9a:0c:4b:
7d:26:db:69:05:96:a4:35:d2:b3:d3:cb:1e:2b:54:
8e:f1:07:78:5b:c1:f7:4c:b6:78:92:bf:1f:ca:1e:
b8:3c:1f:e1:f9:63:cd:db:05:6f:db:01:dd:52:7e:
8b:4d:68:69:dc:10:19:3a:8d:d6:13:0c:fd:00:be:
59:61:86:77:2e:82:82:e4:f0:0d:70:8e:de:25:3a:
4c:62:c0:cc:3d:8f:fe:2b:a7:6f:5e:b4:1e:49:af:
ff:57:9c:85:63:22:0e:71:f8:4b:32:95:51:fb:0b:
be:f3:cf:83:98:c1:0d:2f:85:e3:38:b1:f6:a6:2f:
78:c7:18:c6:a7:04:e5:a8:ec:a2:29:23:68:64:65:
2b:b7:c8:d0:1c:49:93:c5:0e:e4:47:af:f8:ed:81:
db:6b:03:ba:f4:b4:2d:39:e7:37:0d:4b:7d:c4:d4:
59:c9:bb:cd:f7:c7:03:d2:37:6b:6b:b3:8c:ef:5c:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:36:F3:F7:61:0B:CA:A0:87:0F:B7:D0:1D:2A:6F:3F:CD:E8:D9:FA
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/QDbz92ELyqCHD7fQHSpvP83o2fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.60.0/22
Signature Algorithm: sha256WithRSAEncryption
31:ab:0b:30:98:f5:8c:2d:df:67:88:59:ed:29:1c:0e:c6:7c:
dd:c7:3e:e9:c8:3e:47:51:fe:db:c3:14:05:14:6d:4b:cc:e8:
00:c9:43:37:e8:f5:29:07:46:65:84:d2:7c:38:0e:a9:32:e1:
97:c7:1b:e8:0a:91:b2:ce:58:13:1a:23:e0:b0:1d:ca:34:d7:
3a:ca:e5:98:da:e0:7f:7a:fe:08:e1:9b:68:88:0f:aa:25:6a:
e1:14:eb:2f:b7:95:d0:09:32:59:50:0b:bb:26:16:de:f5:ff:
cd:9a:be:2e:bc:44:29:bf:40:37:85:a1:e9:dd:e6:ca:60:3f:
2f:04:7a:7b:0f:9a:68:15:ea:e2:b5:2f:3c:cc:ee:6c:d8:83:
bd:33:0e:09:a6:d8:55:f4:05:68:96:f3:d7:4d:8a:5e:d0:ef:
6c:a2:56:85:1d:cb:16:8f:81:31:b3:ef:22:03:1e:c9:28:ac:
b6:2f:b5:09:ee:e1:5c:00:fa:4d:ec:f5:50:58:6d:72:15:40:
0b:21:92:fa:d2:33:db:d6:f6:c7:b5:aa:09:40:3a:f2:eb:bc:
ac:9b:48:e7:6a:31:71:25:ab:ec:c6:7f:7e:6a:b9:52:2d:01:
ef:eb:1b:91:7d:39:2a:f9:9b:e9:cd:d7:26:d1:0e:ad:23:79:
b9:13:a4:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAA97jgn21JPR/7YVDKpbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWFiNWY4OGIxY2Q3NzI4ZjE3N2NjODZlMzNiY2ViOWUy
MjE0YjIwHhcNMjQwMTAxMTIyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDM2ZjNmNzYxMGJjYWEwODcwZmI3ZDAxZDJhNmYzZmNkZThkOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzKW8FQEYr/aazb+ksiwaJkFo1xD
nx1YEeBXHUMGCeuLFkG3TY6eep3tLassVT0H+bQpv+fPT1j0fO6k4u2JRBa1lCX7
lyuaDEt9JttpBZakNdKz08seK1SO8Qd4W8H3TLZ4kr8fyh64PB/h+WPN2wVv2wHd
Un6LTWhp3BAZOo3WEwz9AL5ZYYZ3LoKC5PANcI7eJTpMYsDMPY/+K6dvXrQeSa//
V5yFYyIOcfhLMpVR+wu+88+DmMENL4XjOLH2pi94xxjGpwTlqOyiKSNoZGUrt8jQ
HEmTxQ7kR6/47YHbawO69LQtOec3DUt9xNRZybvN98cD0jdra7OM71xwjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEA28/dhC8qghw+30B0qbz/N6Nn6MB8GA1UdIwQY
MBaAFD4atfiLHNdyjxd8yG4zvOueIhSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84YjJhYWYtMzQ1Yi00MGJiLWEzMWIt
ZmQ5OGZkNzBmMzRmLzEvUURiejkyRUx5cUNIRDdmUUhTcHZQODNvMmZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy84YjJhYWYtMzQ1Yi00MGJiLWEzMWItZmQ5OGZkNzBmMzRm
LzEvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTU8MA0G
CSqGSIb3DQEBCwUAA4IBAQAxqwswmPWMLd9niFntKRwOxnzdxz7pyD5HUf7bwxQF
FG1LzOgAyUM36PUpB0ZlhNJ8OA6pMuGXxxvoCpGyzlgTGiPgsB3KNNc6yuWY2uB/
ev4I4ZtoiA+qJWrhFOsvt5XQCTJZUAu7Jhbe9f/Nmr4uvEQpv0A3haHp3ebKYD8v
BHp7D5poFeritS88zO5s2IO9Mw4JpthV9AVolvPXTYpe0O9solaFHcsWj4Exs+8i
Ax7JKKy2L7UJ7uFcAPpN7PVQWG1yFUALIZL60jPb1vbHtaoJQDry67ysm0jnajFx
Javsxn9+arlSLQHv6xuRfTkq+Zvpzdcm0Q6tI3m5E6QZ
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:58 2024 by rpki-client on console-fra.rpki-client.org