Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/BqS1vbMcWf2Pe3LIEEjZmnSi8Dg.roa
File: BqS1vbMcWf2Pe3LIEEjZmnSi8Dg.roa (raw, json)
Hash identifier: /VEm6e9WBmMxLfWQ8YWG7PpX8ytUI3aPcNZX+KIK4vI=
Subject key identifier: 06:A4:B5:BD:B3:1C:59:FD:8F:7B:72:C8:10:48:D9:9A:74:A2:F0:38
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 018CC801A566C9D9C37CEB4C7052CFE7E7B7
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/BqS1vbMcWf2Pe3LIEEjZmnSi8Dg.roa
Signing time: Tue 02 Jan 2024 02:30:00 +0000
ROA not before: Tue 02 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60294
IP address blocks: 82.198.64.0/19 maxlen: 19
185.65.192.0/22 maxlen: 22
2a03:1d60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a5:66:c9:d9:c3:7c:eb:4c:70:52:cf:e7:e7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Jan 2 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06a4b5bdb31c59fd8f7b72c81048d99a74a2f038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:03:4e:6c:cd:9c:5d:59:b1:e8:b3:92:b4:82:
3f:ef:8b:56:2a:1e:4a:3c:14:30:e9:97:ff:36:f9:
a4:d6:84:7a:78:ea:ce:ff:c3:1a:7b:72:7c:81:6d:
23:e1:c0:bd:4f:cc:b6:32:8b:16:7a:46:9b:e1:92:
1b:b6:f8:6a:a0:d3:5a:a0:b3:73:03:ef:d9:5b:fe:
96:28:cd:c8:0f:29:c8:af:6b:c0:41:7e:fa:fb:c3:
ee:b8:fa:47:8a:ba:a6:d1:52:2e:3e:9a:42:a8:f9:
2b:2e:bc:8b:0e:e7:e2:2a:da:aa:ab:1d:48:bd:a7:
cf:b1:71:1a:d8:1d:9d:9e:1d:9a:c0:85:57:b4:f1:
ee:69:86:4b:89:aa:88:6b:b4:b6:d7:83:2a:a3:59:
fc:e4:d2:e7:9a:09:5c:7d:7f:28:a4:de:d9:ce:a3:
8f:0b:1f:79:b3:c2:b9:9a:92:a6:54:ad:58:aa:f8:
94:ce:a1:10:b6:2d:fc:0d:6c:5e:32:74:44:dc:e3:
e9:28:e5:6d:94:ff:e0:60:ea:a4:4b:40:50:5c:d3:
df:39:eb:d0:39:ea:b8:56:3b:69:b8:0c:c0:21:fb:
72:5d:de:1c:26:76:9d:f2:99:1e:b8:95:8d:74:fb:
95:15:3d:c7:2d:15:65:aa:fe:81:83:c0:99:31:d6:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A4:B5:BD:B3:1C:59:FD:8F:7B:72:C8:10:48:D9:9A:74:A2:F0:38
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/BqS1vbMcWf2Pe3LIEEjZmnSi8Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.64.0/19
185.65.192.0/22
IPv6:
2a03:1d60::/32
Signature Algorithm: sha256WithRSAEncryption
8c:dc:59:f5:bb:fa:c1:38:0b:f3:54:4b:2b:4b:4b:2c:49:7d:
93:67:88:26:31:2a:db:13:18:95:7f:f0:a3:ee:61:58:bb:36:
ce:4e:4d:6d:30:70:bd:bf:20:93:b1:45:25:43:38:16:b1:af:
de:7c:ce:f7:80:13:85:b4:dd:b8:b6:44:8e:09:02:79:16:dc:
38:c6:c8:ac:93:a5:93:9f:92:40:dd:d7:4c:68:7d:e9:26:e9:
c6:ee:07:3d:38:22:f2:a8:03:40:da:9b:c2:9b:93:b6:10:73:
69:a9:1e:5c:b9:09:a9:ba:75:03:cc:be:9a:dd:8e:72:cb:0c:
d9:7f:b3:27:68:82:8b:fc:3f:f6:aa:b0:5c:1f:d7:01:91:2d:
90:96:cc:16:d2:17:16:44:c9:25:d7:f8:f4:bf:ab:7e:c0:12:
36:71:35:46:cd:27:b8:6c:38:28:d0:5e:f4:e4:2b:01:b6:fd:
34:77:df:65:ae:2e:38:47:06:d4:29:b8:e4:c6:1e:53:a5:04:
81:23:88:d2:fb:ab:e8:4e:89:de:a2:93:de:bd:df:07:c8:bc:
2d:c4:91:bf:c8:30:3a:3d:7b:95:d2:14:18:c6:2e:21:b3:59:
56:9e:e5:de:89:83:14:7e:1e:b1:04:50:3b:55:9e:fd:5b:bb:
54:4f:51:52
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzIAaVmydnDfOtMcFLP5+e3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNTM4MjljMDYxYThhZjI2ZGU5NDZmYzllODE4ODVjNzRj
MTc0YzcwHhcNMjQwMTAyMDIzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmE0YjViZGIzMWM1OWZkOGY3YjcyYzgxMDQ4ZDk5YTc0YTJmMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggNObM2cXVmx6LOStII/74tWKh5K
PBQw6Zf/Nvmk1oR6eOrO/8Mae3J8gW0j4cC9T8y2MosWekab4ZIbtvhqoNNaoLNz
A+/ZW/6WKM3IDynIr2vAQX76+8PuuPpHirqm0VIuPppCqPkrLryLDufiKtqqqx1I
vafPsXEa2B2dnh2awIVXtPHuaYZLiaqIa7S214Mqo1n85NLnmglcfX8opN7ZzqOP
Cx95s8K5mpKmVK1YqviUzqEQti38DWxeMnRE3OPpKOVtlP/gYOqkS0BQXNPfOevQ
Oeq4VjtpuAzAIftyXd4cJnad8pkeuJWNdPuVFT3HLRVlqv6Bg8CZMdYtYwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAaktb2zHFn9j3tyyBBI2Zp0ovA4MB8GA1UdIwQY
MBaAFGNTgpwGGorybelG/J6BiFx0wXTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84Y2Y5NjItMDc0Zi00MWFjLWFlMmEt
ODE2MjAzZDIxZDEyLzEvQnFTMXZiTWNXZjJQZTNMSUVFalptblNpOERnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS84Y2Y5NjItMDc0Zi00MWFjLWFlMmEtODE2MjAzZDIxZDEy
LzEvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFUsZAAwQC
uUHAMA0EAgACMAcDBQAqAx1gMA0GCSqGSIb3DQEBCwUAA4IBAQCM3Fn1u/rBOAvz
VEsrS0ssSX2TZ4gmMSrbExiVf/Cj7mFYuzbOTk1tMHC9vyCTsUUlQzgWsa/efM73
gBOFtN24tkSOCQJ5Ftw4xsisk6WTn5JA3ddMaH3pJunG7gc9OCLyqANA2pvCm5O2
EHNpqR5cuQmpunUDzL6a3Y5yywzZf7MnaIKL/D/2qrBcH9cBkS2QlswW0hcWRMkl
1/j0v6t+wBI2cTVGzSe4bDgo0F705CsBtv00d99lri44RwbUKbjkxh5TpQSBI4jS
+6voToneopPevd8HyLwtxJG/yDA6PXuV0hQYxi4hs1lWnuXeiYMUfh6xBFA7VZ79
W7tUT1FS
-----END CERTIFICATE-----
Generated at Fri Sep 20 19:15:17 2024 by rpki-client on console-fra.rpki-client.org