Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/qY_KiWcFkaoGBm31kUgk-q_fcZM.roa
File: qY_KiWcFkaoGBm31kUgk-q_fcZM.roa (raw, json)
Hash identifier: yFCaQr8YTorqEavE/RjwGh6MLMDH5Wo3ZXMISFtQrnQ=
Subject key identifier: A9:8F:CA:89:67:05:91:AA:06:06:6D:F5:91:48:24:FA:AF:DF:71:93
Certificate issuer: /CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Certificate serial: 018CC5DBFD8CC42E87F3EA6ACD366E50EBB6
Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/qY_KiWcFkaoGBm31kUgk-q_fcZM.roa
Signing time: Mon 01 Jan 2024 16:29:38 +0000
ROA not before: Mon 01 Jan 2024 16:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 94.247.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:fd:8c:c4:2e:87:f3:ea:6a:cd:36:6e:50:eb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Validity
Not Before: Jan 1 16:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a98fca89670591aa06066df5914824faafdf7193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:80:58:8c:92:5b:c2:28:de:56:3a:4d:be:
96:5e:4b:25:e9:ec:5b:d9:8b:3b:98:60:81:57:2d:
4d:26:e2:7b:b0:e9:71:e3:36:79:3a:82:2f:c9:c4:
7a:e1:34:d7:df:8a:38:45:27:4b:b1:c7:68:27:23:
3d:f8:d6:32:77:2b:33:4e:3f:c2:81:8e:4a:25:79:
94:dd:24:a9:54:10:1b:37:23:83:8a:75:80:db:14:
5f:a1:be:ca:8d:30:f9:04:e7:55:87:26:8d:7c:21:
d4:90:f7:44:ea:b9:cb:1c:e7:13:79:a1:18:ea:4c:
23:c9:d2:fd:86:cc:ef:75:d1:71:a0:ca:45:e1:86:
4b:41:1d:dd:06:51:3e:cb:85:cb:74:40:25:1b:1d:
5f:87:ac:63:b5:ae:13:8e:8d:ff:c1:0c:6d:a7:ed:
a9:5e:da:b4:14:53:1b:15:95:ba:7a:fa:b9:23:db:
fc:02:2c:70:1b:dc:a3:12:0c:ba:81:5f:ee:1d:22:
b7:49:b7:4e:29:05:fe:c6:ee:1d:2a:26:da:0a:d2:
0e:92:25:82:4e:9b:e2:c5:9a:95:58:49:5f:a5:60:
ed:3e:db:54:8d:5b:bd:fe:88:88:73:f8:99:1a:cf:
6e:59:15:ad:92:04:a1:e9:aa:11:8d:4a:df:81:cc:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8F:CA:89:67:05:91:AA:06:06:6D:F5:91:48:24:FA:AF:DF:71:93
X509v3 Authority Key Identifier:
keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/qY_KiWcFkaoGBm31kUgk-q_fcZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:1a:4d:ba:ac:bd:0e:a6:86:2c:5d:6c:7b:4b:24:ef:d3:24:
dd:83:87:cd:70:9b:2d:19:db:9b:69:ff:04:de:9c:d5:3f:da:
23:9c:f3:52:3d:25:4a:4e:c1:a9:bd:d4:d5:b8:f1:a6:d5:a2:
bb:53:03:f5:75:10:b7:3e:5a:d5:10:ad:ff:1a:0a:0d:5f:46:
69:48:aa:66:47:70:50:bc:bb:86:c6:93:e2:a3:51:b0:dd:b2:
31:d9:d1:0f:56:a3:3b:80:df:e2:68:28:f0:61:47:2f:e0:03:
ef:a0:65:ce:4e:88:47:e0:12:4b:2d:29:57:ef:41:e3:62:f0:
51:cd:b8:28:e0:17:90:5e:70:a3:aa:05:64:33:46:86:6f:d3:
96:0a:ce:c0:c8:33:75:b4:c1:3b:2a:c4:eb:3b:db:5d:f5:3b:
ec:0d:10:9a:f3:98:47:3e:4c:50:6c:d8:2b:ea:b9:e7:3c:3c:
db:d1:51:74:5e:bb:2a:de:f1:20:e8:97:b4:39:d0:cd:a1:92:
d2:0d:81:db:84:aa:65:f8:e5:30:15:2a:d7:77:92:7e:99:16:
82:44:33:9a:9d:a3:a6:ef:f0:cd:ed:9b:78:37:cc:42:83:e6:
79:cf:7b:77:6d:3e:d3:8e:f2:8d:bb:6f:8d:e2:dd:36:b9:0e:
f7:95:a6:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF2/2MxC6H8+pqzTZuUOu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMjRlM2IzMjhkMTE5MWVmZTExNTUyMWM2ZmVjNmFkYjU1
NmRjMzYwHhcNMjQwMTAxMTYyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOThmY2E4OTY3MDU5MWFhMDYwNjZkZjU5MTQ4MjRmYWFmZGY3MTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeWAWIySW8Io3lY6Tb6WXksl6exb
2Ys7mGCBVy1NJuJ7sOlx4zZ5OoIvycR64TTX34o4RSdLscdoJyM9+NYydyszTj/C
gY5KJXmU3SSpVBAbNyODinWA2xRfob7KjTD5BOdVhyaNfCHUkPdE6rnLHOcTeaEY
6kwjydL9hszvddFxoMpF4YZLQR3dBlE+y4XLdEAlGx1fh6xjta4Tjo3/wQxtp+2p
Xtq0FFMbFZW6evq5I9v8AixwG9yjEgy6gV/uHSK3SbdOKQX+xu4dKibaCtIOkiWC
TpvixZqVWElfpWDtPttUjVu9/oiIc/iZGs9uWRWtkgSh6aoRjUrfgcxIsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKmPyolnBZGqBgZt9ZFIJPqv33GTMB8GA1UdIwQY
MBaAFO8k47Mo0Rke/hFVIcb+xq21Vtw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYt
MDgyMzBjYzUwZWE5LzEvcVlfS2lXY0ZrYW9HQm0zMWtVZ2stcV9mY1pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYtMDgyMzBjYzUwZWE5
LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXveNMA0G
CSqGSIb3DQEBCwUAA4IBAQAcGk26rL0OpoYsXWx7SyTv0yTdg4fNcJstGdubaf8E
3pzVP9ojnPNSPSVKTsGpvdTVuPGm1aK7UwP1dRC3PlrVEK3/GgoNX0ZpSKpmR3BQ
vLuGxpPio1Gw3bIx2dEPVqM7gN/iaCjwYUcv4APvoGXOTohH4BJLLSlX70HjYvBR
zbgo4BeQXnCjqgVkM0aGb9OWCs7AyDN1tME7KsTrO9td9TvsDRCa85hHPkxQbNgr
6rnnPDzb0VF0Xrsq3vEg6Je0OdDNoZLSDYHbhKpl+OUwFSrXd5J+mRaCRDOanaOm
7/DN7Zt4N8xCg+Z5z3t3bT7TjvKNu2+N4t02uQ73laaz
-----END CERTIFICATE-----
Generated at Sat May 18 08:10:19 2024 by rpki-client on console-fra.rpki-client.org