Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/qzIBuYrS-oQmdurG74Gd1Lg1Ttg.roa
File: qzIBuYrS-oQmdurG74Gd1Lg1Ttg.roa (raw, json)
Hash identifier: 68fRzmPROZ35tytutrvGKazTOX1aB7HviRXNbsIFKSk=
Subject key identifier: AB:32:01:B9:8A:D2:FA:84:26:76:EA:C6:EF:81:9D:D4:B8:35:4E:D8
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 018CC649E1297DD34D399FDDA9B00040CF97
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/qzIBuYrS-oQmdurG74Gd1Lg1Ttg.roa
Signing time: Mon 01 Jan 2024 18:29:39 +0000
ROA not before: Mon 01 Jan 2024 18:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44703
IP address blocks: 195.229.12.240/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e1:29:7d:d3:4d:39:9f:dd:a9:b0:00:40:cf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Jan 1 18:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab3201b98ad2fa842676eac6ef819dd4b8354ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:60:65:a8:25:55:de:05:be:cf:2a:2c:73:4f:
c8:c3:0c:14:71:13:78:33:36:0d:5e:55:10:97:c3:
47:55:c4:da:0d:84:df:fc:8f:e8:e9:11:41:8b:bc:
22:33:7f:0f:52:e8:6c:f3:0a:8b:0f:ac:34:42:09:
f1:59:08:9a:c0:7b:60:9f:8d:5e:e1:9c:c3:53:fc:
ae:97:d3:f2:08:12:86:23:64:be:bb:8c:87:d9:3b:
2b:d8:0a:08:3c:84:f1:15:2f:1c:11:4f:a9:13:7c:
56:84:4a:d1:d8:6b:f8:34:1e:4f:5c:0c:75:9e:a5:
ee:81:6d:23:a1:42:14:8b:e8:6b:54:74:39:1b:f4:
60:12:c7:90:8f:58:9c:9a:c7:89:19:1a:62:4d:fe:
eb:45:6d:eb:48:77:62:26:e1:da:bc:db:37:04:37:
9f:91:a0:ff:82:98:93:75:7c:ef:19:ae:e4:5e:81:
19:91:a5:e4:43:4a:c9:ef:7c:33:2e:78:cb:d1:ac:
93:79:4d:3c:24:9a:21:a3:a9:18:5d:c9:5e:b2:74:
d4:ec:db:03:a5:08:04:cd:60:32:db:29:45:e3:87:
a5:a6:0a:5f:4c:b4:f3:0b:64:5e:6e:1a:80:5f:19:
da:a7:a2:a7:3a:2f:50:58:6c:64:94:19:5d:12:93:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:32:01:B9:8A:D2:FA:84:26:76:EA:C6:EF:81:9D:D4:B8:35:4E:D8
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/qzIBuYrS-oQmdurG74Gd1Lg1Ttg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.229.12.240/29
Signature Algorithm: sha256WithRSAEncryption
07:2e:cf:5d:9e:1f:a1:b9:90:5c:fa:0b:b0:c4:c5:22:38:50:
b2:e3:4f:79:b6:74:61:82:7d:ca:97:19:72:83:47:dd:d7:47:
7d:2f:eb:22:9b:02:54:1f:f8:ca:f3:4b:6d:0d:60:1b:f9:ed:
c5:ca:a9:ee:05:5d:22:e0:dc:a0:09:26:0d:96:79:8f:7c:38:
50:66:a4:5c:e9:6f:22:11:95:54:46:ca:a8:20:3e:71:c9:a5:
73:aa:fb:84:48:e0:c1:9c:cd:90:89:0a:1f:64:87:5d:51:40:
31:c7:48:8f:83:55:4c:ff:80:d0:e5:3b:b3:86:65:13:ed:f0:
93:78:2f:66:c5:ea:95:04:50:1d:b9:0b:0d:b4:1a:b0:05:44:
9a:f6:ac:69:6b:a7:80:f2:1e:7e:f8:c6:ad:67:33:5d:db:1a:
67:29:d1:19:eb:ec:b2:49:9c:9c:7c:d5:aa:05:4f:01:71:da:
c0:be:f8:f3:dc:92:e7:f1:b6:40:2b:70:2d:33:01:57:b3:d8:
63:27:fe:9d:fd:13:7f:c7:75:be:5e:43:c4:2c:34:6c:f9:fe:
f2:be:f8:da:69:84:bf:94:ab:01:7f:77:8e:06:63:30:f5:84:
b5:7b:08:64:85:79:f5:0d:c8:54:01:2c:df:e6:d1:f7:89:47:
58:ee:e2:bb
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzGSeEpfdNNOZ/dqbAAQM+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx
YmRjYzkwHhcNMjQwMTAxMTgyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjMyMDFiOThhZDJmYTg0MjY3NmVhYzZlZjgxOWRkNGI4MzU0ZWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2BlqCVV3gW+zyosc0/IwwwUcRN4
MzYNXlUQl8NHVcTaDYTf/I/o6RFBi7wiM38PUuhs8wqLD6w0QgnxWQiawHtgn41e
4ZzDU/yul9PyCBKGI2S+u4yH2Tsr2AoIPITxFS8cEU+pE3xWhErR2Gv4NB5PXAx1
nqXugW0joUIUi+hrVHQ5G/RgEseQj1icmseJGRpiTf7rRW3rSHdiJuHavNs3BDef
kaD/gpiTdXzvGa7kXoEZkaXkQ0rJ73wzLnjL0ayTeU08JJoho6kYXclesnTU7NsD
pQgEzWAy2ylF44elpgpfTLTzC2RebhqAXxnap6KnOi9QWGxklBldEpPJaQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKsyAbmK0vqEJnbqxu+BndS4NU7YMB8GA1UdIwQY
MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt
NjFhZmI2NmQxZThjLzEvcXpJQnVZclMtb1FtZHVyRzc0R2QxTGcxVHRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj
LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDw+UM8DAN
BgkqhkiG9w0BAQsFAAOCAQEABy7PXZ4fobmQXPoLsMTFIjhQsuNPebZ0YYJ9ypcZ
coNH3ddHfS/rIpsCVB/4yvNLbQ1gG/ntxcqp7gVdIuDcoAkmDZZ5j3w4UGakXOlv
IhGVVEbKqCA+ccmlc6r7hEjgwZzNkIkKH2SHXVFAMcdIj4NVTP+A0OU7s4ZlE+3w
k3gvZsXqlQRQHbkLDbQasAVEmvasaWungPIefvjGrWczXdsaZynRGevsskmcnHzV
qgVPAXHawL7489yS5/G2QCtwLTMBV7PYYyf+nf0Tf8d1vl5DxCw0bPn+8r742mmE
v5SrAX93jgZjMPWEtXsIZIV59Q3IVAEs3+bR94lHWO7iuw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:02:38 2024 by rpki-client on console-ams.rpki-client.org