Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/QBn0JF0621XnyFvVfX5TLlOiruo.roa
File: QBn0JF0621XnyFvVfX5TLlOiruo.roa (raw, json)
Hash identifier: pn/pylyWJvOvLb4fwvLmwRJySR6+JYG4CYqYmwDjc4Q=
Subject key identifier: 40:19:F4:24:5D:3A:DB:55:E7:C8:5B:D5:7D:7E:53:2E:53:A2:AE:EA
Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Certificate serial: 018CC6B7A69CC777A9E941CE3B41CA14E046
Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/QBn0JF0621XnyFvVfX5TLlOiruo.roa
Signing time: Mon 01 Jan 2024 20:29:33 +0000
ROA not before: Mon 01 Jan 2024 20:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212689
IP address blocks: 37.10.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a6:9c:c7:77:a9:e9:41:ce:3b:41:ca:14:e0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Validity
Not Before: Jan 1 20:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4019f4245d3adb55e7c85bd57d7e532e53a2aeea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:39:88:24:1a:47:7d:68:3f:a8:2b:a1:63:ab:
11:c5:78:cc:fd:0e:83:21:88:3c:67:9e:11:bf:cd:
2f:c7:e5:41:a8:38:9c:db:35:5f:79:06:56:82:08:
7d:df:5d:c9:0e:44:1e:33:d2:b3:a0:df:b9:e3:f3:
13:e7:48:c3:33:43:3b:97:c4:9f:c4:a8:dd:8e:75:
51:94:8b:47:bc:c8:71:6f:b1:4d:c5:4a:d4:3a:fd:
4d:18:68:95:21:af:d9:fa:d4:ba:25:9d:6c:d5:64:
e7:a5:e7:34:67:fa:f4:f5:fe:75:87:4d:c5:11:79:
ba:46:3e:11:d6:8a:ca:ff:18:58:65:a6:bf:39:5a:
11:a0:3b:a1:f0:5f:03:e7:74:48:62:bf:be:74:de:
aa:a3:d6:e1:14:81:13:7e:79:f9:e5:c9:a7:28:05:
2f:54:c4:f4:53:b9:78:c8:e8:49:7c:d9:b3:c2:08:
d3:cc:e9:7e:89:55:91:e8:2f:46:c9:40:89:48:dc:
66:59:78:77:b5:86:70:30:6e:65:5c:f5:d4:27:c7:
a9:e6:67:8f:6b:49:19:69:0b:8c:29:65:16:c9:f2:
99:c9:c2:d7:4c:c8:5a:77:d8:28:cd:b7:27:f0:96:
79:99:af:2b:03:f5:78:74:f0:2b:8e:93:4e:aa:0f:
b0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:19:F4:24:5D:3A:DB:55:E7:C8:5B:D5:7D:7E:53:2E:53:A2:AE:EA
X509v3 Authority Key Identifier:
keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/QBn0JF0621XnyFvVfX5TLlOiruo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.10.8.0/22
Signature Algorithm: sha256WithRSAEncryption
ef:9e:86:24:e0:85:9f:d7:fd:6d:86:28:e1:0f:aa:91:b3:ae:
13:1f:1e:48:07:8e:3b:c7:55:07:33:d1:8e:b1:e9:8d:87:44:
5c:f4:ef:57:b7:88:89:d2:2c:52:ba:37:83:34:6a:7e:1c:97:
25:1c:5f:3c:5f:2c:c1:3e:85:1a:18:8c:ce:63:cf:b4:aa:84:
de:e8:e5:97:d8:8b:b3:3b:95:8f:cc:1b:95:e9:35:7d:94:b7:
74:17:d7:ed:1b:3f:49:24:78:d4:1c:bf:4e:e6:46:ba:01:ee:
e2:7a:81:e8:c5:51:83:0f:be:ed:0d:c3:85:51:f7:0b:ba:69:
dd:12:3a:2e:81:83:90:58:57:1f:3f:8e:6f:91:cb:31:b6:82:
f8:99:e2:94:d7:b3:7a:2c:45:c3:51:1d:5f:04:1c:45:d5:ef:
66:c5:6e:a5:9d:23:8c:bc:84:5b:5b:ef:bb:17:2e:45:49:d6:
f6:dc:cb:32:95:50:ea:31:cf:d1:34:ee:06:cc:00:19:70:e3:
68:31:cb:c0:45:17:00:80:e2:11:d8:7d:7b:7f:1f:45:20:2b:
d4:2e:f5:3e:60:d3:04:7b:39:f6:c1:8f:f8:e9:5d:5b:3f:55:
20:c4:6e:87:ae:4b:d3:53:ad:3d:b5:cf:23:72:fa:ec:d1:a1:
18:65:22:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt6acx3ep6UHOO0HKFOBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTc4NWRlNjJkY2Y5ZTc5MzBiYWJkN2IxZDM5YzU4NTNk
MTk0NGYwHhcNMjQwMTAxMjAyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDE5ZjQyNDVkM2FkYjU1ZTdjODViZDU3ZDdlNTMyZTUzYTJhZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjmIJBpHfWg/qCuhY6sRxXjM/Q6D
IYg8Z54Rv80vx+VBqDic2zVfeQZWggh9313JDkQeM9KzoN+54/MT50jDM0M7l8Sf
xKjdjnVRlItHvMhxb7FNxUrUOv1NGGiVIa/Z+tS6JZ1s1WTnpec0Z/r09f51h03F
EXm6Rj4R1orK/xhYZaa/OVoRoDuh8F8D53RIYr++dN6qo9bhFIETfnn55cmnKAUv
VMT0U7l4yOhJfNmzwgjTzOl+iVWR6C9GyUCJSNxmWXh3tYZwMG5lXPXUJ8ep5meP
a0kZaQuMKWUWyfKZycLXTMhad9gozbcn8JZ5ma8rA/V4dPArjpNOqg+wEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEAZ9CRdOttV58hb1X1+Uy5Toq7qMB8GA1UdIwQY
MBaAFNeXhd5i3Pnnkwur17HTnFhT0ZRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83Zjk3MjgtOTU1OS00MjYzLWJjZmEt
NzU4NTVkYjcxNTFmLzEvUUJuMEpGMDYyMVhueUZ2VmZYNVRMbE9pcnVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83Zjk3MjgtOTU1OS00MjYzLWJjZmEtNzU4NTVkYjcxNTFm
LzEvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJQoIMA0G
CSqGSIb3DQEBCwUAA4IBAQDvnoYk4IWf1/1thijhD6qRs64THx5IB447x1UHM9GO
semNh0Rc9O9Xt4iJ0ixSujeDNGp+HJclHF88XyzBPoUaGIzOY8+0qoTe6OWX2Iuz
O5WPzBuV6TV9lLd0F9ftGz9JJHjUHL9O5ka6Ae7ieoHoxVGDD77tDcOFUfcLumnd
EjougYOQWFcfP45vkcsxtoL4meKU17N6LEXDUR1fBBxF1e9mxW6lnSOMvIRbW++7
Fy5FSdb23MsylVDqMc/RNO4GzAAZcONoMcvARRcAgOIR2H17fx9FICvULvU+YNME
ezn2wY/46V1bP1UgxG6HrkvTU609tc8jcvrs0aEYZSLq
-----END CERTIFICATE-----
Generated at Sat May 18 14:22:58 2024 by rpki-client on console-fra.rpki-client.org